Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/51f18538-3e20-3080-bf7a-544ead733297.roa
File:                     51f18538-3e20-3080-bf7a-544ead733297.roa (raw, json)
Hash identifier:          Ck66E1ImjJ4OmXLUym3mM6Uki4YK5GXK6clnVpGnXrw=
Subject key identifier:   87:2F:E4:17:B8:B9:03:01:65:95:9A:F2:75:97:11:80:66:5B:E9:49
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584ECE9C70D56A984DB964563280
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/51f18538-3e20-3080-bf7a-544ead733297.roa
Signing time:             Wed 12 Aug 2026 01:00:11 +0000
ROA not before:           Wed 12 Aug 2026 01:00:11 +0000
ROA not after:            Tue 10 Nov 2026 02:00:11 +0000
asID:                     396571
IP address blocks:        192.41.162.30/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 21 Aug 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:ce:9c:70:d5:6a:98:4d:b9:64:56:32:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Aug 12 01:00:11 2026 GMT
            Not After : Nov 10 02:00:11 2026 GMT
        Subject: CN=f2faadd1-7478-4948-8bdd-c7d2e776675c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:83:3a:c7:11:07:37:f4:69:6d:e9:3b:dc:d3:61:
                    67:4d:5a:cb:67:8d:4c:a9:4c:c5:30:f1:1e:c0:4f:
                    ed:d6:e6:fa:ef:6a:1d:5f:d3:68:4e:a1:7a:56:e3:
                    45:f1:60:17:ef:27:20:22:0c:13:5e:d2:50:ac:45:
                    6e:9a:8b:e2:41:d1:f7:4d:8a:06:e6:43:4b:16:38:
                    1e:d4:24:43:c8:e5:99:51:a2:46:aa:41:09:78:8d:
                    bc:bd:79:6f:80:ce:eb:bf:d9:8e:f7:fc:a9:50:49:
                    49:03:09:65:cf:8d:57:05:c3:05:51:c7:b7:9b:c6:
                    2a:0b:38:d6:b5:4d:46:e8:f6:0b:5e:c6:e9:5a:27:
                    02:e1:e5:d3:ce:c9:1d:33:e3:8e:be:3d:bc:9a:73:
                    6b:3e:9a:20:6a:5d:c0:7e:ac:25:65:49:dc:fd:1c:
                    ee:c6:11:39:68:ab:7d:3a:31:1a:c0:8c:ef:a0:e8:
                    3b:e7:67:ac:54:3a:ab:ef:28:53:e7:49:56:8b:16:
                    ab:a8:ea:cf:de:7e:eb:22:56:da:f7:bd:2e:1a:85:
                    63:c6:33:76:ca:c2:08:b8:96:fd:e8:02:0d:43:8d:
                    9e:b3:6c:81:ce:3f:56:ce:5e:dd:16:27:fd:7d:33:
                    6e:95:87:9f:20:0e:94:e1:e2:a9:a4:2c:c6:49:d3:
                    8b:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                87:2F:E4:17:B8:B9:03:01:65:95:9A:F2:75:97:11:80:66:5B:E9:49
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/51f18538-3e20-3080-bf7a-544ead733297.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.41.162.30/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7c:61:ac:40:75:aa:ba:a5:3b:af:f4:a1:9d:c8:4a:53:65:03:
         ec:f4:17:21:82:ac:65:0d:1c:b2:51:7e:ee:d4:51:ee:82:22:
         a3:5c:c6:04:7c:7c:99:88:f6:e7:c5:c9:30:41:ad:46:15:4b:
         70:c2:c0:a6:3f:46:de:d0:b2:4c:f4:74:e1:10:89:59:30:1b:
         c0:23:da:7e:1e:8e:66:f9:5d:cc:c4:a5:68:15:ca:63:bb:b2:
         aa:9f:fe:7a:09:b3:bd:d5:17:af:73:f5:70:1f:6d:8a:52:f0:
         5f:d0:de:e7:3e:16:67:e8:15:33:ea:1a:9b:eb:28:d5:48:dc:
         6f:14:33:26:58:61:8d:ad:0d:14:dc:b8:41:a1:84:03:a6:72:
         5a:e2:c8:3f:f2:aa:e6:3a:f5:a5:fc:a8:d8:9e:e8:e4:00:10:
         c0:80:a9:14:23:81:88:98:13:00:1b:a8:5c:0e:b7:ec:88:53:
         73:e7:38:7c:5f:c1:f5:e4:83:1b:d3:41:b8:6f:cb:2a:de:cf:
         6a:f2:90:70:77:0c:06:32:90:2d:1a:33:08:46:23:34:71:bd:
         76:35:17:8a:98:d1:89:39:dc:a1:3c:98:87:f1:91:00:b2:50:
         15:56:63:c5:53:42:56:30:c0:3a:75:7d:5c:69:0b:c5:53:54:
         ef:e4:ae:e1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 19 17:08:26 2026 by rpki-client