Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/e4f25d59-5b58-3dc0-a482-91571f0279f2.roa
File:                     e4f25d59-5b58-3dc0-a482-91571f0279f2.roa (raw, json)
Hash identifier:          wGA+nRFq2/OaVdqgIVgrxa19TTTNDJy68hfa8YeC3zE=
Subject key identifier:   61:20:E2:90:70:C2:F7:77:6D:A3:5D:48:0E:94:FB:DB:9F:B9:5A:43
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584EA7958CE9D7E2471FC64441E0
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/e4f25d59-5b58-3dc0-a482-91571f0279f2.roa
Signing time:             Wed 29 Jul 2026 01:00:12 +0000
ROA not before:           Wed 29 Jul 2026 01:00:12 +0000
ROA not after:            Tue 27 Oct 2026 01:00:12 +0000
asID:                     36623
IP address blocks:        192.26.92.30/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 21 Aug 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:a7:95:8c:e9:d7:e2:47:1f:c6:44:41:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Jul 29 01:00:12 2026 GMT
            Not After : Oct 27 01:00:12 2026 GMT
        Subject: CN=4032f570-d3a4-45ad-a1d2-1dbbeded1db0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:90:7f:7b:6c:7e:6a:01:19:b3:71:e2:c1:ca:30:
                    f8:87:f8:d0:ed:e9:34:c1:d5:dd:77:d4:ae:a0:34:
                    0a:bb:72:11:26:bf:d4:d3:28:d0:04:2b:f0:b4:42:
                    1f:94:91:1a:13:f1:c1:ad:f6:80:96:3e:ec:84:ba:
                    cf:1a:9c:fd:5d:3f:ce:e2:b9:2f:63:5e:30:16:14:
                    cd:bf:e5:23:f9:03:57:f7:20:6a:23:93:60:e5:80:
                    58:1c:73:47:b9:d9:af:fd:76:da:34:13:c8:82:6c:
                    d7:bb:48:bc:0c:11:83:d1:0c:4b:f9:f2:b4:21:e4:
                    6a:3e:d3:9f:2c:55:1d:f6:dd:56:bb:3c:32:56:87:
                    4d:3d:e5:6e:60:73:b3:e0:1a:2a:ea:99:d9:f9:ba:
                    38:4d:c3:64:f4:26:5b:5d:f0:86:e3:80:b8:50:f3:
                    45:c0:7a:2a:e8:ee:ac:34:bf:44:57:a7:a2:cd:50:
                    ab:f7:bf:1f:4d:74:61:74:c6:75:f3:bb:01:5f:1c:
                    3a:ad:35:53:9c:26:0a:25:c1:b8:46:0f:75:45:b0:
                    92:94:7a:98:44:6d:df:3f:1d:63:86:85:33:e0:51:
                    50:9a:e2:d5:87:41:19:63:7a:40:67:4d:3d:76:3b:
                    aa:e4:39:ed:e1:6a:47:ef:db:49:3f:6f:cd:32:41:
                    f0:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                61:20:E2:90:70:C2:F7:77:6D:A3:5D:48:0E:94:FB:DB:9F:B9:5A:43
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/e4f25d59-5b58-3dc0-a482-91571f0279f2.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.26.92.30/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         11:e9:72:51:54:fe:8a:b4:cc:37:12:1a:5c:7e:ad:7b:33:6b:
         8b:2a:dc:4b:de:1e:61:fd:38:b5:c2:16:87:9d:11:d8:86:4e:
         1f:1f:8d:6b:8d:2a:cf:73:81:24:44:7c:53:65:96:7e:61:16:
         24:af:a4:48:5c:62:c7:e2:35:75:d4:8c:2d:7d:2a:08:54:82:
         24:6a:b1:09:9b:db:56:bc:38:04:5c:2e:83:7b:45:3e:74:51:
         85:79:8a:2f:e3:68:45:23:71:cf:47:64:d5:be:66:33:a1:2f:
         4b:06:12:df:26:ab:67:2a:6e:d1:e7:6c:4f:77:0c:51:67:9f:
         b2:f6:1b:73:a9:6c:31:a4:05:18:ad:5e:5d:b5:a0:50:d2:e2:
         ac:55:eb:89:67:f3:52:9c:bf:4a:2f:36:e5:58:54:cc:50:e1:
         d7:c8:c6:cb:7d:d7:31:12:63:56:19:30:cb:9d:b9:6f:38:fd:
         68:9f:fb:aa:02:e3:de:c5:60:95:eb:9e:95:b2:c9:96:31:06:
         de:6d:ab:68:9c:41:0b:89:64:45:2c:9c:b2:d2:4a:4c:11:15:
         6a:72:6b:48:b8:20:cb:31:12:cb:d3:92:68:92:92:08:4c:a5:
         64:16:21:08:5d:dd:1f:4b:20:5e:3f:ea:3e:af:f7:2a:4e:e2:
         5f:93:c6:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 19 20:32:29 2026 by rpki-client