Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/1d0f2d2b-ac99-3253-b7d0-ff1d016dc6ed.roa
File:                     1d0f2d2b-ac99-3253-b7d0-ff1d016dc6ed.roa (raw, json)
Hash identifier:          YMzwqkLsQcXBH6NRl+pcWTB9/JPlX8JCSnCQCyclgbA=
Subject key identifier:   10:8F:C1:A5:75:27:91:AB:4D:04:CB:0E:3B:2C:6E:4B:12:8D:D1:C9
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584D4C1B15DC4BC36E7CD76E2900
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/1d0f2d2b-ac99-3253-b7d0-ff1d016dc6ed.roa
Signing time:             Thu 26 Mar 2026 14:17:35 +0000
ROA not before:           Thu 26 Mar 2026 14:17:35 +0000
ROA not after:            Wed 24 Jun 2026 14:17:35 +0000
asID:                     396562
IP address blocks:        192.41.162.30/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 01 Apr 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:4c:1b:15:dc:4b:c3:6e:7c:d7:6e:29:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Mar 26 14:17:35 2026 GMT
            Not After : Jun 24 14:17:35 2026 GMT
        Subject: CN=8fe225c6-c0b3-4faf-8887-4e9b51f0b725
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:92:5c:6f:5e:9c:08:54:b6:ec:0a:43:d4:4d:93:
                    9f:f5:2f:e5:91:20:3f:40:c4:d9:71:69:0d:a5:8e:
                    6c:dd:5e:41:9c:06:30:0b:be:f8:0a:f7:d5:9a:06:
                    9e:cf:6c:76:52:7a:8b:8d:71:6d:85:91:78:5e:5a:
                    ec:f3:fe:63:e1:54:f1:44:a5:13:33:69:c0:d7:11:
                    9a:63:99:d6:b9:b2:28:8e:2b:e9:55:6d:89:b2:cb:
                    58:55:cd:51:af:02:18:7f:a0:51:38:d5:41:04:23:
                    8d:01:fa:c8:7f:f9:3b:09:f3:3b:30:69:70:02:28:
                    33:4f:e0:75:ef:c1:37:7e:a2:04:e5:17:54:e0:21:
                    5f:41:72:1b:75:98:fd:4f:1a:50:d6:bb:f9:c1:4f:
                    9c:16:87:84:46:90:39:af:2d:71:f6:10:0a:7b:92:
                    ea:8a:c9:1b:13:43:ea:23:24:8d:7c:35:3a:d0:2e:
                    df:b2:d3:98:e1:93:b7:a9:38:92:b0:5f:32:f7:ac:
                    6c:e3:19:ab:89:fc:eb:8b:71:ef:c4:cf:f0:39:eb:
                    ba:cf:e2:71:5a:ee:f6:8a:fa:da:04:e8:e5:04:da:
                    47:81:9a:0d:af:27:0d:81:e7:4c:21:5b:21:f3:42:
                    9d:4b:21:b5:24:de:3a:53:aa:4b:32:53:a7:b4:77:
                    1f:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                10:8F:C1:A5:75:27:91:AB:4D:04:CB:0E:3B:2C:6E:4B:12:8D:D1:C9
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/1d0f2d2b-ac99-3253-b7d0-ff1d016dc6ed.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.41.162.30/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         15:70:f0:14:d8:42:b4:0a:0d:ec:fe:34:c6:f3:3d:a0:e3:29:
         76:38:d7:ef:c2:4c:e5:1f:ea:c2:a5:f8:0a:4a:14:e1:e8:92:
         cc:ee:44:0f:45:34:a5:b8:dd:09:16:0e:cc:d9:62:70:44:87:
         16:ca:e7:93:d7:55:ed:63:eb:90:c0:3c:77:3d:80:e6:90:57:
         ac:1c:8d:98:19:1d:bc:1e:4e:f4:1b:b6:b4:2a:fc:39:50:8e:
         0e:50:ef:6d:83:53:1d:30:9e:e9:b2:18:64:42:a9:99:20:d7:
         05:af:6c:44:36:7b:88:e1:46:61:09:dc:40:7d:26:a4:7a:4d:
         67:94:c0:ed:c4:27:74:51:ef:e4:4c:db:30:c1:a6:39:f0:4a:
         a5:0a:0a:92:c7:ac:32:a4:27:0a:c2:f0:66:78:a8:f3:5a:62:
         e9:59:96:66:ed:d3:88:36:5b:27:95:dd:97:df:e0:be:4d:4b:
         14:8f:23:b4:4b:1a:87:2c:6b:40:d3:a4:51:65:77:5e:4b:37:
         6e:74:49:4a:ea:9b:02:01:00:bf:ad:48:81:dd:bd:81:8c:c9:
         c7:5e:8b:b1:1d:08:b2:5e:9a:01:e4:f5:9d:ee:5b:b9:fe:92:
         03:1f:97:a2:31:dd:42:27:2b:7c:d6:10:11:4a:9d:b4:b1:97:
         ae:55:ee:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 22:36:51 2026 by rpki-client