Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/16ce9a4c-26a7-3849-bc5b-0dc72295b9d1.roa
File:                     16ce9a4c-26a7-3849-bc5b-0dc72295b9d1.roa (raw, json)
Hash identifier:          ywgtGQByTYkSeqvyqZKM1GzA4e9NXNM6nYrn+b4melU=
Subject key identifier:   7D:AC:24:82:83:26:7D:28:0B:64:AE:D0:BA:10:17:35:52:25:5C:82
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584F498B49C4C0D6E58C055EFE00
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/16ce9a4c-26a7-3849-bc5b-0dc72295b9d1.roa
Signing time:             Fri 25 Sep 2026 01:00:12 +0000
ROA not before:           Fri 25 Sep 2026 01:00:12 +0000
ROA not after:            Thu 24 Dec 2026 02:00:12 +0000
asID:                     396553
IP address blocks:        192.5.6.30/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 28 Sep 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:49:8b:49:c4:c0:d6:e5:8c:05:5e:fe:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Sep 25 01:00:12 2026 GMT
            Not After : Dec 24 02:00:12 2026 GMT
        Subject: CN=adffe1fe-4356-498a-9772-ad5fe8d3c215
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:82:ac:32:f1:4d:ac:7e:41:94:eb:84:1b:d3:
                    ff:64:3e:87:72:10:d0:cf:56:98:76:4f:bb:46:1a:
                    12:6a:84:ac:e5:b2:82:91:9d:0b:21:23:e3:54:1c:
                    41:fe:04:9f:b8:b7:38:4e:79:e0:c5:83:5d:46:34:
                    0a:72:97:0e:6d:95:da:a5:86:01:69:14:1e:69:7d:
                    45:0b:73:c3:21:16:77:bf:9e:67:6f:67:5b:22:a9:
                    bc:d0:b7:41:14:e8:5a:24:f9:3a:9a:d4:d0:21:82:
                    36:7e:28:e7:e8:2c:6c:7c:71:7e:3b:d7:34:7d:00:
                    e5:b0:5c:d8:19:4c:7e:2c:d9:91:c7:68:fd:3e:47:
                    9e:be:5c:0e:d3:12:9c:c5:98:09:2b:2d:ed:f8:29:
                    a1:24:34:9d:a0:78:42:34:2a:cf:23:fd:8e:67:8c:
                    a1:ec:06:62:f1:9c:f7:68:dd:6d:58:8f:89:ee:0e:
                    d2:05:54:0b:df:72:1f:ba:27:2d:6f:7c:5d:b4:5a:
                    da:a0:9c:6c:ff:0e:a9:e5:18:0e:0b:a6:e7:8b:8a:
                    a5:df:7a:44:0f:7a:4a:0f:fa:90:5f:86:7d:a5:77:
                    c9:c4:00:d9:97:f2:a1:23:a4:8b:11:13:1d:11:5a:
                    e8:cc:7b:0a:4a:b9:fd:28:3c:74:8c:b0:cb:68:4e:
                    84:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7D:AC:24:82:83:26:7D:28:0B:64:AE:D0:BA:10:17:35:52:25:5C:82
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/16ce9a4c-26a7-3849-bc5b-0dc72295b9d1.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.5.6.30/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         81:c0:aa:29:ed:5f:b1:d5:72:4e:73:99:d8:36:8d:82:b0:0a:
         05:58:eb:bc:45:08:57:70:31:09:78:36:46:19:61:12:f3:3e:
         fa:51:5f:6a:f6:dd:6a:a0:f1:3a:ca:70:ef:26:48:54:3d:99:
         0a:ca:3b:9a:c4:d2:54:f5:47:08:93:86:69:ad:14:f5:01:a7:
         82:f3:ea:aa:40:1a:3d:13:8c:dd:74:fc:b8:31:01:b2:8f:fc:
         93:f8:9f:b9:70:76:d3:1d:55:54:d7:bb:51:f3:0d:f4:43:0c:
         9c:4f:6b:cd:1b:dc:ca:ec:19:a5:0e:aa:f6:6f:31:2d:94:f2:
         36:88:6a:2d:f6:fb:22:d2:06:97:e6:d1:e2:a3:bf:4b:ce:9b:
         4d:b7:4e:8a:75:db:e7:1a:5c:f5:b2:71:ed:7c:87:c9:93:ab:
         ee:30:80:1e:9b:44:2f:f3:19:a1:2d:a8:fa:97:28:6c:58:ee:
         33:75:50:10:31:41:72:23:49:99:88:b3:f4:c6:07:3c:80:e3:
         2d:a4:0c:94:08:60:c1:28:df:99:4c:26:52:6e:07:9f:57:e1:
         9e:22:f1:5d:37:54:0e:8e:c6:ce:d6:80:8a:e0:3e:4c:ef:33:
         28:fc:13:15:47:d0:ea:7e:ff:08:75:34:25:ce:47:d7:c5:b7:
         2c:e8:67:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 27 14:57:25 2026 by rpki-client