Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/a2ad2806-fa88-3fa3-a9bb-c195996be15a.roa
File:                     a2ad2806-fa88-3fa3-a9bb-c195996be15a.roa (raw, json)
Hash identifier:          US1Gv9vsgCzgYEWkRRRDV+BSDJ3oLGp6ZXAFT7x3hy4=
Subject key identifier:   D0:C7:74:4E:23:69:AF:EC:05:85:FB:15:BC:C7:9C:F0:03:67:42:C2
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584D4C1B17BAEE86B6C3ADC77F84
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/a2ad2806-fa88-3fa3-a9bb-c195996be15a.roa
Signing time:             Thu 26 Mar 2026 14:17:36 +0000
ROA not before:           Thu 26 Mar 2026 14:17:36 +0000
ROA not after:            Wed 24 Jun 2026 14:17:36 +0000
asID:                     36627
IP address blocks:        192.41.162.30/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 01 Apr 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:4c:1b:17:ba:ee:86:b6:c3:ad:c7:7f:84
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Mar 26 14:17:36 2026 GMT
            Not After : Jun 24 14:17:36 2026 GMT
        Subject: CN=abdbaf86-4272-401b-b8ee-f2635580948f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:a3:59:c9:74:42:30:28:43:62:0a:3c:20:90:
                    fb:64:f9:af:a4:6a:6f:34:39:09:a7:01:ce:f9:dc:
                    6d:21:71:ea:d0:5c:e2:77:9f:92:44:ff:f8:11:41:
                    5f:8d:07:00:4e:2e:08:1a:bd:47:d4:21:22:7c:5e:
                    53:29:cb:cd:83:27:de:03:b2:66:ec:67:94:ab:a8:
                    dd:52:c9:70:bc:60:79:da:b5:1b:16:b3:5d:33:75:
                    8c:d0:a1:f4:67:74:23:45:77:3e:7d:c2:ab:04:01:
                    34:53:ad:be:2a:dc:33:13:a3:a0:df:57:1f:dc:01:
                    52:d6:d9:eb:8f:2e:06:7d:84:e9:bc:a5:5c:00:64:
                    80:1d:b7:d3:a6:65:88:20:82:48:da:c8:ee:45:c4:
                    00:44:e6:93:55:08:ac:2d:3f:0e:98:f9:4b:60:f5:
                    67:a7:43:74:fd:cb:4c:ab:4c:52:ce:b9:35:0f:bb:
                    d3:9d:82:1f:fe:2f:9d:73:3f:ea:74:7c:c3:f1:4a:
                    82:3f:50:13:27:56:3b:ee:8e:9d:42:d2:50:49:eb:
                    5e:ff:ed:93:6a:28:94:27:9e:23:2d:e1:9d:6b:f0:
                    19:31:f1:38:98:8f:50:66:cb:1b:1a:dd:ab:6e:4d:
                    8d:27:7f:17:53:70:50:0b:82:87:df:5e:69:da:96:
                    d7:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D0:C7:74:4E:23:69:AF:EC:05:85:FB:15:BC:C7:9C:F0:03:67:42:C2
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/a2ad2806-fa88-3fa3-a9bb-c195996be15a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.41.162.30/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1f:b8:af:34:38:25:ee:7d:2a:9c:1f:56:0c:38:ea:e2:f6:bd:
         79:12:21:f5:9d:39:7b:70:f5:d0:eb:da:b5:ad:9b:df:f7:68:
         4c:49:0f:f1:96:c7:49:33:f4:87:bc:40:48:2d:ee:48:91:af:
         95:f2:62:2e:d4:93:c5:d1:e0:14:8e:2a:a8:b5:74:d5:dc:0c:
         9c:5d:05:e4:5d:16:12:03:b9:57:a9:0e:3c:8e:54:b3:8b:e6:
         9f:43:f8:52:d3:af:f9:da:b2:1b:9b:2a:0c:42:8b:f8:5e:0a:
         16:6a:8b:50:0a:5a:bd:23:40:ff:c3:04:88:e1:95:c1:74:29:
         6e:90:98:85:04:fd:79:37:3c:cd:2c:66:ec:65:0f:e7:81:72:
         36:9d:22:00:af:bd:b6:10:53:07:f8:35:7b:6a:01:59:25:b8:
         05:e7:79:28:2d:7f:38:91:fb:66:6a:af:c9:e2:8f:ec:d9:fe:
         c4:e9:26:8c:4a:27:2d:cc:d2:24:ac:34:99:72:65:0a:73:1d:
         be:af:98:74:26:3f:fc:7b:89:ed:72:8f:0d:5e:96:9d:72:cc:
         a7:c0:7b:d9:b7:3e:a8:1d:34:5c:58:90:65:bb:e9:60:55:ef:
         11:7d:3f:f3:ee:ab:39:ba:1c:12:b6:a1:1d:ae:2a:59:95:aa:
         30:ba:0c:0d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 22:35:48 2026 by rpki-client