Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/0c2bdb55-0846-32ae-9d16-60f9bad26563.roa
File:                     0c2bdb55-0846-32ae-9d16-60f9bad26563.roa (raw, json)
Hash identifier:          3Y20v2IF3nVJd3fnpyC1i2I9YiEQpmRfdurarPQLnmc=
Subject key identifier:   92:3B:5A:2C:34:D3:43:B2:AF:5E:11:3D:95:BC:2B:36:4E:70:F2:32
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584F10378A813E8900B0E6955260
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/0c2bdb55-0846-32ae-9d16-60f9bad26563.roa
Signing time:             Fri 04 Sep 2026 13:00:12 +0000
ROA not before:           Fri 04 Sep 2026 13:00:12 +0000
ROA not after:            Thu 03 Dec 2026 14:00:12 +0000
asID:                     396544
IP address blocks:        192.48.79.30/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 26 Sep 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:10:37:8a:81:3e:89:00:b0:e6:95:52:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Sep  4 13:00:12 2026 GMT
            Not After : Dec  3 14:00:12 2026 GMT
        Subject: CN=57d38222-b730-43bc-82ea-ffeb6dfdcccb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:81:17:28:a0:f1:87:c9:b9:e5:55:d0:d7:9c:cf:
                    e8:07:55:60:89:98:dd:e8:c8:39:33:12:a7:0e:2b:
                    43:bc:2f:6c:ce:a4:cf:8d:e7:e1:9b:0d:70:a0:29:
                    ab:fd:9d:96:8a:0c:2b:b6:5b:99:1e:93:66:38:bb:
                    a2:eb:a4:c8:4f:5a:23:94:2f:bb:0d:00:45:eb:4c:
                    e0:13:16:46:7c:8b:48:a4:58:a9:ce:7d:60:24:0c:
                    c1:b1:ed:62:e8:66:f8:06:31:70:24:02:3f:20:d5:
                    e3:9b:99:4a:41:87:dd:69:d0:d0:bf:54:c6:da:a1:
                    9a:cd:af:9f:96:39:3f:e5:03:66:8e:d1:1d:06:84:
                    2a:ba:e9:57:a1:05:9a:6c:5c:c5:fb:31:75:99:2d:
                    44:76:6c:ce:45:6e:4f:bb:54:d9:1d:f9:7d:bb:3d:
                    24:43:90:97:74:3b:31:ab:f6:e2:e8:d1:ac:3d:da:
                    41:24:d9:07:a7:9d:e5:e5:29:8a:0c:1e:ec:d0:ec:
                    43:3d:70:61:cd:6d:4b:19:15:dd:aa:df:17:1b:4c:
                    63:87:28:ec:cf:5b:5f:bf:4e:61:d1:a9:cd:97:25:
                    e7:cd:f8:9c:c3:3b:cf:c3:7b:da:10:96:0d:48:bf:
                    8a:42:ff:94:ce:ad:ea:f8:d3:fa:26:fd:6c:4f:9e:
                    96:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                92:3B:5A:2C:34:D3:43:B2:AF:5E:11:3D:95:BC:2B:36:4E:70:F2:32
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/0c2bdb55-0846-32ae-9d16-60f9bad26563.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.48.79.30/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         52:6e:4a:41:76:be:13:06:30:87:b5:90:eb:32:2c:d2:ce:8a:
         52:05:c3:92:35:f0:0c:bb:05:8a:1f:c1:37:a0:40:19:4b:44:
         59:3b:11:20:bd:7f:35:d6:37:aa:29:6d:35:6f:50:37:6e:3d:
         ca:38:39:f2:0f:46:b8:91:eb:74:3a:e7:a9:4d:88:86:03:7e:
         87:fe:8d:6c:52:75:d8:80:e7:4e:0b:28:ce:18:11:1d:dd:36:
         5d:1c:86:c1:5b:bd:fe:32:47:5b:4a:a2:3d:2c:db:a1:c7:21:
         e2:0f:dc:e2:67:e7:74:e9:6e:cc:bb:97:79:ec:f8:72:e7:07:
         86:75:99:52:1f:ed:a5:77:e5:c0:fe:34:c6:63:83:74:35:d6:
         ff:1e:40:bb:6d:7b:28:f2:66:d7:83:25:b3:89:2d:89:3d:d2:
         99:e1:43:4e:c5:c3:98:20:53:95:6b:be:7a:ca:b0:b3:b6:24:
         c4:f0:fc:d2:a9:3c:4d:b1:75:44:c7:bc:23:ac:b6:4d:5d:25:
         27:4a:71:70:ab:2f:28:32:50:af:ab:0d:94:77:85:cf:7b:bc:
         69:bc:d9:f9:42:cb:bc:3e:ef:bc:ba:49:ec:2d:f2:3b:66:7b:
         10:df:6d:14:e4:00:f5:b2:25:3a:d8:74:49:ac:2d:45:89:f8:
         cd:0c:0e:20
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 25 15:13:10 2026 by rpki-client