Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/2b273f97-3454-35ab-90a7-8dfefb5cec0c.roa
File:                     2b273f97-3454-35ab-90a7-8dfefb5cec0c.roa (raw, json)
Hash identifier:          rWoveBSUv9zGVbZ8RkMoTbtEK1Ziw6x0GjDZh0+2YLM=
Subject key identifier:   7E:48:B4:A8:3C:77:81:27:05:40:F6:D7:AC:07:82:A9:FE:5A:C3:8D
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584F49869389DEF371D71E245B20
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/2b273f97-3454-35ab-90a7-8dfefb5cec0c.roa
Signing time:             Fri 25 Sep 2026 01:00:12 +0000
ROA not before:           Fri 25 Sep 2026 01:00:12 +0000
ROA not after:            Thu 24 Dec 2026 02:00:12 +0000
asID:                     396597
IP address blocks:        192.42.173.30/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 26 Sep 2026 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:49:86:93:89:de:f3:71:d7:1e:24:5b:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Sep 25 01:00:12 2026 GMT
            Not After : Dec 24 02:00:12 2026 GMT
        Subject: CN=98a77073-a5ad-44e1-bba6-3424b7bd33ed
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:45:4d:47:a3:db:47:5b:54:6a:ed:4c:b5:8d:
                    c6:11:68:42:63:83:b4:ec:7b:59:41:46:2a:eb:96:
                    48:89:87:d7:6b:1a:6f:ba:1c:f5:72:b4:bf:a1:e9:
                    51:ae:fa:2a:1b:c0:51:18:c5:cc:1a:c8:59:1e:87:
                    bf:e4:63:0e:6f:5c:8b:c2:ad:96:8f:50:18:f4:9d:
                    8d:bd:8f:f2:94:d0:cb:c1:74:13:97:3e:fa:0d:8d:
                    66:24:34:7d:4e:41:b9:cb:a5:71:44:59:90:93:a0:
                    45:a3:76:13:fd:53:9a:a0:5a:92:e3:7d:0d:76:25:
                    f0:c8:24:fa:73:29:38:b3:a8:78:1c:22:ce:3b:64:
                    60:ee:cd:49:6c:01:a2:96:1f:9d:06:25:86:dd:57:
                    1d:09:9d:12:a6:5f:ac:cf:fd:b8:b1:e3:e3:bc:0c:
                    1e:90:bc:9c:ed:b9:fc:df:d9:3a:92:49:11:64:ed:
                    8e:2d:92:40:d6:11:96:b8:8c:3a:21:de:50:dc:83:
                    db:25:c8:12:4c:b1:1c:cd:5e:41:c4:3a:40:87:62:
                    3a:2f:30:7e:21:69:da:f5:3d:32:39:f4:d6:f4:8b:
                    66:1b:64:b0:21:a5:f4:5e:79:32:c0:85:ed:e9:84:
                    82:09:08:ea:58:09:f6:41:44:b1:05:2f:f4:db:71:
                    d9:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7E:48:B4:A8:3C:77:81:27:05:40:F6:D7:AC:07:82:A9:FE:5A:C3:8D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/2b273f97-3454-35ab-90a7-8dfefb5cec0c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.42.173.30/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         45:51:38:d2:c8:cc:38:8c:62:59:47:80:c4:f0:1c:ff:00:ed:
         29:ae:47:7e:f3:3f:c7:e3:08:60:34:b2:28:3a:85:4c:12:ef:
         06:18:fd:44:20:38:66:dc:23:fb:e1:88:01:b5:f5:22:e5:d2:
         47:e1:f7:b4:a0:34:f6:1f:08:a9:d9:e5:1b:86:68:53:0d:1a:
         39:b4:7c:8c:88:23:00:7c:62:d9:c0:b6:af:56:a8:52:d7:19:
         37:be:dc:81:14:52:eb:2a:5f:27:a1:2f:95:67:c7:0f:fc:33:
         77:cb:a1:09:15:af:45:9a:c2:68:34:c8:fe:a3:89:a4:6f:0b:
         e6:b2:a7:ef:29:3d:f5:91:27:3d:6d:3d:91:6c:3a:31:d3:14:
         ee:9c:6a:4c:99:b9:34:46:9c:a9:f8:e9:67:29:d1:6d:b3:3a:
         1f:bc:b5:25:14:d0:61:8e:06:79:3f:38:99:59:33:b6:35:67:
         af:19:29:c2:06:1e:95:cf:1d:44:04:ae:c7:cd:70:53:b4:5c:
         d0:c6:cb:b7:ae:0b:dd:88:80:b4:7d:a8:aa:6a:76:28:60:06:
         c8:4c:cf:d0:52:4f:79:5b:f6:a0:76:ac:a1:65:0f:e9:9a:49:
         10:ed:9c:d2:b9:f4:a2:27:7e:dd:c7:bd:a9:c2:51:52:69:c2:
         0a:71:03:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 25 07:10:36 2026 by rpki-client