Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/70d0a446-b516-3a16-94ee-19c3df23d424.roa
File:                     70d0a446-b516-3a16-94ee-19c3df23d424.roa (raw, json)
Hash identifier:          6lyuYQEDIpP5E6OnkNXTEhEmtfDwUxy5F94Q84Zmzgg=
Subject key identifier:   DF:ED:10:1B:F1:38:3A:96:F6:B3:12:35:3A:31:A1:BA:8C:02:DB:78
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584F6C5824057470EC07DCBF1800
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/70d0a446-b516-3a16-94ee-19c3df23d424.roa
Signing time:             Wed 07 Oct 2026 13:00:13 +0000
ROA not before:           Wed 07 Oct 2026 13:00:13 +0000
ROA not after:            Tue 05 Jan 2027 14:00:13 +0000
asID:                     397203
IP address blocks:        192.35.51.30/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 12 Oct 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:6c:58:24:05:74:70:ec:07:dc:bf:18:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Oct  7 13:00:13 2026 GMT
            Not After : Jan  5 14:00:13 2027 GMT
        Subject: CN=938bbe12-5af2-41cb-b2a1-d97af0b6a062
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:67:1c:90:70:dc:19:5c:80:7d:d9:49:2a:77:
                    b0:97:df:72:06:8c:91:c6:94:da:7c:6e:0a:04:20:
                    ca:77:92:9d:af:34:5a:4a:e9:93:32:a7:ad:e2:95:
                    6a:cf:5a:a0:0c:07:19:2d:38:07:c3:54:d9:74:91:
                    91:f7:09:de:9b:cc:f5:c7:a4:44:8f:91:64:95:06:
                    03:70:3d:56:d8:bf:32:c6:76:cc:4f:50:19:58:71:
                    a1:37:e9:e0:cb:62:07:f7:71:b6:f1:f3:86:1a:ba:
                    b0:e5:87:84:d0:85:78:7c:dc:70:b9:df:c0:57:fa:
                    2d:95:c7:92:02:92:e1:a1:db:b7:79:fe:ed:50:99:
                    29:4d:c5:c6:50:54:c2:ca:f4:c4:a6:f8:4e:40:da:
                    08:81:26:44:85:da:8d:4d:b0:20:63:cb:b6:ab:02:
                    7a:40:b7:aa:af:76:7a:5c:32:85:98:56:f5:9a:d7:
                    f8:60:5a:5c:93:1f:90:01:db:25:35:e1:40:46:9d:
                    d2:6f:3d:ec:ea:f6:1e:57:1b:17:80:53:ee:8e:19:
                    55:00:79:3a:da:3c:b0:74:08:08:44:9d:0d:fb:11:
                    f6:39:96:df:ec:37:63:6b:6c:b3:f2:27:8d:66:f5:
                    c7:07:62:dd:26:ea:49:b8:f3:ca:cb:ee:6c:4c:b3:
                    93:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DF:ED:10:1B:F1:38:3A:96:F6:B3:12:35:3A:31:A1:BA:8C:02:DB:78
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/70d0a446-b516-3a16-94ee-19c3df23d424.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.35.51.30/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         47:1c:89:dc:0e:de:9a:c7:70:ff:58:9b:2e:a6:ff:aa:6e:2e:
         a8:69:d5:2b:8f:70:05:e1:a3:de:36:d8:25:01:1e:33:93:cc:
         56:be:53:64:f1:d3:31:99:d4:bf:35:56:5a:3a:31:52:b3:a5:
         77:b6:ac:66:1c:68:cd:80:a8:51:7f:61:e7:69:62:67:02:89:
         1a:a0:92:8d:43:2b:bf:80:48:af:6e:af:bc:33:bc:cb:cb:c8:
         42:e0:cd:bb:39:73:03:55:dc:b6:66:0a:92:0f:6b:5e:51:a7:
         87:37:6b:9f:b2:b6:ce:95:92:74:ec:b5:80:c0:dc:10:a9:0b:
         1e:72:a6:d6:b3:23:ba:98:5c:36:0d:19:c3:0f:c3:d8:a9:2b:
         dd:46:8c:7b:b3:d3:b9:b2:a4:6a:94:2e:ae:df:a2:82:6d:de:
         d6:b2:73:7e:b9:5a:cf:71:39:bb:ba:be:18:94:40:55:49:ee:
         29:05:85:93:da:58:32:2a:0a:57:e1:fe:a2:99:79:98:f1:5d:
         00:af:f7:b9:70:5e:6a:5e:e0:0f:bd:34:1c:97:56:75:7a:51:
         c5:8f:ee:ca:c4:fa:cd:61:b5:f4:b8:2a:6b:23:22:06:20:c1:
         93:64:60:14:8b:ac:fa:78:47:eb:20:0d:dd:01:bd:20:31:4f:
         00:82:e7:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 10 16:32:01 2026 by rpki-client