Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/374a21bb-758d-3cc4-bb7f-c288ad28bd73.roa
File:                     374a21bb-758d-3cc4-bb7f-c288ad28bd73.roa (raw, json)
Hash identifier:          oXpljUa4bf6Zl90f7CFva/jnzHAUhcWi0+wHddiEqGc=
Subject key identifier:   20:94:D4:BA:91:C5:B1:5C:E6:FC:C2:34:21:3B:9C:F0:D8:4B:72:22
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584EA797AB52E334935713152800
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/374a21bb-758d-3cc4-bb7f-c288ad28bd73.roa
Signing time:             Wed 29 Jul 2026 01:00:12 +0000
ROA not before:           Wed 29 Jul 2026 01:00:12 +0000
ROA not after:            Tue 27 Oct 2026 01:00:12 +0000
asID:                     36623
IP address blocks:        192.43.172.30/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 21 Aug 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:a7:97:ab:52:e3:34:93:57:13:15:28:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Jul 29 01:00:12 2026 GMT
            Not After : Oct 27 01:00:12 2026 GMT
        Subject: CN=b065f184-aea5-49bc-bd19-825d29be2505
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:82:b5:91:5e:9a:c6:5c:69:3d:7e:46:da:f9:ff:
                    91:80:08:e9:5e:85:e5:dd:e9:77:80:83:9d:02:f9:
                    53:53:99:43:1c:4b:cd:73:aa:99:3f:ac:d6:54:c9:
                    f0:70:7e:bb:24:44:eb:12:79:ce:98:d2:39:81:48:
                    0a:79:a4:3e:1e:7c:9e:db:68:7c:1b:c2:ab:d8:b7:
                    c8:d2:87:55:be:d3:42:f2:a3:92:45:be:76:a9:41:
                    8f:62:08:5e:22:89:55:2c:38:d7:ad:ae:ad:14:38:
                    8d:c9:84:7c:79:35:ef:9c:22:f9:4e:a1:07:56:45:
                    5e:04:92:7a:24:f1:1f:9d:ac:15:20:07:33:a1:be:
                    18:7e:4d:b8:a7:fc:48:7f:16:06:17:ce:a5:30:58:
                    0e:39:ac:bd:f0:6f:6c:97:dc:75:a4:d9:0b:da:bc:
                    89:0b:f0:58:e5:a1:c2:db:04:49:5f:7c:d2:60:0b:
                    36:46:74:67:56:30:cd:b2:e8:29:21:98:b4:ac:2e:
                    31:1c:0f:45:df:89:c8:c0:40:ed:1a:74:40:ff:a8:
                    5e:b4:a8:56:a9:a7:0c:8c:72:45:b5:b9:a4:d4:04:
                    ca:b6:aa:ff:be:0a:3f:b7:8c:2d:64:e1:7d:93:9c:
                    c1:d2:de:4b:a9:8d:a4:00:d8:78:28:cb:da:60:2e:
                    32:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                20:94:D4:BA:91:C5:B1:5C:E6:FC:C2:34:21:3B:9C:F0:D8:4B:72:22
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/374a21bb-758d-3cc4-bb7f-c288ad28bd73.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.43.172.30/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0a:9c:ec:66:21:e3:be:d8:f4:f0:dd:62:3a:5e:e9:20:d2:31:
         bf:2f:15:c0:0c:e7:84:b7:60:b0:70:c5:34:42:a8:82:7a:3f:
         e3:f8:2f:17:0f:3b:f9:37:73:c5:52:d7:a4:e0:32:b2:95:ba:
         f6:42:29:77:37:22:04:11:41:6b:83:44:3d:10:bd:72:d6:a4:
         aa:76:9e:e2:ca:ca:2a:31:f3:c7:ce:21:dd:59:b6:a3:12:d9:
         60:8c:87:83:d7:c7:1e:e5:b8:60:e2:82:06:7e:8a:de:c3:d7:
         1d:dd:0f:d9:7a:a3:34:f5:7c:55:4c:92:2c:f5:d5:90:34:3e:
         64:af:b9:72:d7:82:2b:c3:9d:60:74:4d:ef:81:c8:7f:4a:04:
         1e:fe:fc:d2:ce:66:9d:a7:d3:7e:09:25:c7:15:01:d6:7f:a5:
         57:15:b4:9c:26:af:35:e6:31:2f:f8:b7:72:90:7d:1f:e8:a7:
         57:44:7a:44:02:89:b6:a3:d8:dc:c2:dd:4a:cd:11:f7:45:c6:
         2e:2a:53:26:9e:8e:58:94:65:20:19:b3:84:b3:0c:cb:e3:76:
         b5:94:7e:c9:38:71:d6:3c:31:d6:5d:5d:46:c4:14:fa:77:75:
         45:b9:92:54:b5:53:26:66:ce:95:fc:fb:4b:f0:cf:19:59:7b:
         b1:c3:fd:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 19 17:05:34 2026 by rpki-client