Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/116e970d-d031-3e7c-a89d-f3c2c7e93952.roa
File:                     116e970d-d031-3e7c-a89d-f3c2c7e93952.roa (raw, json)
Hash identifier:          kdmW3vvf5d7KfCbDLKdCutccSzAxg8/36S/Bg4kG2/8=
Subject key identifier:   ED:D9:A4:CD:0F:C5:99:CB:DA:02:F6:3A:21:F6:9A:92:D8:82:8D:05
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584F10378DFBF33862680B6E7600
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/116e970d-d031-3e7c-a89d-f3c2c7e93952.roa
Signing time:             Fri 04 Sep 2026 13:00:12 +0000
ROA not before:           Fri 04 Sep 2026 13:00:12 +0000
ROA not after:            Thu 03 Dec 2026 14:00:12 +0000
asID:                     396612
IP address blocks:        192.48.79.30/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 26 Sep 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:10:37:8d:fb:f3:38:62:68:0b:6e:76:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Sep  4 13:00:12 2026 GMT
            Not After : Dec  3 14:00:12 2026 GMT
        Subject: CN=5e82f1a4-d8a8-4295-87ab-19a892fe630a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:27:31:d5:6a:06:3e:bf:5e:e6:08:73:ea:a2:
                    a0:44:c2:de:25:44:8d:aa:3c:ff:07:4c:7f:af:90:
                    19:9d:41:e4:73:33:32:66:f5:41:ec:6f:6c:1d:4a:
                    f9:b8:94:9c:98:a6:bf:50:aa:37:fc:43:c3:f9:bf:
                    70:62:fc:0e:da:71:b4:c8:cc:b0:91:b9:dd:1b:65:
                    9b:0e:7f:b6:fc:46:73:6a:6c:22:c2:a3:ea:b7:06:
                    25:cc:53:e7:a3:c5:3a:8c:45:3f:6a:86:4b:2b:35:
                    6f:2e:69:b3:4f:6f:27:b8:3f:fd:f3:61:96:aa:cd:
                    f5:25:ee:ce:80:53:0b:7e:e5:fb:94:96:80:4f:8a:
                    af:4a:07:f4:84:07:e2:e0:76:d1:82:e7:26:c1:75:
                    9b:75:a0:55:39:60:1a:4c:48:19:25:28:eb:f8:1d:
                    60:1e:27:1a:dc:cf:d4:ac:9d:d0:16:87:12:c1:77:
                    2e:2b:ce:e9:7d:66:32:e5:40:c5:95:d5:11:9a:7c:
                    bd:70:4e:cd:f6:a9:c5:f9:98:88:17:bd:84:38:3b:
                    c6:2a:c0:11:59:07:73:a8:c4:7b:35:db:98:b8:29:
                    80:f9:93:17:f7:8c:74:e0:44:84:8d:f8:7a:6d:b2:
                    b1:02:4c:34:b4:5c:f3:29:e2:f2:0a:43:3e:fd:e5:
                    6a:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                ED:D9:A4:CD:0F:C5:99:CB:DA:02:F6:3A:21:F6:9A:92:D8:82:8D:05
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/116e970d-d031-3e7c-a89d-f3c2c7e93952.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.48.79.30/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3b:0e:67:65:29:ca:a1:a2:50:03:8b:d3:96:c4:54:0e:8c:b8:
         f4:85:bb:c9:77:07:44:2a:56:16:e1:17:2c:a2:76:fe:41:da:
         2b:86:8b:31:f5:04:78:75:bf:83:21:46:dd:6f:7d:72:71:eb:
         81:09:7b:eb:91:89:0b:d5:53:2b:83:a5:fa:e2:32:ee:19:48:
         04:01:48:2f:0f:c3:0c:c1:3f:da:15:95:cb:2e:c1:3b:71:c0:
         d3:c9:a7:79:4d:5b:b1:ec:67:f7:9e:56:0a:03:9f:fd:27:63:
         6d:e8:72:65:b4:6d:60:ba:d8:d3:19:52:25:f5:4a:77:b6:2a:
         05:0b:8b:aa:50:da:4e:a6:52:30:b1:74:5f:3d:42:15:0f:b1:
         06:84:1c:ad:54:93:fd:ba:fa:f2:fd:4a:f1:eb:b0:64:31:d3:
         34:4e:27:4d:f8:99:6b:da:64:56:65:b8:e4:3f:0f:36:4a:0a:
         6c:7d:ec:7e:c1:2f:d4:f1:91:83:a3:f2:e2:7b:37:a7:61:ed:
         21:c7:f5:e9:95:6a:94:0d:c5:86:2b:ed:2b:6e:9c:69:70:84:
         13:0d:3d:1c:b0:97:31:08:22:38:6d:90:fd:07:c1:7f:4a:ec:
         f5:40:0f:27:07:23:5a:33:24:2d:c4:94:52:18:26:47:cc:d2:
         7b:aa:e6:42
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 23:14:17 2026 by rpki-client