Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/0a3b1138-940e-309d-af59-4ddca880b2fa.roa
File:                     0a3b1138-940e-309d-af59-4ddca880b2fa.roa (raw, json)
Hash identifier:          UwtS8NH+Aj0WPf4IAI3jI7xhVegs6Atd5y/b3GvgLeE=
Subject key identifier:   B1:72:C6:0A:54:8F:91:D6:7F:3E:AC:E9:34:30:01:AE:74:03:FE:D9
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584E6DD4CE139269827C7598A000
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/0a3b1138-940e-309d-af59-4ddca880b2fa.roa
Signing time:             Wed 08 Jul 2026 09:00:12 +0000
ROA not before:           Wed 08 Jul 2026 09:00:12 +0000
ROA not after:            Tue 06 Oct 2026 09:00:12 +0000
asID:                     397208
IP address blocks:        192.54.112.30/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 26 Jul 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:6d:d4:ce:13:92:69:82:7c:75:98:a0:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Jul  8 09:00:12 2026 GMT
            Not After : Oct  6 09:00:12 2026 GMT
        Subject: CN=0d31ed27-fa7a-4ce7-864b-c809b70b7bdd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:1d:ec:84:c9:e6:14:e0:94:b2:1c:41:8a:01:
                    f8:2a:7a:d1:3b:18:a4:9e:6a:70:f3:37:bf:1e:63:
                    4c:42:98:f8:68:7e:fd:59:50:c7:c1:e3:96:e4:0a:
                    f8:98:ec:dc:ce:0b:37:31:60:2a:d8:6f:42:17:d9:
                    b2:f6:1b:8a:46:f9:17:b9:2f:cf:22:54:5f:f4:ef:
                    ca:0e:98:47:6d:99:b0:ff:bb:bf:fc:c5:ed:a4:a1:
                    7d:96:e6:78:17:b1:cc:f9:f9:9e:6d:a3:e2:2a:96:
                    75:7b:6a:c5:37:8d:24:90:05:e0:72:69:66:52:30:
                    37:e1:75:2f:95:c2:1b:23:4a:dc:ff:11:41:bd:36:
                    c6:9d:ee:9a:46:04:ed:80:92:00:4a:d3:13:73:18:
                    25:8d:65:08:ff:20:e9:ba:aa:56:bf:81:63:8a:84:
                    4d:16:50:32:8b:bc:c5:1e:88:89:3b:b7:d9:bb:e7:
                    66:43:ca:ec:a6:90:a0:e0:c9:5b:71:26:c3:f5:ab:
                    b4:0b:39:dd:a5:87:bf:98:0c:d5:7a:17:10:48:d4:
                    0f:a9:df:8e:e1:cb:23:de:a7:8d:05:bf:14:73:5b:
                    2f:39:c7:de:55:7c:c3:d0:c7:7c:e2:0d:d7:ec:ca:
                    a9:2a:04:79:8c:5c:2c:35:48:5a:59:8c:c7:56:37:
                    eb:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B1:72:C6:0A:54:8F:91:D6:7F:3E:AC:E9:34:30:01:AE:74:03:FE:D9
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/0a3b1138-940e-309d-af59-4ddca880b2fa.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.54.112.30/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         ae:5d:85:47:82:7e:25:a8:db:85:9f:b8:89:0d:60:93:51:c4:
         d9:27:45:6d:f4:43:23:24:0c:46:7c:e8:4f:2b:02:ea:8f:87:
         c7:81:a2:7a:bb:4b:2e:35:bf:ee:48:6a:70:10:9c:61:56:51:
         c0:99:0d:05:02:e3:a9:0a:cb:40:d0:ec:43:03:4d:e0:23:5a:
         c5:fc:89:ac:1e:89:b5:70:e2:b7:46:e6:51:8e:6e:02:1d:68:
         51:27:38:2b:c1:66:23:0f:2f:4b:13:31:a3:9b:4c:10:e4:e1:
         43:ed:14:fb:46:a4:39:50:fe:79:30:41:b9:3c:23:3b:fa:ef:
         2a:f6:47:35:57:16:09:50:dd:9c:01:ba:bd:0e:a9:9b:35:d7:
         7e:87:fb:a3:6e:fb:bd:6a:6d:e2:3b:79:38:08:78:54:2c:19:
         4f:cb:24:ad:d2:e8:92:86:58:84:05:b6:51:32:c2:9b:aa:30:
         b5:84:12:42:c9:81:f2:1f:3c:ae:d4:61:2b:be:17:70:09:17:
         09:e6:26:e7:8e:ed:83:a4:fb:81:a4:fa:cb:7e:e0:67:fe:60:
         0e:e3:74:ac:f9:bd:f2:2b:75:d8:97:9b:f7:39:ad:e4:27:44:
         ed:69:3c:6a:89:e6:8c:eb:e1:5b:f9:31:08:dd:94:94:a7:12:
         91:69:a5:2e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 06:33:08 2026 by rpki-client