Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/78b762d3-20e7-3f84-bdb2-80f58b7832f3.roa
File:                     78b762d3-20e7-3f84-bdb2-80f58b7832f3.roa (raw, json)
Hash identifier:          a0eZnm81Dmq0hT1NAtBBHZOScnPa2MmdxU1J7fRNh7c=
Subject key identifier:   C3:C9:6E:3C:29:B7:E2:D2:79:CC:E8:B2:7F:87:DC:91:35:55:12:48
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584E7FFA4EE84E341B93E356F9F0
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/78b762d3-20e7-3f84-bdb2-80f58b7832f3.roa
Signing time:             Tue 14 Jul 2026 21:00:12 +0000
ROA not before:           Tue 14 Jul 2026 21:00:12 +0000
ROA not after:            Mon 12 Oct 2026 21:00:12 +0000
asID:                     396592
IP address blocks:        192.42.176.30/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 26 Jul 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:7f:fa:4e:e8:4e:34:1b:93:e3:56:f9:f0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Jul 14 21:00:12 2026 GMT
            Not After : Oct 12 21:00:12 2026 GMT
        Subject: CN=908a1f09-3040-4a75-9457-9a2e6a03dd32
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:be:66:30:3d:df:73:3d:50:ab:75:16:53:ed:
                    1d:ce:c5:4b:8f:93:58:57:8e:8c:ee:90:0d:ad:0d:
                    19:5d:04:b9:39:6e:5f:32:0e:bd:91:1b:c4:87:9e:
                    2c:af:e2:5e:52:5b:01:7b:96:cc:01:88:41:8d:24:
                    dd:c8:3e:fd:8f:02:2b:02:da:5c:07:a2:f9:c2:aa:
                    92:9c:d8:99:5d:91:ac:de:ee:f3:69:0b:a0:9d:22:
                    b8:90:51:64:e3:e6:ea:a1:6a:e7:1e:41:73:19:61:
                    d7:f5:0d:26:fa:7f:68:3d:6e:fe:ae:c3:94:1f:d6:
                    88:06:86:14:65:bd:a7:41:b1:55:49:45:49:9e:50:
                    ad:92:f2:06:8a:18:5c:3c:fc:a7:db:be:e0:97:48:
                    2e:a7:c6:37:86:37:8e:74:5f:81:bc:6a:ef:e4:80:
                    21:30:68:18:b8:99:e6:d4:fd:6e:b1:36:aa:52:38:
                    5b:7c:e6:d9:8e:19:b4:0a:f5:a8:2f:fe:9c:89:bd:
                    b5:0f:67:0e:c5:d2:58:07:4e:6b:17:ae:91:f3:0c:
                    7c:61:54:7d:a7:5a:24:07:8c:b5:d3:f6:16:3f:1f:
                    6e:37:c7:8b:85:25:e7:a1:28:3c:ce:49:fd:96:dd:
                    68:b0:08:17:49:f3:3b:06:68:dd:58:0f:89:a1:34:
                    f6:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C3:C9:6E:3C:29:B7:E2:D2:79:CC:E8:B2:7F:87:DC:91:35:55:12:48
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/78b762d3-20e7-3f84-bdb2-80f58b7832f3.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.42.176.30/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         64:36:21:a2:02:d6:11:24:aa:6c:d8:22:ac:74:4d:14:bb:3c:
         67:8c:40:ad:da:7c:6b:fc:eb:35:84:c1:d7:3e:56:06:d1:3e:
         20:71:57:7d:18:e0:3d:16:4f:da:43:f7:01:57:29:ef:92:dc:
         f8:40:6f:6c:d2:42:11:cd:6c:9c:97:3d:b1:b3:bb:87:72:2f:
         3b:9d:07:e1:3a:ac:04:0c:01:29:59:c7:6d:4b:3c:df:c2:7e:
         67:01:5b:a5:a2:39:e8:5e:86:19:68:d2:eb:73:1b:9c:63:4a:
         73:f7:76:e4:6f:04:5f:24:7f:9d:ae:89:a5:01:9a:46:42:31:
         b2:74:a3:94:2a:37:a6:db:11:68:1a:f9:19:20:97:c4:2f:07:
         19:0c:02:a1:e6:08:40:b5:89:c9:c1:e5:ea:67:d3:75:86:b0:
         bc:1a:41:f5:b0:90:61:03:c9:09:43:69:db:be:a1:c8:85:dd:
         fd:16:f0:3d:dc:ff:06:0e:29:e3:4e:0c:1b:d0:94:95:07:6e:
         8f:1c:d4:ee:52:11:05:61:e8:57:7b:6d:2d:68:bc:a5:12:08:
         06:14:d7:89:52:ac:8e:9d:a7:4e:d2:bb:d6:bc:40:03:6d:01:
         5d:9d:da:9b:da:76:66:76:18:d4:fc:e1:46:fa:ef:0a:56:3d:
         ee:9c:29:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 10:09:37 2026 by rpki-client