Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/baf78295-df3d-3ca4-b590-be9061d1877a.roa
File:                     baf78295-df3d-3ca4-b590-be9061d1877a.roa (raw, json)
Hash identifier:          7IypeDXhIriUYcSRClL5f+1Q3CvHzagRqLucdVKpQaY=
Subject key identifier:   1C:59:F8:E6:CC:1E:56:3A:2B:88:CF:D0:B1:6D:16:8A:C5:F0:36:71
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584EC9071F426433427264AEDE00
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/baf78295-df3d-3ca4-b590-be9061d1877a.roa
Signing time:             Mon 10 Aug 2026 01:00:12 +0000
ROA not before:           Mon 10 Aug 2026 01:00:12 +0000
ROA not after:            Sun 08 Nov 2026 02:00:12 +0000
asID:                     396599
IP address blocks:        192.35.51.30/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 21 Aug 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:c9:07:1f:42:64:33:42:72:64:ae:de:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Aug 10 01:00:12 2026 GMT
            Not After : Nov  8 02:00:12 2026 GMT
        Subject: CN=576391d1-8a5d-4b4e-8521-34a16320b58b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:91:4f:3e:0f:25:3b:8d:a6:d2:85:3f:8e:a8:
                    f2:c8:c6:ae:a5:09:8c:a5:1c:e2:0a:87:9c:22:a9:
                    ef:69:47:5e:ec:fe:f1:17:08:d3:4a:36:4b:d6:65:
                    8a:f9:d7:cb:03:56:3f:16:ee:57:04:3a:0c:16:81:
                    17:f4:b6:09:f7:2d:10:28:c9:8c:3d:6c:02:2b:98:
                    82:61:76:4d:43:40:e0:c5:04:ec:5e:23:3d:57:27:
                    bd:64:a8:b0:c1:9b:ea:5f:d8:e3:79:b5:a8:93:34:
                    e3:0d:24:17:11:ca:70:be:ab:16:7a:aa:63:ba:f2:
                    84:81:cb:55:8c:32:77:f3:b1:13:53:21:b0:21:22:
                    8a:de:bb:9c:fe:a8:88:f0:16:25:aa:a1:d2:22:c3:
                    94:90:2c:b6:58:02:ee:ac:00:f4:43:c1:56:0f:1e:
                    a5:55:0e:42:5f:2a:33:20:55:91:84:45:66:e3:29:
                    59:f6:6c:14:d7:97:c9:00:93:ec:eb:ef:8e:88:31:
                    01:a5:bb:57:b4:bd:01:35:c3:85:e4:4b:ab:26:b1:
                    42:a0:68:11:9e:8a:b1:b9:29:d9:20:b6:5f:04:71:
                    07:06:7f:2b:f7:fa:33:39:80:3e:06:d5:85:d8:9d:
                    0f:10:30:36:27:85:66:a8:e9:af:35:a3:f8:3d:05:
                    fc:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1C:59:F8:E6:CC:1E:56:3A:2B:88:CF:D0:B1:6D:16:8A:C5:F0:36:71
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/baf78295-df3d-3ca4-b590-be9061d1877a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.35.51.30/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         78:4b:9f:65:3e:a1:f8:59:cf:ae:1a:c4:79:ec:0f:58:c2:28:
         8c:8b:bc:b1:72:de:65:51:fa:19:82:24:cb:ad:8f:3c:50:b6:
         ee:7c:4d:16:8c:ed:22:86:9f:c0:ad:d5:89:8a:eb:80:98:67:
         89:fb:7d:7f:40:7e:ff:e9:e0:2f:44:c6:27:44:04:ab:40:0e:
         d7:5f:ee:48:c6:8e:4f:33:04:49:09:38:00:3a:1e:a4:2c:bf:
         32:c7:e2:02:ef:68:bc:a7:87:25:77:04:95:5c:91:5e:81:49:
         01:66:d7:3b:05:f2:1b:45:06:3a:0e:9b:4e:2c:dd:8c:87:73:
         18:70:fe:04:04:3d:5f:64:e5:07:bc:f3:33:da:46:46:b1:64:
         70:b5:43:51:08:65:6e:eb:0e:18:90:19:5d:88:23:1d:96:25:
         ad:95:3b:23:49:3b:73:e8:81:6b:b0:eb:af:0b:48:ff:73:ad:
         9c:51:75:b0:b7:13:24:8c:10:40:a3:92:f5:39:3c:94:07:b7:
         75:d7:27:90:57:34:6c:eb:c0:7c:97:fa:a3:19:6e:7a:4e:7b:
         2d:34:d0:9b:84:b7:8f:f5:f7:09:09:2b:34:3c:4d:48:f7:8b:
         d7:c6:97:29:99:75:0f:5e:d3:0a:a0:ee:5c:d3:36:24:e6:75:
         fe:e2:cd:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 19 20:19:05 2026 by rpki-client