Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c195cd98-f973-3eb7-b0ae-c54fbe223c2d.roa
File:                     c195cd98-f973-3eb7-b0ae-c54fbe223c2d.roa (raw, json)
Hash identifier:          18BiJXxbmQrlAEIxxG8CtZ15e5ngpeo3XUIt7w0S+Dk=
Subject key identifier:   F0:5C:F1:D7:FD:E5:3E:DE:F9:6A:32:19:68:D6:FE:F6:01:96:04:E9
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584EDC9244B1E4710896DBE8FF80
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c195cd98-f973-3eb7-b0ae-c54fbe223c2d.roa
Signing time:             Mon 17 Aug 2026 01:00:12 +0000
ROA not before:           Mon 17 Aug 2026 01:00:12 +0000
ROA not after:            Sun 15 Nov 2026 02:00:12 +0000
asID:                     36628
IP address blocks:        192.31.80.30/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 21 Aug 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:dc:92:44:b1:e4:71:08:96:db:e8:ff:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Aug 17 01:00:12 2026 GMT
            Not After : Nov 15 02:00:12 2026 GMT
        Subject: CN=a121e937-b88e-4080-beed-dab09d979b94
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:e6:f2:00:c1:6d:70:ea:ce:bd:3a:e9:19:66:
                    59:c1:d5:d6:97:4a:cd:d6:e8:73:91:97:4b:18:ee:
                    dd:a7:1a:b1:93:83:73:12:89:b0:0d:a2:3d:5f:0a:
                    3e:43:71:3a:b5:34:32:07:79:fd:d7:02:c9:68:6a:
                    0d:21:27:bd:b2:b8:18:4f:75:52:1a:0b:0b:16:77:
                    fb:71:ae:6f:a4:cd:6e:53:f6:71:86:0b:40:2d:eb:
                    7f:3d:15:3f:52:cd:5b:84:d3:01:56:1e:7b:c5:27:
                    45:ce:c0:19:d8:d4:e9:67:14:39:c7:3c:11:54:13:
                    5f:b0:cf:c3:64:9c:c2:5d:e8:8c:cf:2d:ae:96:9b:
                    ba:d8:9e:1b:33:b6:3b:e7:92:86:63:02:40:b6:cd:
                    51:15:10:c7:01:8f:f9:e4:00:91:92:3b:f5:38:e7:
                    d8:dc:fd:44:f7:36:d1:7e:ce:5f:ab:69:4d:c0:59:
                    de:df:1b:69:7e:d7:c2:1a:05:04:18:29:f6:f7:36:
                    71:ef:db:f4:18:7a:6d:c6:cc:e2:94:33:2b:b7:7e:
                    6b:ea:d2:e7:05:92:78:90:01:87:1b:d7:92:7d:3e:
                    60:d1:52:66:30:06:d2:e5:28:8e:3e:fd:bb:30:c5:
                    4f:e7:64:a3:57:64:ee:d3:be:35:d8:d2:e5:1e:ec:
                    ea:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F0:5C:F1:D7:FD:E5:3E:DE:F9:6A:32:19:68:D6:FE:F6:01:96:04:E9
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c195cd98-f973-3eb7-b0ae-c54fbe223c2d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.31.80.30/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         9b:f1:04:f2:87:46:08:ba:76:3e:bb:b0:22:fe:c6:6d:a2:41:
         60:fe:a2:c2:da:cc:9a:3d:20:66:c0:da:be:56:18:77:29:3d:
         a8:1a:7b:c9:65:1b:6a:2b:75:6c:da:f4:cc:0f:e5:b3:56:80:
         5f:45:c0:e3:ba:75:82:e7:85:9a:73:78:84:92:c5:0d:48:bc:
         74:60:6d:ee:ed:a4:61:ec:9e:0e:60:e4:90:ce:e1:df:ef:ca:
         d6:62:36:66:1c:05:5b:19:83:27:f9:d6:f1:5a:3c:25:52:2d:
         05:f9:8c:27:3f:64:2e:dc:08:9b:fe:16:84:be:16:e7:10:59:
         74:eb:25:39:be:4f:fc:1f:93:e7:8a:5e:f5:d9:36:9b:77:b7:
         d0:08:ec:19:e3:6d:49:b5:99:f1:44:6b:5d:ac:f9:91:37:5f:
         ad:0f:74:f5:e4:74:88:9d:f0:1f:eb:b0:9f:bb:91:49:1d:bf:
         80:97:75:45:8c:ca:e4:d0:7c:90:89:07:90:85:35:b0:3f:46:
         77:36:5c:3c:11:15:ec:c8:2f:43:d9:1b:6c:78:e6:6f:a9:44:
         03:5f:af:e0:a2:e8:37:03:58:31:96:18:11:f9:b5:47:3e:94:
         76:2f:c1:ee:51:98:c1:9c:e3:c9:97:23:47:79:18:6a:3f:1e:
         94:fa:72:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 19 20:33:47 2026 by rpki-client