Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/affa538b-2647-32f3-870f-d84cb213a3c1.roa
File:                     affa538b-2647-32f3-870f-d84cb213a3c1.roa (raw, json)
Hash identifier:          /jhnnQN6t9bNFJYzcEIgmDkbQ3gh7/Kadz8Mh98M3YE=
Subject key identifier:   76:BB:8E:6E:8B:BC:51:52:3E:4D:45:85:C1:68:71:F6:80:F9:28:32
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584EA796995B7154C2F92BB2B634
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/affa538b-2647-32f3-870f-d84cb213a3c1.roa
Signing time:             Wed 29 Jul 2026 01:00:12 +0000
ROA not before:           Wed 29 Jul 2026 01:00:12 +0000
ROA not after:            Tue 27 Oct 2026 01:00:12 +0000
asID:                     397203
IP address blocks:        192.68.130.30/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 21 Aug 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:a7:96:99:5b:71:54:c2:f9:2b:b2:b6:34
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Jul 29 01:00:12 2026 GMT
            Not After : Oct 27 01:00:12 2026 GMT
        Subject: CN=8498c4a1-9c30-43a5-bda5-0b1d5af92919
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:10:57:f9:11:18:a5:43:85:c6:75:65:20:eb:
                    66:1e:c7:20:52:34:af:51:a6:0a:e0:d5:e1:36:80:
                    a7:bb:b1:9e:37:19:91:d3:35:05:76:9d:eb:74:5a:
                    67:35:af:dc:60:58:1f:58:7d:61:fa:f5:81:c4:53:
                    f3:c2:8b:15:ea:30:62:16:c3:81:e3:ed:8b:1a:95:
                    53:ce:de:27:f4:88:02:46:f6:31:2a:c5:06:81:fa:
                    47:2e:3c:95:14:75:b2:1b:5d:c3:49:b4:6a:34:6a:
                    47:1f:73:90:c4:e3:51:52:30:d7:b1:e8:cc:49:cc:
                    ba:61:8c:5c:f4:d1:45:6f:a0:db:0e:a5:68:3d:d5:
                    3a:8f:f4:ed:3a:1e:25:6a:cb:c0:fb:04:81:be:b4:
                    cb:d8:23:84:a2:ab:9e:3a:88:1b:cf:11:46:cb:71:
                    8e:f4:d1:aa:81:1d:42:56:2f:28:16:96:b7:78:41:
                    4f:ac:86:68:ff:8f:d2:11:e2:75:8d:4b:03:85:72:
                    a7:c2:7f:f3:9a:ee:b5:de:17:bb:e0:ff:2b:d9:dc:
                    4e:da:1a:8e:9d:9c:ff:6b:08:b8:b3:81:2e:91:09:
                    a1:98:60:03:06:0f:df:ab:db:18:53:7d:9e:6f:cb:
                    34:9c:b4:79:d2:b1:fd:a8:d1:5c:8f:13:05:b3:be:
                    d9:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                76:BB:8E:6E:8B:BC:51:52:3E:4D:45:85:C1:68:71:F6:80:F9:28:32
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/affa538b-2647-32f3-870f-d84cb213a3c1.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.68.130.30/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a6:1e:93:43:58:89:c1:87:c3:75:e2:8b:0c:88:87:e2:d8:72:
         7f:ef:bf:7d:0d:c9:4b:98:10:73:05:a7:26:2d:4f:88:97:5d:
         97:cc:17:2e:f5:38:ce:dd:fd:5c:ed:4f:74:b8:75:59:67:c7:
         40:ac:87:7f:da:77:c8:f5:63:c9:e7:08:e6:47:8a:f1:57:18:
         80:ba:fc:be:79:66:e5:5e:48:5a:61:3b:f8:36:28:2f:0e:c8:
         23:2b:bd:17:ac:8d:97:d9:98:11:a5:ad:7a:e8:e1:0c:ac:00:
         f0:98:25:17:77:34:63:92:7a:ed:c2:ae:3a:85:bd:0c:84:cb:
         1d:94:08:af:b4:32:8a:ff:17:eb:6f:9c:54:65:94:ac:f6:94:
         42:54:33:f6:95:37:be:8d:d9:86:b7:46:44:dd:40:4f:eb:f1:
         45:a6:5c:c0:79:d8:31:2e:60:b7:a1:fe:62:3a:fd:6c:3e:dd:
         f3:24:4c:32:4f:f9:4e:01:2e:89:02:52:2c:54:49:5c:0b:b2:
         cd:2b:a6:59:e0:21:da:e8:d6:d8:82:1e:7f:f6:5e:3b:8a:1e:
         1b:ef:21:00:f0:20:13:e3:c4:4f:e2:63:55:49:3a:56:65:4f:
         d5:8a:ea:3f:10:af:2c:1b:cb:a0:4e:35:c0:7e:89:53:9e:e5:
         23:39:74:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 19 19:32:51 2026 by rpki-client