Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/115de1c1-9d48-30d8-b75b-f70e8cd70d93.roa
File:                     115de1c1-9d48-30d8-b75b-f70e8cd70d93.roa (raw, json)
Hash identifier:          aGNb5QJgHGTtZ3MY1OztA+ElDLqZd9vLh9xGff8PSQ4=
Subject key identifier:   30:A7:40:E4:51:07:B9:D2:5A:C7:FA:68:91:EC:24:88:29:7A:4D:10
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584F06727D2D9068461562E21900
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/115de1c1-9d48-30d8-b75b-f70e8cd70d93.roa
Signing time:             Tue 01 Sep 2026 01:00:12 +0000
ROA not before:           Tue 01 Sep 2026 01:00:12 +0000
ROA not after:            Mon 30 Nov 2026 02:00:12 +0000
asID:                     396564
IP address blocks:        192.82.133.30/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 30 Sep 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:06:72:7d:2d:90:68:46:15:62:e2:19:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Sep  1 01:00:12 2026 GMT
            Not After : Nov 30 02:00:12 2026 GMT
        Subject: CN=33dece7e-6de4-449c-8c39-41a10e9bd58c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:1b:6f:43:91:44:22:15:b2:3a:1e:6b:eb:38:
                    d4:84:2d:76:f0:c5:8f:fa:1b:0c:b7:e8:05:9a:af:
                    ce:d5:9c:a1:42:3d:5e:c4:9a:96:8c:ad:89:2c:69:
                    36:41:55:22:14:45:f5:85:bd:77:2b:f5:a3:8d:83:
                    0f:2c:42:a9:93:73:bf:82:b2:4b:b2:30:e6:61:c9:
                    f9:3b:29:a6:a2:f5:6b:c7:25:1d:c4:90:94:f9:66:
                    36:d0:87:64:4f:27:e0:ee:87:f8:ab:56:b9:7d:68:
                    69:a3:00:8d:a3:a0:01:ef:bb:08:ae:0a:f0:93:dc:
                    1f:b0:63:16:f3:01:3b:20:45:b0:dc:d2:4b:b3:17:
                    9b:b9:b4:40:68:d2:ee:32:be:4e:0f:59:68:ed:4a:
                    e0:63:4f:92:75:cb:c6:84:af:6c:dd:d1:b9:a6:34:
                    66:a0:1d:d7:6f:8e:ab:80:8b:74:03:17:37:6a:8e:
                    88:ce:d6:0d:82:cf:13:29:39:26:13:f9:3d:51:17:
                    19:11:55:e6:b3:85:37:0e:5e:81:a9:b0:61:d3:d0:
                    9b:84:18:b2:ee:db:0e:a3:88:8b:3d:af:81:e5:b3:
                    45:bf:93:a2:40:ec:9a:45:e7:ae:5d:fb:1c:a4:79:
                    cb:f1:0d:4b:fe:3d:20:da:a2:b2:64:d0:dc:c0:ba:
                    5c:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                30:A7:40:E4:51:07:B9:D2:5A:C7:FA:68:91:EC:24:88:29:7A:4D:10
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/115de1c1-9d48-30d8-b75b-f70e8cd70d93.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.82.133.30/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         00:01:55:70:6e:a2:cf:77:90:ec:94:e5:d2:67:c2:33:94:f1:
         94:d1:43:a0:ab:2f:b2:24:69:b4:67:b3:52:a1:b1:57:8a:3d:
         e1:94:b9:53:f2:cf:18:61:9c:c3:ab:d0:02:06:1a:15:44:9b:
         f4:37:89:d6:a0:cb:f5:5b:c1:75:fe:a4:76:38:bc:ad:a3:67:
         91:ef:ff:71:24:27:b1:cd:1d:f5:a4:ee:13:f9:cf:fa:d1:1d:
         fd:6c:e9:93:d7:28:f4:6d:47:6e:ea:3d:dc:1e:7f:2a:7c:94:
         52:75:90:98:a5:65:87:60:3a:4d:74:da:7e:cf:31:41:b1:2c:
         1b:90:d1:57:6c:7e:79:c4:de:96:4e:9e:33:da:0e:80:ef:e2:
         b1:9c:40:77:0c:c3:9f:85:15:f6:44:3d:90:5b:4d:d4:3a:ee:
         9a:a0:c9:3d:ea:72:e3:be:7f:61:3d:04:0a:e5:60:82:43:e0:
         ac:13:87:d2:2d:61:08:cf:db:cb:40:ab:1b:a2:af:95:dd:48:
         69:8d:3f:72:7d:c5:d5:0d:a1:4e:1f:70:7f:fe:2b:c5:64:40:
         b0:71:b1:9b:df:cc:df:48:86:77:5f:21:ca:42:d5:0f:88:f7:
         21:11:b3:a4:dc:8a:34:1c:37:90:aa:af:14:61:36:38:09:69:
         29:e1:66:e9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 29 02:37:20 2026 by rpki-client