Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/3421fa7e-e687-32b8-a339-5f6e1e16825b.roa
File:                     3421fa7e-e687-32b8-a339-5f6e1e16825b.roa (raw, json)
Hash identifier:          ecDLp175bt36QViolKUV3t0PdGf8DYnR1rHF+7rBnfc=
Subject key identifier:   1A:AD:B3:14:20:1C:6A:1D:8E:0F:6A:95:84:78:2F:92:AD:D1:BE:00
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584E2C39A92A32780B6DD2409A80
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/3421fa7e-e687-32b8-a339-5f6e1e16825b.roa
Signing time:             Sun 14 Jun 2026 21:00:12 +0000
ROA not before:           Sun 14 Jun 2026 21:00:12 +0000
ROA not after:            Sat 12 Sep 2026 21:00:12 +0000
asID:                     36632
IP address blocks:        192.41.162.30/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 30 Jun 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:2c:39:a9:2a:32:78:0b:6d:d2:40:9a:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Jun 14 21:00:12 2026 GMT
            Not After : Sep 12 21:00:12 2026 GMT
        Subject: CN=58fdcf61-ac77-4bbd-b584-6d89d3cf6c45
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:c0:ac:bd:6e:ef:f5:f5:79:84:73:94:37:7e:
                    aa:66:a9:41:6e:b4:31:b2:2b:31:10:1b:af:c7:28:
                    ed:21:67:33:d8:f0:61:9a:94:f6:e5:a8:b6:83:a5:
                    15:a0:04:c2:54:cb:04:d3:96:bb:67:61:8f:3e:10:
                    3c:49:aa:6f:6d:a5:cd:1a:04:7a:19:b1:9e:9e:b9:
                    9f:3b:e7:a7:a0:a7:62:ea:7b:ce:ab:68:50:c5:c9:
                    81:30:e9:01:0d:ea:11:29:65:c2:7b:f1:70:8e:86:
                    cd:31:86:95:3d:1a:1b:69:b9:9d:c7:a7:30:5c:61:
                    fb:96:11:9f:34:ff:44:0d:ab:57:e9:e2:c7:f2:7a:
                    64:cb:0f:7a:47:d6:af:74:2e:2e:cb:51:da:99:b7:
                    26:10:70:24:97:d5:10:04:c2:52:fe:24:45:be:10:
                    5c:d7:5a:83:24:58:6d:fd:13:37:ac:41:43:82:d9:
                    e0:2f:7a:0f:56:b4:72:ec:89:92:c3:f8:56:a1:08:
                    51:95:70:b8:ac:16:8b:9f:10:65:fa:3e:4d:01:47:
                    9a:f0:d9:03:1f:fc:51:bf:6b:19:2d:d3:5b:75:b1:
                    9f:03:3f:9f:21:1a:01:a5:d2:6e:6d:da:ea:99:aa:
                    2f:ee:33:36:02:ee:25:94:4b:b2:8a:62:4b:72:51:
                    dd:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1A:AD:B3:14:20:1C:6A:1D:8E:0F:6A:95:84:78:2F:92:AD:D1:BE:00
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/3421fa7e-e687-32b8-a339-5f6e1e16825b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.41.162.30/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         35:23:e3:c2:61:aa:b3:84:a4:16:04:49:c9:a3:d2:23:fe:bd:
         a2:5c:ec:54:9b:47:13:f0:3a:0c:ab:6c:f4:1a:ca:8a:73:43:
         ee:89:47:41:36:16:a5:a2:7c:f9:f6:43:42:c7:8b:e2:58:c7:
         2f:ef:23:28:c5:63:15:65:ab:27:2d:38:6e:2a:4b:c0:ff:1d:
         f8:e0:78:d7:ef:1e:32:e0:73:7e:3d:46:7f:3f:33:f9:4f:6f:
         de:22:a6:49:22:92:a0:47:e7:58:21:46:a2:18:7f:07:f3:4b:
         bc:68:e9:fd:51:3f:78:d6:de:73:3e:97:5d:f7:a8:d0:4b:d0:
         00:26:69:d6:20:47:6f:ea:5d:76:12:2a:72:50:bb:ca:6d:a6:
         98:e9:ca:b5:ed:75:0a:8e:6a:1b:78:85:96:ce:09:db:97:8a:
         b2:af:bc:cc:2d:ff:f1:a1:31:60:db:09:fa:3c:ad:31:7d:e3:
         e9:11:2a:2a:4b:3d:1b:1f:59:76:2c:4b:94:61:2b:f5:00:cc:
         65:ab:ba:65:9f:66:d5:99:17:2a:27:6a:2f:9f:49:17:e3:30:
         26:5d:9e:f7:01:25:a5:3f:7e:f2:08:fa:5e:7c:5e:0b:aa:98:
         64:65:fc:6b:7e:81:39:83:07:07:0c:31:31:f2:4b:61:6e:b1:
         8a:f2:cb:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 28 20:37:37 2026 by rpki-client