Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/cf09854e-4b86-3725-b4da-1d34f6ac54eb.roa
File:                     cf09854e-4b86-3725-b4da-1d34f6ac54eb.roa (raw, json)
Hash identifier:          m2SOLCDLRY/ZSKadwrHNUBQCzku3KTogTueH5o23Mwg=
Subject key identifier:   C2:12:FF:FB:4F:30:99:02:0A:65:A3:A7:C2:A9:C7:C4:C8:C0:FD:6A
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584EAD1C4D1F5B89E61C5B62AE00
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/cf09854e-4b86-3725-b4da-1d34f6ac54eb.roa
Signing time:             Fri 31 Jul 2026 01:00:11 +0000
ROA not before:           Fri 31 Jul 2026 01:00:11 +0000
ROA not after:            Thu 29 Oct 2026 01:00:11 +0000
asID:                     396600
IP address blocks:        192.58.128.30/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 21 Aug 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:ad:1c:4d:1f:5b:89:e6:1c:5b:62:ae:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Jul 31 01:00:11 2026 GMT
            Not After : Oct 29 01:00:11 2026 GMT
        Subject: CN=f0c3d979-4531-4ff7-9181-053d1379c375
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:33:a4:58:aa:d3:b8:89:ef:c9:7f:8a:d7:2c:
                    43:2e:95:f5:56:a6:65:eb:07:52:56:13:9a:bc:71:
                    fc:3d:f0:55:ac:5f:0d:42:16:42:89:a5:42:ca:d9:
                    6c:db:b0:ad:48:ed:cd:fe:2d:ab:2f:53:72:34:a7:
                    6f:a4:08:57:04:1e:c6:a2:10:fd:94:fd:c1:7f:11:
                    c5:37:99:49:73:3e:70:eb:7f:35:30:62:a9:bd:55:
                    96:e8:29:30:cb:43:c0:ba:30:c0:c5:3d:d9:41:57:
                    33:9b:71:fb:f4:8d:53:d2:03:6b:dc:08:0b:e6:3a:
                    64:77:d9:8b:2a:85:f4:f5:07:4c:79:57:3c:3b:3e:
                    bc:20:56:66:60:d0:51:ea:13:88:64:e2:8d:d9:61:
                    f8:9c:87:ca:02:e0:24:7c:d0:5b:0b:6b:fe:85:2a:
                    d7:6d:6e:da:57:82:0d:cb:64:b6:90:f8:6f:bb:f0:
                    17:f4:1c:6f:25:46:6b:a0:28:4a:6d:20:84:eb:c6:
                    f3:d4:86:d5:68:22:34:f4:8d:f6:ec:8f:6a:7e:99:
                    df:60:b2:dd:fb:97:82:d7:ed:d9:bb:90:d5:a4:74:
                    9f:fa:35:8f:1a:d2:6b:b0:a3:4d:c0:ee:f8:64:7c:
                    10:a6:92:00:6f:07:d7:9d:42:03:6b:53:a2:4a:23:
                    e2:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C2:12:FF:FB:4F:30:99:02:0A:65:A3:A7:C2:A9:C7:C4:C8:C0:FD:6A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/cf09854e-4b86-3725-b4da-1d34f6ac54eb.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.58.128.30/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7b:98:a0:77:aa:80:07:6d:1b:cf:41:fd:d8:33:b2:e4:15:71:
         9f:2b:f2:52:bc:d3:f0:a2:cd:30:67:1e:88:d1:18:d5:b1:a2:
         fd:c5:da:42:ca:27:2d:12:f1:2d:9c:37:91:95:cc:a5:ea:7c:
         1b:bd:7e:57:02:eb:85:2a:ac:39:cd:a3:98:9e:ed:93:80:0e:
         15:e8:12:88:84:fd:3f:f9:b3:50:c8:2f:83:55:05:d0:1e:bf:
         46:8c:93:53:41:97:dc:20:f1:15:70:79:a6:30:e3:13:a7:51:
         47:d3:75:70:c2:e6:97:f0:7a:71:25:db:16:79:77:5b:b2:28:
         22:65:d8:66:e9:eb:42:2b:04:99:fa:3c:f8:07:e1:96:25:22:
         b6:fb:0f:e3:4a:6b:bc:55:ea:98:f7:f0:77:98:31:51:56:ab:
         16:bd:b9:8a:95:f0:6b:c4:08:24:e4:67:bd:eb:c8:11:80:84:
         67:2f:48:3a:9f:88:8a:27:da:86:44:9e:25:a5:d5:4c:7a:49:
         97:4e:62:b2:ce:85:86:8d:dd:3e:07:27:bf:60:a9:0b:03:8b:
         65:fb:27:76:04:61:42:ab:8a:c4:f0:4c:9a:9e:ae:54:6b:19:
         3c:a5:6b:7f:43:08:1e:b4:fd:9a:bd:fb:9f:49:19:00:5c:52:
         96:8a:7a:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 19 20:21:59 2026 by rpki-client