Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/787b9e41-419e-36c0-bc51-a5b982496b3e.roa
File:                     787b9e41-419e-36c0-bc51-a5b982496b3e.roa (raw, json)
Hash identifier:          IYCU3b1fm0MFO2ujzWLhfMu136S49GG+QvQ0ZvjLTbA=
Subject key identifier:   74:A6:F8:73:18:C1:FA:DE:E6:F2:18:E4:E4:C6:8D:A2:49:04:FE:58
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584F06728BDB5CA0F6E8D466EA30
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/787b9e41-419e-36c0-bc51-a5b982496b3e.roa
Signing time:             Tue 01 Sep 2026 01:00:12 +0000
ROA not before:           Tue 01 Sep 2026 01:00:12 +0000
ROA not after:            Mon 30 Nov 2026 02:00:12 +0000
asID:                     36627
IP address blocks:        192.82.134.30/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 28 Sep 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:06:72:8b:db:5c:a0:f6:e8:d4:66:ea:30
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Sep  1 01:00:12 2026 GMT
            Not After : Nov 30 02:00:12 2026 GMT
        Subject: CN=09b44111-cd79-4a9b-9e31-d37174c54fe0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:82:8d:6d:20:96:66:c3:c5:5e:c2:ca:87:99:19:
                    60:96:38:3c:45:d2:7a:bb:20:45:3e:3a:95:5e:e5:
                    e9:8f:62:c0:23:8c:3b:cf:70:a3:64:54:b0:75:f3:
                    94:29:dc:63:5b:7e:25:c3:c7:8d:20:0a:11:0c:80:
                    65:9e:75:4d:49:ed:e4:81:ca:cd:9f:63:3e:2b:fc:
                    98:5a:1d:88:b3:fa:2c:6a:e7:d7:b1:05:27:c2:b9:
                    68:59:de:01:b0:e0:30:72:9e:7e:76:32:d6:91:12:
                    f1:03:46:0e:80:39:31:38:11:7a:41:8d:5b:25:cc:
                    ac:df:34:61:15:91:eb:68:6a:1c:d1:bc:44:7a:53:
                    93:a7:94:14:85:20:37:e0:e3:b4:95:fc:41:e0:ad:
                    04:0d:a9:f4:34:93:79:20:66:35:b0:da:c4:f5:d6:
                    c2:5e:4b:28:5c:c0:09:3f:9c:3f:fc:79:44:74:ea:
                    8d:07:10:1a:91:72:44:30:24:a5:26:18:88:64:6b:
                    70:9d:91:89:fa:9a:77:25:b2:0e:82:d2:3f:e0:40:
                    6a:44:5f:79:b2:f2:5e:3e:72:9c:9b:a3:98:3f:c3:
                    0f:7e:80:0f:d1:40:f4:62:9f:ed:e3:24:8a:84:14:
                    95:19:8f:4f:29:ca:f5:5c:39:1e:cd:c7:c9:29:66:
                    8e:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                74:A6:F8:73:18:C1:FA:DE:E6:F2:18:E4:E4:C6:8D:A2:49:04:FE:58
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/787b9e41-419e-36c0-bc51-a5b982496b3e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.82.134.30/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         b6:d0:55:c9:3c:23:27:8e:5a:0b:1c:a8:2b:4e:cf:ec:31:d5:
         18:18:32:4f:57:9d:02:d5:9e:cc:3e:80:76:d5:61:cc:50:1b:
         4f:93:43:48:51:c5:60:4b:8e:bb:4d:7b:2d:b9:5b:81:83:e8:
         20:80:bd:c6:45:62:fe:d6:9e:e7:84:56:d8:2b:f5:4a:f1:62:
         07:6b:df:c8:62:6f:57:8a:b9:a4:7c:d1:ed:1f:c1:4e:73:61:
         e1:b5:68:3b:0c:29:0d:15:19:12:25:36:fd:4c:fa:03:0f:4d:
         0a:6d:74:06:f3:cd:94:52:a4:b2:3b:fd:bb:2f:85:a9:4b:af:
         fc:f2:8d:fe:2c:14:7b:65:17:f1:45:36:4a:23:d1:ad:f2:49:
         87:04:70:d2:41:72:ef:00:84:f4:36:89:c3:e1:00:10:c7:c4:
         b2:e7:b6:47:ba:34:90:f7:d3:8d:0f:e2:cb:6e:ad:52:b0:19:
         fd:e8:72:97:a7:28:17:1b:f6:8b:cc:27:39:b6:bc:08:e0:68:
         f2:ed:0a:cb:0b:50:0d:90:68:97:9f:04:3f:e1:12:31:f4:19:
         71:f2:a1:00:61:3f:ed:a1:c0:3a:27:52:75:d2:39:f4:b6:ad:
         c0:07:9d:c5:b4:41:10:49:8e:e7:8c:56:fa:4d:fa:f6:dd:a1:
         be:47:b7:2d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 26 04:47:10 2026 by rpki-client