Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/4efdea65-6ddc-3273-ab90-c61014e01c85.roa
File:                     4efdea65-6ddc-3273-ab90-c61014e01c85.roa (raw, json)
Hash identifier:          BY2Khn8K5eo4jLfmy8nnIbfZZLCa0bEy1ytlQ9FzOSU=
Subject key identifier:   1D:80:9E:C5:8A:61:FF:7B:20:CF:69:AE:D3:9C:8B:15:56:01:D9:29
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584F10379CDBA51C02A39DB0BD00
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/4efdea65-6ddc-3273-ab90-c61014e01c85.roa
Signing time:             Fri 04 Sep 2026 13:00:12 +0000
ROA not before:           Fri 04 Sep 2026 13:00:12 +0000
ROA not after:            Thu 03 Dec 2026 14:00:12 +0000
asID:                     396616
IP address blocks:        192.48.79.30/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 28 Sep 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:10:37:9c:db:a5:1c:02:a3:9d:b0:bd:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Sep  4 13:00:12 2026 GMT
            Not After : Dec  3 14:00:12 2026 GMT
        Subject: CN=667cf0c2-43bb-4ae4-b32d-1d10df31ea76
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:92:73:86:92:88:8c:a6:a9:0c:c3:a2:af:17:1a:
                    7b:d1:8c:20:c6:fd:df:c5:13:19:2f:19:8d:65:46:
                    36:3b:d9:41:15:c3:02:9f:1d:95:cc:99:dc:f2:24:
                    6d:76:d7:a6:5b:aa:35:d1:e1:be:0d:6c:a6:cf:fb:
                    75:49:22:ed:49:bd:33:95:af:fd:56:7c:e4:de:36:
                    15:7b:72:ea:d8:c9:c5:31:6a:f1:e8:40:76:82:37:
                    67:85:2a:73:bb:88:20:73:b7:45:85:41:d6:2d:91:
                    bb:7b:cc:96:83:42:2e:0b:4a:ac:d7:31:e8:d7:3c:
                    f0:26:e3:a0:71:32:1c:62:73:c1:f7:fe:ca:e4:05:
                    ef:bb:70:cf:dd:42:e9:6d:5e:1c:d6:c9:79:83:cd:
                    de:1b:78:0f:85:b0:b0:ff:16:68:c3:b5:7b:23:86:
                    94:b6:53:b5:05:7a:c6:14:a5:ae:b0:75:c3:c5:8d:
                    71:81:57:c1:c5:63:89:3f:f4:99:bc:60:91:d3:3e:
                    c4:e2:0b:4b:ea:ed:b4:c0:fa:64:2d:ef:1e:23:48:
                    90:0e:9d:b6:69:9d:38:38:75:2c:b7:ee:68:0f:e9:
                    f1:b3:a6:0f:83:3e:cd:95:dc:56:07:53:7a:1c:bb:
                    41:26:06:3d:29:54:06:51:68:25:ea:5b:bc:0a:b4:
                    4e:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1D:80:9E:C5:8A:61:FF:7B:20:CF:69:AE:D3:9C:8B:15:56:01:D9:29
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/4efdea65-6ddc-3273-ab90-c61014e01c85.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.48.79.30/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5e:41:26:28:97:c1:88:bb:0c:9e:9e:fa:d1:d9:ef:76:ca:35:
         9d:50:f4:8f:85:60:2f:4e:8d:fc:83:1c:81:10:fb:d9:76:08:
         d6:c4:6a:5e:44:8a:e3:a1:83:67:a2:ad:f8:8a:85:38:79:a2:
         61:56:68:b2:ab:89:e2:a1:62:c5:c9:9a:18:2f:fa:8b:7c:c2:
         d4:31:8a:9e:c5:0b:12:a5:1b:56:17:4a:6b:7b:72:50:38:95:
         2d:c8:18:c1:f0:77:1a:02:d6:97:74:ec:82:dd:7b:e8:c5:df:
         4d:ae:c0:bf:11:c1:6c:71:1d:71:0f:75:63:38:29:4c:ff:00:
         48:69:2e:40:4d:90:f0:81:12:2e:80:ff:d7:ad:2a:27:1c:bf:
         6e:b2:10:05:2f:7b:44:6c:e7:3d:79:6d:29:6c:13:8d:b7:84:
         58:6c:cb:cf:33:2b:c8:02:c2:e8:76:06:be:c8:ab:af:b8:4b:
         ac:2a:d2:a2:60:1c:c3:6b:f6:38:9b:28:db:8e:85:b7:e3:3e:
         d7:b6:58:7a:00:95:50:d1:6d:b1:c3:25:86:34:82:f9:51:a3:
         de:0d:55:5c:99:d9:24:09:b5:8b:d1:8a:1d:3e:7e:12:8d:44:
         86:7a:6f:65:3c:8b:d5:6c:30:8e:69:48:3e:98:00:c0:76:50:
         a0:30:df:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 27 01:05:19 2026 by rpki-client