Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/1351b62e-365b-34e1-bb2f-70ecb5a5d829.roa
File:                     1351b62e-365b-34e1-bb2f-70ecb5a5d829.roa (raw, json)
Hash identifier:          RGQyVCDtM9IXQ0ASGh3ecU9Zl7R81XnHks7N9931J4E=
Subject key identifier:   D7:13:FE:25:97:34:67:96:05:C3:8F:44:55:FC:38:56:74:83:00:94
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584F1732421B5C1CA34F8841D940
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/1351b62e-365b-34e1-bb2f-70ecb5a5d829.roa
Signing time:             Mon 07 Sep 2026 01:00:11 +0000
ROA not before:           Mon 07 Sep 2026 01:00:11 +0000
ROA not after:            Sun 06 Dec 2026 02:00:11 +0000
asID:                     397194
IP address blocks:        192.52.178.30/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 28 Sep 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:17:32:42:1b:5c:1c:a3:4f:88:41:d9:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Sep  7 01:00:11 2026 GMT
            Not After : Dec  6 02:00:11 2026 GMT
        Subject: CN=5f7fb8db-bfe8-4a04-8593-3c1ab369ce04
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:02:2f:1a:92:4e:c1:ff:48:91:35:0a:f9:ad:
                    94:b2:ac:d7:b2:f1:31:bb:05:c1:48:5d:4f:34:b4:
                    1e:0c:c7:36:c6:73:07:de:91:3d:67:ec:6c:df:de:
                    41:1e:3b:ce:38:2f:d3:15:65:f6:40:8a:08:65:c5:
                    78:d1:93:27:8a:9e:eb:c5:4c:03:40:0f:72:47:1a:
                    52:f1:59:da:84:dc:0a:15:3a:95:a6:d7:5c:98:90:
                    99:4f:d3:2d:91:7a:bc:c7:45:5f:68:0a:b9:00:70:
                    14:c7:b8:38:59:ce:17:41:99:cb:75:4f:45:08:92:
                    f0:17:f0:8b:eb:9e:8e:78:eb:93:8b:98:c0:f1:3d:
                    c3:47:80:fe:7a:16:68:01:46:ff:61:6e:1c:59:80:
                    1d:5f:fb:0b:5a:39:cd:a6:39:25:35:e7:ae:66:38:
                    71:0e:9b:60:b4:ce:87:cd:1c:8f:6d:a9:a7:ca:9f:
                    8e:ac:0d:0d:c0:7d:da:c2:d5:ab:3e:6f:8e:fc:c7:
                    a7:2c:ea:ca:d5:12:ba:73:e5:47:5c:42:af:32:b5:
                    7f:2b:60:72:99:83:23:7a:ee:d8:91:b4:66:ac:32:
                    09:b2:88:cc:df:5d:c1:38:44:de:be:7d:1c:5a:ba:
                    28:b8:3c:bf:e3:12:1f:3c:ab:2c:98:96:70:68:01:
                    a5:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D7:13:FE:25:97:34:67:96:05:C3:8F:44:55:FC:38:56:74:83:00:94
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/1351b62e-365b-34e1-bb2f-70ecb5a5d829.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.52.178.30/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         31:53:61:6b:55:a4:21:11:33:1d:1a:84:5c:99:82:cc:dd:e3:
         15:a1:1b:bb:6f:39:f0:fb:8d:76:63:97:01:67:5e:1b:ce:3c:
         20:fc:be:47:42:9c:75:f1:8a:05:ca:91:7a:fc:03:69:7f:d2:
         a3:bd:bd:7f:07:86:92:05:b8:f1:5f:f8:63:cf:a6:a0:ab:6a:
         37:c3:4d:95:b1:a5:a1:70:4e:b5:3e:47:14:bd:89:cc:db:99:
         f5:05:46:2e:72:b9:2a:12:4f:5d:03:3f:80:8c:6e:9a:d3:f3:
         87:8d:1f:7d:e9:e3:c9:a4:8d:30:d1:06:ea:d9:ae:0b:a7:e1:
         0e:ad:26:8a:db:01:4d:67:a8:d8:c8:7b:01:3f:a1:85:79:46:
         e3:68:8a:e5:81:71:26:54:49:d5:60:66:01:97:a1:5c:15:b9:
         0e:bf:b5:d8:a7:6f:70:a7:85:b1:60:32:7d:a7:12:9a:d3:cc:
         46:ef:46:9f:32:2a:b5:4f:a1:6c:a8:d9:4b:96:4c:e1:16:8d:
         fd:ca:56:d5:55:0f:bc:67:6d:8c:12:6e:4a:2d:da:13:b8:82:
         f4:ae:55:51:88:63:90:42:de:41:40:b0:3c:89:56:b0:70:2b:
         97:6e:80:e9:9b:d2:ff:e9:22:ff:ed:c0:38:c9:ef:56:01:58:
         54:a2:37:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 25 17:14:09 2026 by rpki-client