Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/74e7f9ea-82b1-37c7-9325-963a81908285.roa
File:                     74e7f9ea-82b1-37c7-9325-963a81908285.roa (raw, json)
Hash identifier:          ixb+r2bd6aoloUzaxQB3hGSmdCZLPqOwgjUIAeuCpqs=
Subject key identifier:   F7:BA:89:81:5B:85:D6:E6:5B:49:4B:6C:31:0D:ED:CA:DC:CD:D8:51
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584D4C1B12BF66D9C32ACDF69400
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/74e7f9ea-82b1-37c7-9325-963a81908285.roa
Signing time:             Thu 26 Mar 2026 14:17:34 +0000
ROA not before:           Thu 26 Mar 2026 14:17:34 +0000
ROA not after:            Wed 24 Jun 2026 14:17:34 +0000
asID:                     396560
IP address blocks:        192.41.162.30/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 01 Apr 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:4c:1b:12:bf:66:d9:c3:2a:cd:f6:94:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Mar 26 14:17:34 2026 GMT
            Not After : Jun 24 14:17:34 2026 GMT
        Subject: CN=0c1e5ac2-ac6d-4f28-be4e-01a9874d1c04
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:02:e9:37:0b:5d:cc:4b:74:2b:ab:51:8b:51:
                    b5:66:08:76:5c:2d:f9:9c:0c:9c:eb:d7:60:1e:08:
                    40:4f:af:c6:60:e3:f7:ef:d2:25:a2:19:bb:b3:de:
                    11:44:cd:79:15:33:b2:7a:5a:54:d2:5a:22:39:9c:
                    d9:4e:31:9a:4e:ec:fd:75:3c:01:25:2c:3f:a0:7a:
                    d2:93:cd:46:0a:5b:fa:7a:70:96:ae:bf:63:3a:78:
                    98:bc:7e:ba:d8:63:fc:2b:3f:14:44:62:9a:61:37:
                    46:29:eb:0b:c0:dd:07:26:08:00:db:2a:73:d0:88:
                    98:21:d9:c2:df:0c:5a:88:1f:b9:0f:a9:33:dc:25:
                    ba:17:38:a1:39:b2:7b:ed:9f:dd:f9:de:cd:51:c0:
                    99:a1:7f:f3:fb:64:44:c3:95:10:82:8e:c1:14:8d:
                    3e:04:9e:6b:78:84:45:7d:b9:26:c7:f4:cb:d5:da:
                    28:5b:09:a0:c4:c2:dc:29:b0:4b:7d:3b:5b:13:9d:
                    e2:e5:29:fa:40:06:c6:cb:3d:6c:0d:32:eb:2a:b8:
                    9b:94:59:d2:f8:41:d8:32:65:02:a5:24:d5:df:49:
                    cc:0c:dc:30:f9:3c:86:6c:f8:38:4d:5e:64:f0:75:
                    25:d4:d3:a7:2a:5b:90:9c:a6:87:45:2c:12:5d:a3:
                    95:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F7:BA:89:81:5B:85:D6:E6:5B:49:4B:6C:31:0D:ED:CA:DC:CD:D8:51
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/74e7f9ea-82b1-37c7-9325-963a81908285.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.41.162.30/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         57:fc:a8:06:84:3f:d8:19:27:d4:e9:de:0f:a8:c5:c6:17:8c:
         01:20:f2:e7:ce:71:36:55:4a:8a:a2:07:41:b9:cc:c7:26:b6:
         01:09:00:c9:bd:e3:fb:78:f3:88:b7:d8:7d:be:9a:14:1e:14:
         9d:68:a1:03:bb:17:5b:88:72:ab:29:ac:1b:a9:96:27:7a:7e:
         f1:9f:ea:47:6d:df:f3:9b:a4:34:6f:d2:f2:93:af:10:f1:c1:
         67:9d:a0:f1:ac:a5:99:7d:4d:b9:4e:db:50:fa:35:e5:97:2b:
         1d:58:76:60:c3:98:2b:ae:86:0a:25:49:38:0e:a5:7f:b7:b4:
         97:27:45:5d:26:cc:48:70:34:bb:28:36:ee:8d:2f:33:f7:ac:
         ed:14:82:f3:c4:42:04:41:9c:88:d0:17:cf:5e:f5:1e:43:10:
         d3:20:25:db:bb:d5:92:b8:81:6c:a4:2f:28:b6:4b:55:3a:b5:
         f3:7a:19:4e:16:1c:ca:62:dc:ec:36:67:7b:bd:80:ee:a7:2f:
         94:e1:74:12:c7:67:97:90:92:df:a3:05:26:c3:21:d8:f6:96:
         49:65:2a:8e:da:de:3d:58:c5:42:be:7b:5a:af:91:ea:6f:b0:
         b4:8d:02:3a:87:0f:e5:ea:4f:a9:c8:83:6f:06:a3:8d:be:77:
         8c:d0:fc:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 22:35:54 2026 by rpki-client