Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/f1fcc5d6-66ba-31e5-99d1-f6ee355e98ae.roa
File:                     f1fcc5d6-66ba-31e5-99d1-f6ee355e98ae.roa (raw, json)
Hash identifier:          5MvN8askTpVVNkccsDAyjKN73f27RwB6L29D8Xvo4o8=
Subject key identifier:   21:E2:FC:83:36:88:D3:9A:31:AA:24:84:B3:69:FE:73:C9:52:2B:0D
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584EAD1C47F1ED3B852268514980
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/f1fcc5d6-66ba-31e5-99d1-f6ee355e98ae.roa
Signing time:             Fri 31 Jul 2026 01:00:11 +0000
ROA not before:           Fri 31 Jul 2026 01:00:11 +0000
ROA not after:            Thu 29 Oct 2026 01:00:11 +0000
asID:                     397196
IP address blocks:        192.58.128.30/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 21 Aug 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:ad:1c:47:f1:ed:3b:85:22:68:51:49:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Jul 31 01:00:11 2026 GMT
            Not After : Oct 29 01:00:11 2026 GMT
        Subject: CN=2efce6b2-1262-4109-958d-45084ee3279a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:8d:a6:53:b2:28:7e:df:ce:a8:0e:c8:17:ee:
                    82:b8:bd:19:81:f4:73:f3:1a:d9:72:c8:10:fd:ad:
                    af:aa:99:ba:3b:06:9d:79:73:a8:81:64:71:11:fa:
                    88:88:20:13:1e:0d:c7:3d:e2:08:26:f3:4f:7b:dd:
                    58:bc:1a:05:0a:70:6e:99:02:da:49:c9:e7:bb:fa:
                    2a:72:11:c8:a3:30:94:45:04:73:f5:b1:ac:7c:1a:
                    55:a0:bf:63:a2:bc:a5:fd:ed:8e:73:fc:46:a8:95:
                    d2:1f:ed:82:94:a4:72:cc:4c:d2:22:f9:66:0c:12:
                    3f:94:15:bb:d2:16:c8:cf:16:9d:f0:ad:82:ae:2a:
                    c8:d7:8e:95:96:e6:aa:43:2e:5c:8d:0a:82:a5:b1:
                    e6:74:0c:78:33:93:9d:ce:60:6a:33:08:33:48:f6:
                    4c:5c:d0:58:00:d8:17:f5:c0:87:50:a7:47:f9:64:
                    71:01:60:5f:eb:70:a5:ac:7e:e7:69:1f:20:7b:ff:
                    dd:ca:9f:98:8d:d1:30:22:d8:16:94:19:8b:3d:2e:
                    68:85:40:f4:c0:b0:d6:01:13:93:40:63:8a:cb:90:
                    fc:b3:f5:f0:f6:34:87:56:00:0f:f3:a7:85:e2:8d:
                    e6:19:27:70:9a:98:c0:18:73:17:32:79:60:90:b3:
                    a8:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                21:E2:FC:83:36:88:D3:9A:31:AA:24:84:B3:69:FE:73:C9:52:2B:0D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/f1fcc5d6-66ba-31e5-99d1-f6ee355e98ae.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.58.128.30/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         38:5f:43:cb:d0:f9:78:a0:f7:a6:59:42:ad:08:4c:dd:99:26:
         49:c8:12:6c:71:b7:88:fd:4a:c4:77:0c:3b:35:4f:6d:9a:3b:
         d6:5c:fa:13:67:21:78:65:e1:7f:85:51:f7:90:99:e7:e4:06:
         fd:f8:27:5b:9c:02:07:52:a7:75:a3:da:eb:92:71:91:0b:50:
         70:8d:97:70:e0:1c:aa:3f:45:02:a6:7f:83:17:08:31:91:39:
         5c:38:27:23:08:51:f9:d0:f9:89:bd:aa:22:41:7c:81:6d:9c:
         72:43:41:5d:9e:3f:e1:1a:44:8d:ee:3f:58:29:7f:a5:9b:f5:
         d3:03:17:8b:fb:76:1f:dd:9b:3b:32:04:4b:ec:77:64:c3:2e:
         30:9d:14:31:6b:0a:16:7d:f4:9e:35:71:82:31:f8:af:04:37:
         0c:0f:fb:41:02:1c:ab:ca:d9:e7:cc:74:e8:36:52:2d:3e:79:
         c5:c5:e0:ec:84:a9:4b:c4:df:45:77:b9:2e:cb:59:8d:d3:72:
         58:3c:ab:b8:db:eb:39:91:98:7f:4c:05:93:2c:63:30:22:c2:
         94:01:cb:c7:7c:d0:b9:d9:d5:56:d5:87:1a:18:51:5b:ec:0e:
         05:cc:68:e8:27:1d:b5:97:d0:f3:1e:83:79:5e:2d:06:24:3c:
         b8:3a:33:50
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 19 18:46:24 2026 by rpki-client