Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/768c821a-c68f-3be7-b357-f3ae515d2dd0.roa
File:                     768c821a-c68f-3be7-b357-f3ae515d2dd0.roa (raw, json)
Hash identifier:          VOf4SAmyS/vJQPhYp68IoVja18VePvAOfscvPpR+W/o=
Subject key identifier:   62:BC:EB:D2:0B:20:96:80:52:29:20:08:80:9F:4E:C2:2E:3D:98:50
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584EAD1C44337CC7A04A3FBFE580
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/768c821a-c68f-3be7-b357-f3ae515d2dd0.roa
Signing time:             Fri 31 Jul 2026 01:00:11 +0000
ROA not before:           Fri 31 Jul 2026 01:00:11 +0000
ROA not after:            Thu 29 Oct 2026 01:00:11 +0000
asID:                     396584
IP address blocks:        192.58.128.30/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 21 Aug 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:ad:1c:44:33:7c:c7:a0:4a:3f:bf:e5:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Jul 31 01:00:11 2026 GMT
            Not After : Oct 29 01:00:11 2026 GMT
        Subject: CN=2910d049-4f20-42d3-866a-ec704ab4111d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:1c:77:d5:17:dc:75:8f:cf:6d:23:62:0e:eb:
                    d4:ae:b5:33:26:a2:b8:80:be:c4:66:56:46:d4:0b:
                    88:6f:e0:9b:b1:51:e8:e3:39:4c:f6:df:3b:d3:aa:
                    33:1d:a5:ae:00:65:86:0a:7c:c5:4c:c7:34:05:28:
                    b8:88:85:2c:22:fb:24:a2:d4:3a:4c:82:18:48:63:
                    04:4d:e7:74:ac:f8:28:a8:7a:bd:25:07:71:17:82:
                    38:34:34:c4:b3:a7:d9:6d:93:65:cb:a9:6a:c3:9a:
                    ac:b2:39:f6:d9:72:65:f9:15:3e:20:b5:dd:22:ac:
                    b3:5d:c1:d4:0c:ac:fc:fe:67:ec:d8:98:6c:6d:b6:
                    a8:3f:36:75:98:fc:bd:a5:5e:15:de:e3:dc:24:3d:
                    2d:cd:e9:82:fc:8a:08:ff:1e:51:e1:1e:9e:65:79:
                    fd:50:fd:9e:67:c5:57:2f:fc:bb:67:75:4e:26:49:
                    a1:14:e1:06:df:d0:24:32:2f:36:b0:58:e5:05:79:
                    9a:74:1c:92:77:8c:fc:cb:64:5a:1c:2c:f6:18:7b:
                    b8:27:5c:ac:3d:fc:49:0a:2e:38:aa:a1:ba:e2:b6:
                    47:f4:11:af:e3:5e:c4:53:b1:ec:f8:be:5e:3c:5f:
                    56:32:03:9c:2e:e9:61:42:8a:88:fb:6b:7a:85:5f:
                    2d:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                62:BC:EB:D2:0B:20:96:80:52:29:20:08:80:9F:4E:C2:2E:3D:98:50
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/768c821a-c68f-3be7-b357-f3ae515d2dd0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.58.128.30/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1b:27:00:55:4c:ef:d7:be:76:c9:b2:d9:7e:98:d7:db:f0:41:
         5c:93:df:09:d2:6a:2d:c4:8a:72:18:28:46:2e:fe:ac:4d:f5:
         75:9c:2f:c1:d4:19:c6:ee:dc:29:25:29:41:94:36:e5:7e:fe:
         ae:19:de:38:46:93:a5:2c:b9:10:d8:a7:27:69:cd:ba:68:10:
         c4:d7:4a:53:fd:a6:95:55:14:24:3a:e7:56:a1:25:76:10:49:
         40:00:d1:3a:43:c7:52:6d:84:64:af:b1:8a:67:24:b5:40:14:
         17:61:ea:b2:83:6f:55:b1:57:28:b9:a3:7f:96:2b:e5:d9:8f:
         40:9c:5e:db:2f:dc:93:24:1e:9b:60:e0:17:d9:09:ff:7f:53:
         81:ab:04:4f:a1:39:08:6f:97:59:23:a1:74:21:c0:61:9a:18:
         0b:0a:4f:58:35:32:9e:75:d3:63:4a:4a:ce:cb:14:6a:63:66:
         82:0c:d5:03:87:df:4a:f9:7b:1c:13:e3:9c:38:90:5b:fb:e8:
         47:11:d9:77:9a:d6:f7:85:67:8d:e0:f0:74:20:1b:91:87:32:
         e1:96:37:c8:ce:5a:0a:c7:a6:43:16:3b:6d:6d:9e:8f:4c:c1:
         f0:2a:89:0e:01:33:15:18:82:b1:4c:5b:70:da:6e:ee:ae:08:
         f2:cc:99:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 19 20:26:09 2026 by rpki-client