Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/20045221-4b4f-3170-ba27-7ad904501952.roa
File:                     20045221-4b4f-3170-ba27-7ad904501952.roa (raw, json)
Hash identifier:          HZpFlj7WNTeX8d9spDmqkMH2ijdHmV5fBzGFf03yx48=
Subject key identifier:   25:EA:06:91:00:13:96:5E:C8:27:1F:1D:88:42:39:92:34:BB:6B:4B
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584EA7951DB70F0FB91AE4F48F00
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/20045221-4b4f-3170-ba27-7ad904501952.roa
Signing time:             Wed 29 Jul 2026 01:00:12 +0000
ROA not before:           Wed 29 Jul 2026 01:00:12 +0000
ROA not after:            Tue 27 Oct 2026 01:00:12 +0000
asID:                     396585
IP address blocks:        192.26.92.30/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 21 Aug 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:a7:95:1d:b7:0f:0f:b9:1a:e4:f4:8f:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Jul 29 01:00:12 2026 GMT
            Not After : Oct 27 01:00:12 2026 GMT
        Subject: CN=690b7349-3ee6-4af1-a279-c9fe7cacacf6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:78:36:19:b9:be:78:45:ea:34:a5:be:3e:be:
                    8b:6d:47:e7:e5:08:49:55:49:61:08:30:da:5b:42:
                    d6:10:4f:5d:6c:53:1b:2e:2b:b7:ab:5f:00:bd:af:
                    46:e0:c4:38:a9:c8:5b:95:d1:ce:c7:3b:5f:ff:b7:
                    73:07:43:a7:fc:54:af:9f:0a:87:a8:c0:e7:ac:15:
                    aa:8e:bc:7a:c6:b3:c1:ff:35:6c:c1:89:af:16:d8:
                    df:15:ca:bd:36:40:50:e0:9f:a6:4b:95:ae:8c:a5:
                    16:3d:d7:dd:d9:9b:34:68:8f:9a:cb:66:16:0a:36:
                    24:1c:14:24:ce:5b:60:56:52:1f:ab:14:4d:bc:94:
                    84:8d:ed:13:54:1d:62:85:17:24:58:1c:1f:ac:db:
                    3c:2b:ad:f6:2e:59:01:fa:a9:d1:fa:95:0a:09:e1:
                    0b:9b:be:6f:d0:36:4f:22:44:96:c3:fb:c3:19:b6:
                    9b:9d:ac:50:06:8e:5f:15:46:fb:49:db:29:13:9b:
                    85:80:67:d9:ec:cc:4f:0c:bf:02:df:03:1b:69:e6:
                    90:cf:6c:28:19:da:69:a1:13:62:cb:bf:4b:8b:b6:
                    1f:66:87:dd:d5:66:41:2d:8e:e8:79:40:93:a3:25:
                    e1:28:fe:97:9a:14:21:2a:77:e0:2f:f4:65:26:e5:
                    27:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                25:EA:06:91:00:13:96:5E:C8:27:1F:1D:88:42:39:92:34:BB:6B:4B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/20045221-4b4f-3170-ba27-7ad904501952.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.26.92.30/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         80:3a:0e:b4:83:9d:85:11:61:ee:ed:9c:fd:f0:d6:67:13:b3:
         54:00:4a:6b:46:33:b6:a8:d9:b6:31:2b:77:f9:50:55:98:dd:
         81:19:2a:b4:58:67:57:e5:f5:f3:ca:af:b1:14:8c:1c:3d:f7:
         56:07:1f:a5:fe:fb:60:ae:81:5a:e9:e7:68:f5:a0:47:32:53:
         a6:0a:2f:f1:0f:7a:20:8d:8c:ce:66:72:2b:d8:34:85:7b:04:
         36:93:fc:22:94:27:8e:06:0c:23:28:4b:25:e1:29:13:f5:51:
         5c:d7:26:24:cd:30:93:f7:88:23:c2:b2:d8:a1:67:65:33:79:
         3f:e9:b8:89:12:22:be:16:6b:aa:37:70:a6:eb:f7:2f:15:8e:
         21:8d:c7:44:d8:31:85:71:a8:0a:f0:d3:21:c4:3e:71:58:69:
         7a:20:28:aa:9f:cb:ba:ce:d2:e3:b2:e0:36:43:69:be:34:8b:
         dd:d9:e6:70:1b:e5:59:dc:8b:57:f6:7b:90:fc:21:15:a4:e1:
         08:31:ec:80:4f:28:55:a8:14:dc:f5:f5:56:c6:41:8d:7a:d5:
         50:53:87:00:d8:ea:32:71:f7:8e:17:d0:b7:9c:cc:76:11:52:
         fc:85:17:96:c7:29:9c:77:ad:39:a1:67:ef:cd:b8:1b:01:35:
         6b:19:aa:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 19 17:07:50 2026 by rpki-client