Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/73a33919-b181-38a9-937a-cb4e434b43d1.roa
File:                     73a33919-b181-38a9-937a-cb4e434b43d1.roa (raw, json)
Hash identifier:          rngsrQY0J5c3G5bbHFPFvv+uZtvlYDeO4PMKdpYU/7U=
Subject key identifier:   2B:99:5A:22:B8:80:4D:BC:0D:41:08:E1:D7:6C:65:63:9B:97:2A:1E
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584F497F532306A4DFC4033BC480
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/73a33919-b181-38a9-937a-cb4e434b43d1.roa
Signing time:             Fri 25 Sep 2026 01:00:12 +0000
ROA not before:           Fri 25 Sep 2026 01:00:12 +0000
ROA not after:            Thu 24 Dec 2026 02:00:12 +0000
asID:                     396563
IP address blocks:        192.68.130.30/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 28 Sep 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:49:7f:53:23:06:a4:df:c4:03:3b:c4:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Sep 25 01:00:12 2026 GMT
            Not After : Dec 24 02:00:12 2026 GMT
        Subject: CN=c8e8bb76-34c5-4b94-89cc-bcf44095ad4a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:e7:61:7e:59:97:79:28:f7:1c:89:a4:d4:d4:
                    9c:fa:22:c3:37:ca:c4:d4:28:c9:f4:87:ff:1d:dd:
                    df:05:c1:03:d6:1c:cc:0d:3b:35:2b:a7:77:35:6a:
                    d1:96:8f:e3:0c:ed:0f:5e:b1:2d:59:19:39:a9:f6:
                    ff:72:16:81:c1:2d:e6:75:81:29:26:ce:07:08:6e:
                    a3:ca:55:e5:da:f8:16:43:66:2e:f7:18:d1:40:75:
                    7d:3d:d1:c6:4f:de:42:76:bf:a3:16:20:3b:f8:8b:
                    c4:cb:2a:af:1b:00:3c:90:cc:b5:ea:7d:42:ba:4d:
                    ac:04:0a:e1:44:8c:a0:5e:c5:2d:ee:d8:f9:90:d6:
                    fb:9f:5b:b8:9d:45:7e:84:be:b2:6b:75:16:de:6b:
                    5d:73:ae:2e:8f:a9:61:02:e9:61:2b:bc:ed:19:23:
                    af:b1:68:97:c2:1f:be:ab:9a:ff:e0:d9:f7:f4:dd:
                    b4:7e:a9:85:06:9e:40:ee:46:c9:bf:a8:14:99:38:
                    ab:71:1a:e2:39:63:3a:0e:89:00:31:f6:40:80:1f:
                    c7:79:4b:db:14:5d:76:d1:35:4a:c4:80:33:39:a8:
                    27:25:7f:ee:fb:19:6b:f6:14:71:a2:c9:18:d1:e8:
                    d1:65:44:d0:d7:73:5e:b1:b0:ec:bf:46:de:71:c1:
                    ce:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2B:99:5A:22:B8:80:4D:BC:0D:41:08:E1:D7:6C:65:63:9B:97:2A:1E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/73a33919-b181-38a9-937a-cb4e434b43d1.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.68.130.30/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0d:b3:e1:e1:50:0f:5b:af:b9:77:11:0a:cf:9f:43:ac:9e:49:
         77:47:44:c6:ab:85:c7:03:4f:75:b3:9b:75:08:c9:26:ed:d2:
         ff:77:b3:f5:a0:3d:83:de:86:cb:da:58:9f:25:4f:54:9c:3f:
         a5:f9:c4:51:12:55:71:8e:77:1d:76:cc:6c:a4:16:9b:33:29:
         ec:d5:d8:fd:97:cc:d5:a3:be:ab:c8:48:1c:eb:f0:f0:da:2b:
         5c:9b:eb:63:55:53:08:22:3a:e4:5e:16:c1:e9:67:4f:08:bd:
         6b:ee:55:f5:77:ee:d4:64:42:af:00:af:b9:ed:f2:c2:94:71:
         2e:eb:c7:9f:0d:4a:b7:ad:c1:04:33:c2:a6:ed:55:a9:23:99:
         aa:fa:e4:66:b8:4a:e6:f5:3b:a7:53:2a:b7:11:6d:db:17:ab:
         08:05:ee:0c:16:60:3c:61:93:c8:87:79:c5:29:d6:8f:57:d2:
         93:44:b0:de:a6:5b:b3:a5:43:89:b0:79:46:66:ee:c5:2b:2d:
         45:d8:0e:8a:65:54:54:82:df:da:a9:06:07:84:51:09:39:e7:
         c6:5e:fd:1c:02:ea:fe:aa:d6:07:2d:99:e0:52:2d:f7:77:3d:
         6e:86:14:b9:c7:69:b0:3f:69:9c:0a:dc:4e:ac:cc:da:ad:50:
         38:a7:de:78
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 26 18:07:55 2026 by rpki-client