Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/ae6fc73a-d5a9-3f08-b158-c97acc6861a0.roa
File:                     ae6fc73a-d5a9-3f08-b158-c97acc6861a0.roa (raw, json)
Hash identifier:          VEZfoD4url9D86JQgl60utb0zCUGJyTC3j9HM7+Wae4=
Subject key identifier:   FA:8D:10:F3:C4:9C:43:F3:16:DA:30:02:8A:62:C3:2A:0B:55:BA:2A
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584EA791D40A25829751A35DFB00
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/ae6fc73a-d5a9-3f08-b158-c97acc6861a0.roa
Signing time:             Wed 29 Jul 2026 01:00:12 +0000
ROA not before:           Wed 29 Jul 2026 01:00:12 +0000
ROA not after:            Tue 27 Oct 2026 01:00:12 +0000
asID:                     396542
IP address blocks:        192.68.126.30/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 21 Aug 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:a7:91:d4:0a:25:82:97:51:a3:5d:fb:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Jul 29 01:00:12 2026 GMT
            Not After : Oct 27 01:00:12 2026 GMT
        Subject: CN=f3e35efb-6bab-4fb9-a1c3-a4bdfa94d4cb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ea:75:bb:0e:6c:ee:1b:56:35:5a:3a:48:b4:b0:
                    ac:81:00:bc:a0:1b:ec:8c:38:ba:8a:f6:d6:6d:b4:
                    9a:02:24:b6:ab:d7:24:66:51:9c:4c:82:20:ec:76:
                    6b:c2:84:23:11:9a:c4:42:0c:23:d4:68:3c:9d:e0:
                    b0:07:98:c9:f2:40:19:95:94:9f:72:0f:5a:09:9b:
                    07:fb:ce:bd:06:f4:05:1a:b0:72:9f:26:cc:e0:ff:
                    f1:ac:d1:df:84:dc:2d:6e:41:99:1e:62:ec:28:a4:
                    2a:4e:de:6a:be:ef:f2:b2:08:c1:c2:80:c5:45:2f:
                    7a:0a:2b:a7:f5:cb:0e:fe:36:af:58:3a:8e:1b:89:
                    7b:4b:48:be:47:ab:a2:ab:5b:05:88:0c:1f:5d:0e:
                    8c:52:65:2d:ce:b2:54:48:d9:33:19:21:c7:f6:bc:
                    94:2a:07:f7:50:9d:15:19:3a:05:bb:6d:17:aa:94:
                    08:13:c0:60:36:5e:e1:3b:a9:88:7e:e8:3c:8c:b0:
                    e3:a3:30:71:5e:9e:99:17:95:5a:c7:2a:76:0f:64:
                    62:d1:a9:b8:40:00:3d:a3:68:5b:36:fa:6a:41:e7:
                    26:28:db:ac:5d:58:a1:52:e1:fc:e2:ad:58:b7:2f:
                    75:19:ac:90:48:ed:5f:26:1f:3b:c2:8c:4f:75:f6:
                    dc:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FA:8D:10:F3:C4:9C:43:F3:16:DA:30:02:8A:62:C3:2A:0B:55:BA:2A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/ae6fc73a-d5a9-3f08-b158-c97acc6861a0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.68.126.30/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         66:13:d8:96:4b:8e:4c:d5:68:bb:d8:92:5d:5f:92:83:67:d8:
         01:43:a0:a0:6c:3c:d1:f4:de:90:de:ca:a5:b3:3e:09:cb:fe:
         13:d0:3b:62:2e:0e:18:64:56:88:e3:03:c9:97:12:36:3d:52:
         b0:28:7c:76:15:d4:5e:0c:1f:7e:97:86:6b:eb:f4:18:c3:28:
         1e:0d:dc:1f:dc:6c:67:d1:38:92:6d:30:02:d7:6f:64:53:5c:
         22:a6:eb:0d:9c:3a:46:fd:3a:a9:4e:b9:22:41:7a:cd:46:40:
         95:59:c2:3e:22:fd:9f:2b:8a:64:1f:2b:8f:96:a0:00:da:78:
         4a:ed:89:c9:1c:08:5d:a6:fd:f7:7b:57:32:a4:04:6f:41:a2:
         9b:ea:66:ed:f2:8a:28:1c:57:55:35:68:7e:d3:83:96:d1:e7:
         07:7e:e1:ae:eb:53:f9:15:cb:fc:21:1b:7f:32:47:29:68:5c:
         3f:11:6d:7b:19:68:6c:31:ed:17:08:51:48:38:40:87:7b:91:
         7a:6b:26:97:b0:aa:54:34:55:a1:da:5e:ee:5b:05:75:2b:7b:
         b7:f0:99:08:63:9c:7f:67:ed:61:f6:35:dd:df:14:5d:3a:84:
         c0:68:c0:12:db:88:56:52:78:43:a6:cb:93:cc:12:69:fd:0b:
         2a:50:9d:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 19 20:24:51 2026 by rpki-client