Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/1e3aab93-192a-323e-b6b9-129bd553ade7.roa
File:                     1e3aab93-192a-323e-b6b9-129bd553ade7.roa (raw, json)
Hash identifier:          /Nk+LCGN9J8Ti/KnB38XYUa8GwEKMdT5cQPgA4kDZE0=
Subject key identifier:   F6:EC:C2:51:DF:84:C7:B4:9E:4B:46:D3:17:17:37:AB:45:61:EF:66
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584EC907268F8DC0D3EB4B553000
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/1e3aab93-192a-323e-b6b9-129bd553ade7.roa
Signing time:             Mon 10 Aug 2026 01:00:12 +0000
ROA not before:           Mon 10 Aug 2026 01:00:12 +0000
ROA not after:            Sun 08 Nov 2026 02:00:12 +0000
asID:                     396605
IP address blocks:        192.35.51.30/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 21 Aug 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:c9:07:26:8f:8d:c0:d3:eb:4b:55:30:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Aug 10 01:00:12 2026 GMT
            Not After : Nov  8 02:00:12 2026 GMT
        Subject: CN=a0ac5521-d20e-480f-b569-235a5f892153
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:85:82:bf:81:00:fc:05:0a:49:96:f6:f7:34:1c:
                    1f:e0:87:18:8b:73:22:ad:c1:16:77:84:39:42:4f:
                    e3:b1:93:73:e7:93:31:a5:09:ec:ee:87:8f:39:4c:
                    1c:a0:da:bc:98:cb:94:cd:42:ca:1b:33:8f:be:e0:
                    00:b3:a0:92:c0:a2:0b:3a:85:32:92:71:73:9e:0e:
                    f5:36:ae:1f:e6:db:6e:3c:30:ed:28:46:cf:21:ff:
                    48:5e:88:83:49:b4:2d:29:e1:fc:ed:71:14:60:19:
                    85:8e:bb:1d:49:b9:7d:88:e6:89:ea:7d:63:c0:e2:
                    84:26:b8:df:4f:a7:9e:fb:4a:92:9a:5b:2c:1d:e2:
                    3f:4b:7b:e1:4a:63:62:99:75:7a:bb:aa:96:fb:c1:
                    f8:60:fb:92:94:f6:ff:f5:03:c1:18:f8:9e:c7:65:
                    b0:77:25:ce:27:b0:c4:91:88:97:e6:00:b6:60:3a:
                    0a:ed:9f:12:6f:5f:09:68:3c:b5:28:64:37:ab:75:
                    8a:2c:36:c2:8f:b1:90:8d:e2:24:e7:e2:7e:21:86:
                    cc:d9:4c:bd:68:eb:16:45:9c:5d:98:db:74:63:80:
                    90:88:5d:17:78:ad:36:fc:f7:0c:30:33:36:e8:04:
                    1e:4d:28:0b:44:e4:8c:b5:f5:ef:a3:32:af:5b:9d:
                    33:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F6:EC:C2:51:DF:84:C7:B4:9E:4B:46:D3:17:17:37:AB:45:61:EF:66
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/1e3aab93-192a-323e-b6b9-129bd553ade7.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.35.51.30/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         83:cb:f4:f4:c2:4d:5b:11:71:7a:bf:6f:88:1a:d9:86:4d:08:
         80:7b:7d:49:f5:16:99:24:c3:4e:96:2b:8a:4f:9e:23:70:0d:
         6a:d8:6d:a8:79:3e:0e:d6:6c:c8:18:0f:9a:e4:0e:0f:10:27:
         70:d9:ad:87:72:99:17:81:31:52:ab:8a:76:2a:23:4c:f1:b4:
         53:c9:33:6a:67:31:58:25:55:a9:22:fd:97:a9:3f:09:38:35:
         b8:15:56:17:ba:34:47:ae:86:38:0e:ec:d2:82:aa:b1:83:39:
         4c:19:76:05:57:96:df:60:22:cd:63:96:ec:46:b3:91:aa:be:
         db:97:ff:19:d2:a3:65:05:1b:dd:15:e5:42:0b:71:2d:71:8e:
         0a:ad:0d:8e:85:25:24:41:01:9a:80:8c:4f:1b:ff:60:84:ae:
         4e:d1:4c:0d:21:4f:74:51:2a:da:bb:d0:ae:50:8c:2f:32:8b:
         b5:15:c9:d6:d5:b4:26:1b:87:d5:8a:22:80:f2:88:76:ab:0c:
         e7:6c:2b:4d:5f:f4:9b:dd:63:dc:76:b5:5f:a6:ee:70:8b:0b:
         88:03:32:a1:b4:70:b7:8f:14:f1:43:da:4c:de:5a:5e:f3:6f:
         0b:27:66:91:55:83:ad:fa:9e:88:94:e6:8b:93:91:ec:d4:aa:
         cb:ab:fe:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 19 18:10:41 2026 by rpki-client