Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/ab8ab0d2-b801-3c6b-a8e9-3f30e1ae399d.roa
File:                     ab8ab0d2-b801-3c6b-a8e9-3f30e1ae399d.roa (raw, json)
Hash identifier:          lODlNSB6AAZoCANjPsX/62GHWIbxBnhstiqHVAZwue4=
Subject key identifier:   4D:56:7F:1D:3D:DC:0C:45:AD:77:DA:6E:B9:54:C2:18:B3:22:20:29
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584D4C1B14F07C522768616F5F00
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/ab8ab0d2-b801-3c6b-a8e9-3f30e1ae399d.roa
Signing time:             Thu 26 Mar 2026 14:17:35 +0000
ROA not before:           Thu 26 Mar 2026 14:17:35 +0000
ROA not after:            Wed 24 Jun 2026 14:17:35 +0000
asID:                     36625
IP address blocks:        192.41.162.30/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 01 Apr 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:4c:1b:14:f0:7c:52:27:68:61:6f:5f:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Mar 26 14:17:35 2026 GMT
            Not After : Jun 24 14:17:35 2026 GMT
        Subject: CN=d52ada83-f2c8-47ae-be0a-81b2e06754a3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:1e:b4:e1:2b:35:22:d9:b7:b2:7e:fb:b3:c2:
                    68:22:81:23:fb:6e:36:6e:a0:c4:45:45:a4:e8:ef:
                    d7:84:25:c9:55:e8:8b:8c:e7:89:4b:0d:ca:3e:2c:
                    c1:c5:17:37:0a:10:5b:d5:d7:9b:7a:7e:85:e9:65:
                    7a:cb:74:c7:7f:44:c0:54:71:49:35:d4:fd:ac:d2:
                    f5:fd:c2:81:b5:67:77:be:6f:8c:17:8d:ac:14:02:
                    ff:e6:8f:d8:31:33:ba:98:f1:80:e9:0c:17:e1:36:
                    fb:58:8a:1b:ab:7f:11:86:29:e6:d2:a8:21:2c:fa:
                    85:50:06:65:64:8c:1c:e7:d2:d6:8e:59:d1:06:10:
                    38:b6:76:61:b2:d7:33:9d:98:82:e7:ee:84:0e:ce:
                    fe:69:0d:c5:58:b9:ad:0c:9f:51:42:b9:1c:05:f4:
                    93:ae:2d:61:9e:90:2c:ed:42:18:41:07:21:90:95:
                    a0:0b:60:5c:84:0c:d0:11:26:b7:ea:fe:47:40:fd:
                    c6:88:25:d9:26:95:b8:8e:17:e0:d1:f0:a5:44:cf:
                    0d:e4:24:29:76:4c:b7:8b:58:be:30:d3:5b:33:31:
                    65:96:b5:e4:b5:dc:64:dc:03:db:73:48:38:8e:d1:
                    1c:1e:b1:5e:22:7c:86:01:43:b5:fe:bd:8d:2f:31:
                    bd:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4D:56:7F:1D:3D:DC:0C:45:AD:77:DA:6E:B9:54:C2:18:B3:22:20:29
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/ab8ab0d2-b801-3c6b-a8e9-3f30e1ae399d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.41.162.30/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         02:1f:4f:7b:a1:ed:de:8e:05:17:ed:7b:23:5f:67:ac:d5:4a:
         a7:e5:df:16:79:fa:54:b6:07:25:e5:de:c2:d2:bc:93:5c:b0:
         2b:8d:34:9a:06:ff:23:9d:c7:bc:be:3f:f0:bc:94:df:f8:61:
         79:4e:dc:33:98:77:f0:6b:f9:ab:1d:e5:01:3c:c1:1f:f6:1b:
         2b:f7:e2:80:38:e4:5b:9c:1e:9e:2e:eb:f5:27:7c:a1:ea:56:
         ca:3c:eb:ea:0d:1c:38:44:98:a1:81:8f:37:ed:6b:2c:be:ee:
         08:5a:5a:46:e2:1b:9a:cf:c5:8a:31:84:38:9d:53:ab:b9:80:
         14:02:df:fe:3c:39:a3:6b:86:cc:4f:af:1c:65:26:31:55:b6:
         3a:a0:b2:f7:42:ec:31:9a:3c:e5:a1:1d:52:56:c7:b1:8a:fd:
         60:4a:59:85:61:73:0f:7d:42:d8:e2:6f:24:b2:cf:68:a0:f9:
         0c:70:2f:ae:3a:c6:16:e2:d0:e9:82:8d:6e:0c:e1:d7:d9:91:
         7d:95:32:1d:f6:c0:ed:b5:ff:24:90:a8:4a:6d:58:b6:2e:fa:
         a1:96:66:0e:9d:af:64:e2:a6:bb:6a:51:e8:a8:42:23:60:a7:
         57:38:e9:ed:76:5c:4f:32:fd:42:23:fc:d9:a2:8f:48:fd:40:
         b9:f6:ef:15
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 22:36:24 2026 by rpki-client