Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/e0f39602-0187-3f2d-9d05-25dcdc043692.roa
File:                     e0f39602-0187-3f2d-9d05-25dcdc043692.roa (raw, json)
Hash identifier:          UuLKCp0qbc+QgcGT4hFHdOs4eWabNHlzNxdekP72pr4=
Subject key identifier:   B2:D4:95:E8:80:A2:59:FF:A2:E2:69:EB:CE:1D:34:8A:6F:3B:3C:F5
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584EA797A251537C43EA2F5CF880
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/e0f39602-0187-3f2d-9d05-25dcdc043692.roa
Signing time:             Wed 29 Jul 2026 01:00:12 +0000
ROA not before:           Wed 29 Jul 2026 01:00:12 +0000
ROA not after:            Tue 27 Oct 2026 01:00:12 +0000
asID:                     396543
IP address blocks:        192.43.172.30/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 21 Aug 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:a7:97:a2:51:53:7c:43:ea:2f:5c:f8:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Jul 29 01:00:12 2026 GMT
            Not After : Oct 27 01:00:12 2026 GMT
        Subject: CN=7331ec2e-3377-420a-962d-689a128e0dc7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:88:c1:54:40:5d:7d:91:7f:71:48:53:1e:fe:84:
                    6c:1f:57:9b:0d:62:78:a6:4a:35:53:30:76:ef:0c:
                    31:12:dd:8d:88:1e:27:d2:28:95:d8:19:89:89:32:
                    97:48:77:12:dc:6d:8d:7b:78:37:24:b4:5a:20:de:
                    a6:dd:0a:98:bf:d7:1d:50:c0:ad:e8:07:45:ae:ab:
                    c9:c0:f3:c4:35:5a:69:dd:94:78:95:a8:31:62:43:
                    42:87:3d:00:eb:7a:53:11:b8:76:eb:68:6f:4b:f5:
                    e8:1d:d6:00:cb:21:b3:ab:d5:18:10:5c:f5:44:29:
                    3a:3b:8f:0b:2b:49:95:c2:f0:e3:74:ff:db:15:4a:
                    a3:66:64:d0:ef:3b:40:4c:56:4a:41:62:fd:e9:bf:
                    2b:9d:bd:89:e6:ee:52:38:ef:d7:a8:53:b5:05:48:
                    43:7d:b1:ed:cd:5e:d1:bb:c7:0b:7f:f2:75:f2:0d:
                    7a:fb:c9:0c:5d:63:4c:89:2a:95:cc:ba:7e:30:aa:
                    61:d1:47:74:97:4f:bd:90:5c:5e:d0:52:4c:aa:c6:
                    10:23:33:55:c8:e0:1c:06:a0:b4:17:cd:93:f8:ec:
                    68:be:a5:5d:77:af:58:cc:20:93:6f:8d:7a:51:b5:
                    ad:fa:e2:77:37:28:ee:b3:98:26:bf:53:bd:33:11:
                    79:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B2:D4:95:E8:80:A2:59:FF:A2:E2:69:EB:CE:1D:34:8A:6F:3B:3C:F5
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/e0f39602-0187-3f2d-9d05-25dcdc043692.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.43.172.30/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         04:2a:7b:c6:4d:25:45:9f:42:ef:25:e7:b5:95:ad:70:85:70:
         6e:46:c1:11:4f:e9:42:aa:69:69:68:4a:28:c3:07:b9:63:53:
         38:e7:fe:58:64:d5:27:dc:2b:33:bb:9b:f8:c5:b5:1d:28:68:
         88:7b:bb:b2:b8:af:a5:b0:b6:fa:28:81:29:9e:09:b1:de:0c:
         ec:92:57:26:ff:ba:17:88:1f:ff:b3:81:5d:dc:d2:12:8d:fc:
         25:20:cb:43:18:4c:cb:19:4e:0e:e8:30:e0:36:71:d3:15:5f:
         32:38:85:b5:df:40:c8:59:32:77:b0:82:34:03:67:73:62:00:
         8a:84:f6:4a:20:cd:de:4f:95:17:fd:6f:fd:18:45:fd:f8:a7:
         2f:ba:08:66:b2:29:4b:0d:29:4f:83:a6:5d:43:83:86:3a:d5:
         c0:00:7b:3e:5d:d6:7d:c9:a1:68:6b:d4:32:e9:0a:9a:f9:80:
         94:c8:fc:e9:26:9e:54:2b:d9:ae:94:bd:14:a1:03:bb:2e:e3:
         d9:0e:89:10:0c:43:2a:b2:4a:b1:b8:91:54:a8:64:31:9c:ce:
         a3:4e:23:b7:c0:5e:c1:66:53:47:2f:af:ad:f9:4e:96:bf:2f:
         6d:e5:a1:a2:b6:83:15:ff:2b:24:be:e6:3f:7d:84:1b:d7:81:
         6b:49:d5:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 19 20:21:56 2026 by rpki-client