Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/af30eea1-deb1-3234-a3b2-5279936d1382.roa
File:                     af30eea1-deb1-3234-a3b2-5279936d1382.roa (raw, json)
Hash identifier:          CbGY/NANcQdw8aSf5PPhJi1fykixwzcgB7v67KOdaOc=
Subject key identifier:   1C:04:4C:DE:7F:CF:2C:F0:B5:AB:F3:84:E3:86:BC:8C:48:2D:0A:EE
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584EDC9249D953D68F6780D55840
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/af30eea1-deb1-3234-a3b2-5279936d1382.roa
Signing time:             Mon 17 Aug 2026 01:00:12 +0000
ROA not before:           Mon 17 Aug 2026 01:00:12 +0000
ROA not after:            Sun 15 Nov 2026 02:00:12 +0000
asID:                     397203
IP address blocks:        192.31.80.30/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 21 Aug 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:dc:92:49:d9:53:d6:8f:67:80:d5:58:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Aug 17 01:00:12 2026 GMT
            Not After : Nov 15 02:00:12 2026 GMT
        Subject: CN=d577f321-da48-4e02-9922-8694f29f9242
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:af:91:31:b8:c9:e3:a2:ca:00:90:51:98:2f:
                    0a:aa:d2:7d:8a:87:d8:cc:73:1a:68:54:7d:a6:93:
                    44:b7:b1:f4:6d:55:0f:20:5b:8e:ee:73:91:c5:a3:
                    96:77:29:8d:82:cf:a5:e0:d5:d4:a2:d0:f7:ce:8f:
                    d3:af:1c:1b:87:bd:ab:bf:3f:67:06:d7:ac:66:6e:
                    6d:ab:c9:9e:f4:e4:fb:8a:9b:ec:7e:0a:31:3c:c1:
                    aa:74:a7:dc:af:27:95:04:d3:de:f7:05:77:31:e1:
                    94:00:19:40:53:83:a2:57:5d:59:99:8d:22:c2:1e:
                    62:7a:a6:43:81:07:f9:d2:2e:e4:87:7f:73:09:55:
                    99:02:36:67:90:78:58:b4:35:13:08:81:46:30:e0:
                    20:ec:6c:9b:08:f1:55:58:69:c2:b9:79:19:94:75:
                    50:a0:1d:4e:be:c6:2b:1d:e8:42:55:18:e8:16:c4:
                    8a:c0:d9:4f:fe:0e:58:c7:57:07:7e:a8:b2:42:e0:
                    47:51:65:f9:d1:fb:e5:7f:49:f8:11:c0:dd:af:23:
                    a2:01:17:74:b6:f5:cc:ec:b9:f9:b0:40:33:80:85:
                    b3:81:0f:2d:14:cd:47:91:de:d3:2f:e7:7d:dd:8d:
                    9c:d1:58:7f:25:cc:15:69:ad:88:8d:af:d1:82:7a:
                    f4:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1C:04:4C:DE:7F:CF:2C:F0:B5:AB:F3:84:E3:86:BC:8C:48:2D:0A:EE
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/af30eea1-deb1-3234-a3b2-5279936d1382.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.31.80.30/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         74:28:ce:07:9d:bd:c7:d8:8c:f0:fa:0d:7d:db:fb:f4:31:92:
         1d:0e:b1:3e:0a:08:90:11:58:07:47:32:f8:0a:25:11:65:a2:
         ad:27:4e:de:4f:fb:84:0a:d9:6b:fb:6e:45:3b:82:1e:0c:24:
         c2:57:7d:12:3d:35:78:d8:89:c2:cc:2e:ff:ed:f5:45:b7:5f:
         14:31:56:ed:28:c7:2d:8b:04:12:f7:94:5e:97:e2:15:40:09:
         28:e9:6f:99:0e:7b:a5:41:a3:2c:fc:5d:09:d9:77:bd:7d:fc:
         ef:41:92:eb:dc:cb:9d:5e:83:c3:7f:12:34:64:b2:87:18:8a:
         8c:8c:a9:4d:f0:34:8e:1b:03:39:cb:2b:f4:10:a7:f6:c7:9b:
         4a:bd:ae:38:9f:b0:15:95:fe:a8:21:3a:58:8b:89:26:92:4d:
         52:47:69:6a:d1:7f:75:58:7a:94:28:fa:1d:39:e9:3d:30:a8:
         da:f4:de:25:cc:a2:4f:e3:6e:1c:01:b8:37:18:db:b4:2e:da:
         ea:ec:61:3d:8f:7f:08:34:9e:61:95:86:bc:a6:a0:76:b4:24:
         de:ac:cf:0e:de:29:8c:90:7c:5e:a1:bc:1b:55:e3:c1:f5:29:
         22:d0:fb:4a:6d:ed:85:e2:2c:b0:5e:48:12:09:0c:9e:6f:9b:
         13:b0:39:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 19 20:31:04 2026 by rpki-client