Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/bb3a3fe8-abe9-31b9-b3f4-416cf0971e53.roa
File:                     bb3a3fe8-abe9-31b9-b3f4-416cf0971e53.roa (raw, json)
Hash identifier:          aueWCIiDt1Qv2waYqwWr4v8RMGeBj0jmWp9QLY2aSqI=
Subject key identifier:   0F:65:BB:1C:0A:F9:7F:11:AA:8D:37:B0:6A:FA:EC:96:32:07:AB:14
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584E3A2F79B5C0CA214CEFB467E0
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/bb3a3fe8-abe9-31b9-b3f4-416cf0971e53.roa
Signing time:             Fri 19 Jun 2026 21:00:12 +0000
ROA not before:           Fri 19 Jun 2026 21:00:12 +0000
ROA not after:            Thu 17 Sep 2026 21:00:12 +0000
asID:                     20172
IP address blocks:        192.31.80.30/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 30 Jun 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:3a:2f:79:b5:c0:ca:21:4c:ef:b4:67:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Jun 19 21:00:12 2026 GMT
            Not After : Sep 17 21:00:12 2026 GMT
        Subject: CN=68147416-4425-4755-a185-fe2dc0a8318c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:91:07:05:97:72:bb:81:1c:bf:46:60:e6:3d:54:
                    bb:ec:3b:23:9d:68:4b:a4:0c:7b:bf:43:6f:4f:5e:
                    33:6a:50:8f:9d:c4:31:b9:f3:1c:a5:14:59:5a:8f:
                    79:64:da:f2:0b:e6:f3:98:03:20:3a:46:26:a4:4a:
                    46:39:2d:68:07:3b:c4:ad:66:91:c0:b8:75:cd:56:
                    1a:c8:b3:10:92:a2:21:66:a4:14:68:df:fa:ee:55:
                    1e:27:62:a0:c0:22:4d:7c:d8:19:64:eb:80:2d:f7:
                    01:91:f2:5a:76:f6:a0:5e:b4:08:ad:72:d0:b4:ee:
                    3d:01:3b:39:77:da:50:51:0a:5a:7b:0c:66:ad:4e:
                    1e:45:2b:8b:d4:c8:b5:cb:85:32:e5:31:ae:1e:40:
                    fb:21:37:06:ab:a0:20:3b:2c:f7:00:17:e5:04:b5:
                    51:82:cd:69:c8:c6:ae:07:d9:16:e6:70:c6:68:fc:
                    66:d5:93:0d:f7:c2:0c:16:10:c4:f0:8b:00:ff:e9:
                    49:83:08:76:76:d6:6c:01:d3:2d:bd:1f:4f:08:4a:
                    21:42:ce:5a:2e:56:2a:6d:82:29:a7:7a:cd:57:0e:
                    32:76:fe:7e:f6:bc:50:2a:a8:a5:89:42:af:71:72:
                    78:56:7a:6f:44:09:cc:30:c8:11:6d:51:93:97:0b:
                    bd:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0F:65:BB:1C:0A:F9:7F:11:AA:8D:37:B0:6A:FA:EC:96:32:07:AB:14
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/bb3a3fe8-abe9-31b9-b3f4-416cf0971e53.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.31.80.30/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         9e:a7:41:3e:41:2f:f9:57:3e:c2:e2:13:7f:5f:56:07:41:e3:
         3a:08:0c:e0:f9:c6:8c:93:bf:de:7e:ad:cb:26:9f:dd:94:c7:
         fd:93:9e:d9:2e:4a:0d:a3:5c:07:33:4a:40:07:37:db:19:85:
         8d:af:9b:3f:ac:ec:bc:d9:7f:16:03:2d:97:4a:06:ab:f9:57:
         79:09:aa:a1:f6:29:0b:2f:7f:ed:3a:e6:03:d8:b2:43:03:5f:
         43:a4:03:5d:12:c8:54:e2:df:c7:20:48:1f:97:e3:7a:00:7b:
         16:08:be:64:66:20:e6:da:90:a6:4c:57:a3:f4:8c:fa:07:28:
         31:a8:40:4d:c4:fd:38:2f:a1:61:44:a8:09:22:a7:a2:9f:d8:
         78:1e:5c:da:43:ac:ad:76:77:42:a3:3a:77:92:81:3f:c0:c3:
         9e:d8:51:c8:e9:5a:06:55:7b:f3:25:b1:05:d8:d6:0e:e7:40:
         bf:9a:a2:c6:b9:6a:14:a5:59:c6:c9:de:22:f2:7d:71:7e:4f:
         5e:70:fa:83:19:66:77:21:3a:02:98:5c:e0:63:3a:56:2d:cc:
         4c:86:c9:f6:f4:59:22:00:e1:24:dd:58:f2:11:77:19:96:49:
         ff:78:a5:e4:75:00:37:f4:93:bc:61:ef:c9:9f:e1:ff:79:07:
         d1:7c:46:4d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 28 19:34:32 2026 by rpki-client