Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/5498cfb3-a6fc-3345-ac07-96662948a28c.roa
File:                     5498cfb3-a6fc-3345-ac07-96662948a28c.roa (raw, json)
Hash identifier:          pG0bfnoXd3QEo2gU5/IOhG/RWoHArYNmhmxBMA9YoIU=
Subject key identifier:   BB:A3:B7:F7:A4:9C:3A:FD:19:ED:FB:E6:7A:5A:74:CB:17:DD:7A:44
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584F06729032204983BF076CE710
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/5498cfb3-a6fc-3345-ac07-96662948a28c.roa
Signing time:             Tue 01 Sep 2026 01:00:12 +0000
ROA not before:           Tue 01 Sep 2026 01:00:12 +0000
ROA not after:            Mon 30 Nov 2026 02:00:12 +0000
asID:                     396597
IP address blocks:        192.82.133.30/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 28 Sep 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:06:72:90:32:20:49:83:bf:07:6c:e7:10
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Sep  1 01:00:12 2026 GMT
            Not After : Nov 30 02:00:12 2026 GMT
        Subject: CN=0f7e8298-e44b-4a98-89eb-da46122245a9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:55:98:00:44:af:d6:c5:d7:d2:af:42:9f:0e:
                    4e:de:86:bd:9e:29:32:08:00:f2:2c:e4:de:3d:50:
                    7e:46:0d:5a:f5:11:32:1b:d6:54:97:59:fc:26:09:
                    6a:fd:3c:2a:3c:30:63:d3:5d:4a:d9:ba:9b:71:43:
                    57:8a:05:08:45:67:50:96:e2:0d:c8:f9:d6:21:53:
                    07:b2:83:ea:25:e3:12:89:17:19:a0:37:6d:07:7d:
                    ab:88:a3:a2:65:15:ee:c4:47:e2:bb:3e:2c:74:6c:
                    47:33:f6:42:52:7a:02:49:a5:71:9a:a8:09:e6:ee:
                    b4:0a:46:85:c9:cd:1e:0c:0d:00:d9:e8:60:a2:d5:
                    1a:d3:0a:9d:0b:f7:dc:9a:4e:0f:c4:c9:de:a3:db:
                    cf:5e:c3:ee:9a:88:42:19:1b:76:4e:d6:cb:ba:17:
                    84:a1:1d:55:03:87:87:73:71:6b:93:d1:3d:f2:86:
                    17:e0:b6:48:cf:ec:7b:5b:f9:9f:fb:f1:94:48:a2:
                    43:df:9b:f4:89:84:0b:a6:9f:25:4f:5a:ac:b1:dc:
                    da:76:6f:d3:8e:b7:1b:75:a1:d8:cf:b3:da:54:6d:
                    b7:f8:d5:96:b8:5b:d4:e0:9f:1c:33:6f:67:2c:f4:
                    d8:0c:9e:77:05:67:6e:3d:41:29:a4:af:16:5c:26:
                    63:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BB:A3:B7:F7:A4:9C:3A:FD:19:ED:FB:E6:7A:5A:74:CB:17:DD:7A:44
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/5498cfb3-a6fc-3345-ac07-96662948a28c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.82.133.30/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         12:90:f9:22:c3:d1:2b:59:aa:eb:e1:f5:8d:63:72:5e:0b:28:
         6e:77:7c:05:32:ef:f6:6b:6e:5e:80:38:9c:40:ef:6f:e1:5b:
         7d:85:89:3f:22:58:d9:98:2d:de:f8:51:7a:9a:be:eb:84:c7:
         c0:75:50:ca:c8:7a:e7:95:f2:f5:ae:98:91:33:34:ea:99:dc:
         69:50:66:e7:92:43:66:59:7a:0d:bd:57:07:da:27:43:04:75:
         87:dd:56:29:0e:19:0c:30:36:d7:df:86:79:f0:3c:0c:59:3a:
         fb:2e:2b:29:5c:0f:05:0c:f1:cd:27:01:44:14:d3:91:96:93:
         75:f8:35:f1:a6:e8:98:9b:66:74:d0:a2:71:04:11:17:bb:cd:
         9f:b2:7b:8a:54:49:0c:47:98:a0:cc:54:90:7c:b5:0d:e3:eb:
         c7:a4:ec:d3:ec:0b:5b:5f:49:4d:ab:3f:a7:99:4c:f5:82:5a:
         50:f4:43:68:27:ac:32:ba:8a:68:21:0a:17:5b:de:ed:8c:46:
         7f:ca:b5:b6:0e:ea:22:26:ec:89:1e:83:cb:ea:f3:53:e2:79:
         55:50:7a:51:6d:5c:3a:d1:25:ac:91:45:c7:bd:e5:ee:f3:af:
         49:f3:ec:9f:a9:a5:10:95:a4:cd:0e:09:93:30:05:dd:cb:bd:
         ee:1d:dc:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 26 13:01:31 2026 by rpki-client