Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/180a0efb-51fa-3e08-adc4-004952dc3650.roa
File:                     180a0efb-51fa-3e08-adc4-004952dc3650.roa (raw, json)
Hash identifier:          1JGdbGUmXkZ7n7cxBsBBGUGTAhlDja06C9EveFO0QRE=
Subject key identifier:   C9:29:AA:16:8B:2F:3D:7A:92:10:57:17:0A:B0:17:41:98:47:45:88
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584F103790CE091ADF6D543C8E80
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/180a0efb-51fa-3e08-adc4-004952dc3650.roa
Signing time:             Fri 04 Sep 2026 13:00:12 +0000
ROA not before:           Fri 04 Sep 2026 13:00:12 +0000
ROA not after:            Thu 03 Dec 2026 14:00:12 +0000
asID:                     211369
IP address blocks:        192.48.79.30/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 28 Sep 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:10:37:90:ce:09:1a:df:6d:54:3c:8e:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Sep  4 13:00:12 2026 GMT
            Not After : Dec  3 14:00:12 2026 GMT
        Subject: CN=088c2b63-15ff-4b27-a0b3-e07749dfc922
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:92:f5:ef:97:08:15:97:a3:36:9f:de:ca:c5:40:
                    d8:8f:52:a1:26:92:18:6b:15:50:0e:4f:ac:e5:63:
                    7a:c8:76:80:b9:aa:a2:57:17:81:df:1a:32:32:a5:
                    f8:48:28:6c:9b:fd:96:09:57:5a:85:c7:6d:4b:91:
                    24:73:55:4a:29:95:75:7d:f9:88:d2:db:95:23:ba:
                    08:33:98:99:7a:41:d5:c7:ec:72:eb:e7:dd:41:69:
                    0f:79:5e:5e:80:b0:c6:af:d7:ae:c5:fc:ab:ad:57:
                    2c:0e:71:1d:7d:73:4a:66:83:bc:a6:a9:33:e5:68:
                    89:8d:b0:77:dd:d9:88:00:c3:83:20:06:0f:ed:3e:
                    f6:fe:69:01:e5:7f:c5:00:b8:28:8e:36:cb:3b:67:
                    54:c3:6a:cc:71:24:e6:6c:11:3f:ce:99:d4:4f:44:
                    a4:1f:34:84:99:15:f6:17:e7:55:39:2f:88:4d:a7:
                    dd:ce:f6:d0:32:32:69:c2:0e:fd:3a:73:6e:fe:49:
                    24:b0:c9:93:15:46:37:6a:e2:d4:eb:0a:ea:4f:5b:
                    81:60:2f:6b:56:6b:76:b5:a6:02:8d:36:f6:f7:95:
                    f3:21:a7:b2:ca:b2:ae:70:89:69:09:2f:1c:0d:ae:
                    e0:af:71:37:97:97:ea:29:ab:2e:51:cc:bd:88:bb:
                    e9:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C9:29:AA:16:8B:2F:3D:7A:92:10:57:17:0A:B0:17:41:98:47:45:88
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/180a0efb-51fa-3e08-adc4-004952dc3650.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.48.79.30/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         44:db:ac:39:87:04:a8:0d:0d:a6:4b:65:0e:41:31:c7:27:6f:
         7d:7a:3e:29:6c:5e:e7:d6:67:e6:fa:dd:49:11:1c:a8:04:43:
         34:c1:c2:b6:25:e8:bd:0c:1e:83:4f:78:bf:02:59:10:af:21:
         b8:44:c6:4d:d4:54:a3:91:10:0a:cb:07:a2:1c:d0:a4:10:03:
         73:37:20:e9:fa:ad:09:ec:f4:7d:45:62:13:f8:a9:83:20:c6:
         42:27:0d:70:dd:cf:d6:5b:9a:a4:ed:dc:10:d8:93:3b:1a:2a:
         f3:56:14:c6:2f:fa:98:c4:eb:70:ff:61:a2:db:b7:9a:20:69:
         05:01:bb:df:65:e3:51:04:a2:b8:04:ae:9b:ec:da:e6:15:bb:
         6d:c4:89:22:97:f4:df:fb:f5:e9:f8:08:63:93:25:de:65:83:
         04:b0:01:ab:02:e8:12:bf:ec:e6:ea:aa:f9:89:21:ee:0a:fa:
         43:77:fd:00:29:96:30:e4:a2:f8:54:01:ba:f4:04:ae:41:4d:
         5c:a9:4e:85:a9:31:ef:eb:4b:7f:99:da:d4:33:0e:f3:b6:c7:
         ad:72:67:8a:1b:9d:e8:f5:c5:2a:2c:51:4d:64:87:29:6d:f0:
         70:a4:03:e1:fb:fa:bf:65:8f:ba:ef:00:9e:be:58:3f:43:16:
         21:57:82:2d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 25 20:01:16 2026 by rpki-client