Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/f13570b9-342a-35da-947e-cd8a4d85f9f9.roa
File:                     f13570b9-342a-35da-947e-cd8a4d85f9f9.roa (raw, json)
Hash identifier:          tlEAnbolG9IS37XieSbEIsUgWFT0JAxsh9cSJC9X+6U=
Subject key identifier:   FC:34:B3:17:42:06:72:F2:A4:2F:FE:B9:DD:F8:E4:4C:81:45:DA:78
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584EC90726A7F420D28879EE2F00
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/f13570b9-342a-35da-947e-cd8a4d85f9f9.roa
Signing time:             Mon 10 Aug 2026 01:00:12 +0000
ROA not before:           Mon 10 Aug 2026 01:00:12 +0000
ROA not after:            Sun 08 Nov 2026 02:00:12 +0000
asID:                     396550
IP address blocks:        192.35.51.30/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 21 Aug 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:c9:07:26:a7:f4:20:d2:88:79:ee:2f:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Aug 10 01:00:12 2026 GMT
            Not After : Nov  8 02:00:12 2026 GMT
        Subject: CN=f4d9bfb8-2792-4a34-a174-e60780fc03a0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8b:64:46:04:7a:8c:84:ee:2a:c5:d6:c8:48:9d:
                    4d:44:48:07:97:10:27:16:3d:3b:42:47:40:b5:64:
                    f4:cc:43:05:e1:d1:e8:01:9d:74:17:47:50:f2:40:
                    ef:9e:e1:14:95:af:07:1a:7a:f9:0a:49:29:3c:63:
                    d7:ab:5c:10:73:3c:38:57:52:8f:28:49:6d:85:67:
                    85:9b:a9:04:c4:d4:e8:0e:87:14:d8:6e:bf:a0:6b:
                    7f:54:8d:c8:6d:6a:38:80:aa:97:e2:e1:0a:79:74:
                    78:fd:46:ea:ef:74:cd:5a:3b:be:ce:88:9b:6e:20:
                    81:80:86:c7:82:32:b8:06:f5:63:aa:3a:d7:9e:9c:
                    6b:f5:c7:b2:5c:4f:6b:48:9d:6b:1f:78:1b:6f:a4:
                    87:4d:dc:ae:9b:5d:87:60:63:74:3f:02:9c:90:94:
                    45:6e:bc:f6:56:bf:d1:ff:fb:94:2f:dd:ff:bd:b6:
                    78:04:51:71:e1:20:cd:74:be:c1:88:ad:5d:1c:72:
                    f2:e9:20:28:95:8f:90:1f:ba:ea:97:5f:bb:9c:75:
                    68:15:37:e9:5d:d3:d3:b6:c1:48:c0:a3:18:95:5b:
                    32:be:0d:c4:0f:00:2b:03:3b:fe:58:88:c5:5f:04:
                    a6:a1:d9:b8:82:98:1f:5d:88:ba:f0:c1:c8:83:d9:
                    58:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FC:34:B3:17:42:06:72:F2:A4:2F:FE:B9:DD:F8:E4:4C:81:45:DA:78
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/f13570b9-342a-35da-947e-cd8a4d85f9f9.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.35.51.30/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         00:f5:54:66:cf:ab:90:9c:c1:93:1a:bd:b4:01:71:de:b6:1d:
         e3:67:ca:1b:e7:02:8f:3a:30:df:39:64:78:97:4d:de:e0:ce:
         0c:75:2d:32:f4:a9:65:29:27:96:88:8b:b1:84:bf:26:e8:e2:
         65:87:7e:5c:ed:42:06:dd:4b:75:87:9b:a7:d4:fc:c5:e3:37:
         c8:63:b2:74:1f:21:d0:af:98:3e:58:3b:3d:11:44:7c:64:f2:
         bf:57:34:e4:11:ff:86:c4:19:53:24:5c:8e:61:ac:1b:35:c8:
         36:b4:33:02:5d:73:82:53:9a:bb:ff:81:f6:80:df:61:f3:9e:
         e5:71:95:93:99:c9:01:d3:03:02:85:84:b5:c8:56:c7:ab:6e:
         8c:0b:c1:6e:6a:78:a4:70:b5:3b:f8:96:14:87:4a:ce:27:cf:
         80:7b:b4:c9:15:1d:3e:c2:b6:39:9d:0a:37:ef:2e:0e:92:f9:
         cb:b2:73:14:00:c5:4d:a8:49:7a:31:34:8b:37:f3:4b:ba:b7:
         03:6e:72:2e:2e:28:d3:ea:5a:9f:4b:ce:d2:77:1c:62:d1:f7:
         d8:8f:5a:ff:93:f9:e9:5e:c1:0a:16:0d:92:90:e0:56:c2:9e:
         95:3d:42:14:fe:29:57:13:5e:77:55:a9:d8:41:63:ab:f3:36:
         af:9b:d1:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 19 18:43:46 2026 by rpki-client