Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/0bdf6819-dee8-3433-af38-33c36a6210cb.roa
File:                     0bdf6819-dee8-3433-af38-33c36a6210cb.roa (raw, json)
Hash identifier:          jnvyqDzd/0aBi3pC8kaS9Ufq1IjBpWcA5XBw/YYTANs=
Subject key identifier:   B3:59:6F:83:21:54:C7:3F:2D:B5:03:61:EE:47:18:FE:7A:5C:F2:31
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584F093D17BFEA09BA49388F83A0
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/0bdf6819-dee8-3433-af38-33c36a6210cb.roa
Signing time:             Wed 02 Sep 2026 01:00:12 +0000
ROA not before:           Wed 02 Sep 2026 01:00:12 +0000
ROA not after:            Tue 01 Dec 2026 02:00:12 +0000
asID:                     396586
IP address blocks:        192.42.93.30/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 28 Sep 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:09:3d:17:bf:ea:09:ba:49:38:8f:83:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Sep  2 01:00:12 2026 GMT
            Not After : Dec  1 02:00:12 2026 GMT
        Subject: CN=cc97a0bf-953f-4b63-b7a4-1cc4ff9aff8b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:6f:4e:98:bf:53:d7:2e:a5:63:b8:d0:05:bc:
                    00:6b:d1:68:62:02:03:c2:10:96:b3:42:28:97:63:
                    c4:60:04:9a:a0:89:f9:d3:18:59:8c:6b:6d:cf:06:
                    f5:13:aa:24:38:95:1c:a8:52:b4:e4:61:3e:09:c2:
                    b0:04:e0:c5:84:f1:4b:71:39:54:70:30:a1:54:26:
                    40:61:94:cc:fd:17:34:05:b6:f8:2c:ab:c9:e9:08:
                    1b:44:4d:07:da:58:9a:26:43:5e:26:cf:c7:5a:9b:
                    a3:c0:80:75:79:2d:de:5e:e3:0f:11:0e:37:15:64:
                    07:ed:50:07:1e:38:5f:9a:3f:90:37:fe:27:4c:d2:
                    56:7c:53:93:2f:6f:5a:2f:61:52:85:82:51:e9:8a:
                    bd:df:01:62:b8:85:f1:e1:c5:dc:49:cb:ad:b8:43:
                    6c:0c:de:51:51:f4:d6:52:d7:7c:6d:f7:c3:22:9b:
                    0f:3b:a0:b7:5f:af:a9:e0:26:b4:11:ea:68:f4:f4:
                    06:71:59:d4:a7:69:37:0a:ec:cf:e5:5b:ce:3b:b0:
                    e3:ed:3d:eb:fb:48:2c:4b:d5:3d:e8:9f:a7:da:51:
                    a8:95:b6:a7:c1:5a:7a:91:90:44:38:f2:2a:62:a5:
                    a8:c8:d0:69:c7:07:23:3b:e4:81:2f:16:e6:92:14:
                    7a:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B3:59:6F:83:21:54:C7:3F:2D:B5:03:61:EE:47:18:FE:7A:5C:F2:31
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/0bdf6819-dee8-3433-af38-33c36a6210cb.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.42.93.30/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7c:35:07:dd:8b:a3:d8:80:28:91:5f:2e:d1:e1:41:85:2d:04:
         49:28:8f:02:bd:5f:59:f6:91:5c:55:6e:cd:bf:a1:c4:83:94:
         0d:db:b7:6a:38:3c:65:fc:5d:cb:92:4a:e6:e4:34:3b:d9:12:
         2f:f5:7e:a6:d9:aa:91:e4:99:8b:1e:de:22:e5:de:09:3b:79:
         34:66:5b:42:76:67:cf:d5:55:84:da:dd:52:68:7b:a0:c8:34:
         66:40:08:0e:9f:c5:c0:c5:c0:92:19:f7:d0:ab:b6:64:e0:74:
         2b:c7:93:e9:a0:5a:b9:29:46:a8:15:00:07:a2:e6:81:51:8d:
         85:e4:78:bd:77:8f:3e:1c:19:cc:b0:a5:e6:5b:f3:6f:8c:8e:
         4a:39:89:5a:f2:b6:20:eb:00:74:16:b8:6f:a8:f0:46:36:ce:
         60:87:7f:92:3d:8c:45:f1:4d:97:0f:44:e5:72:f9:f3:24:4a:
         e3:20:5d:b1:ba:21:2f:23:4b:8e:05:9e:99:30:89:e3:1f:84:
         94:44:4f:f1:bc:c6:ae:f4:83:35:b1:0c:95:db:b3:ca:a2:bc:
         ff:4a:ce:84:74:de:5d:e2:6d:ef:a4:64:33:f1:ca:df:e8:ba:
         6d:bc:39:12:3b:95:ce:d7:25:38:ce:fc:16:6e:89:5c:6f:44:
         f9:79:ff:dd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 26 03:47:03 2026 by rpki-client