Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/78c5b996-410e-3869-965d-99903270580f.roa
File:                     78c5b996-410e-3869-965d-99903270580f.roa (raw, json)
Hash identifier:          kK0HSSqZlUC05Ru5h+a4JR0j5goT1CFetjSUgYO8XF4=
Subject key identifier:   0B:2A:29:8A:3A:05:66:AF:43:2F:A3:03:7E:19:ED:58:F5:C9:23:AF
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584F225D1CD44FA5F1E1EB76AD80
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/78c5b996-410e-3869-965d-99903270580f.roa
Signing time:             Fri 11 Sep 2026 01:00:12 +0000
ROA not before:           Fri 11 Sep 2026 01:00:12 +0000
ROA not after:            Thu 10 Dec 2026 02:00:12 +0000
asID:                     396552
IP address blocks:        192.42.176.30/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 06 Oct 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:22:5d:1c:d4:4f:a5:f1:e1:eb:76:ad:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Sep 11 01:00:12 2026 GMT
            Not After : Dec 10 02:00:12 2026 GMT
        Subject: CN=cf0ed86d-4702-4d64-bff0-c77df9a3a981
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:88:32:dd:98:dc:27:0f:df:33:5a:2b:f8:4e:10:
                    b8:b2:a7:70:ed:b3:12:8a:b7:c8:a9:4b:03:38:3f:
                    83:83:f2:49:83:b0:5f:32:e1:64:19:40:e8:b1:cd:
                    a4:a6:e1:fe:d0:c2:66:04:aa:19:c4:12:68:17:5a:
                    98:4f:2c:e4:4a:88:06:31:ed:a1:01:bd:3f:21:a3:
                    17:e4:2b:3c:d0:44:73:9b:d9:e6:64:89:83:57:e1:
                    03:05:18:5d:6a:23:8a:75:94:b9:ce:a4:d2:07:e2:
                    b6:94:b8:37:91:24:66:03:4b:ca:03:57:28:11:f4:
                    6d:ad:70:d4:5f:8c:94:e7:9b:4f:a4:ae:fc:97:d6:
                    a6:42:e8:0c:1b:9e:df:86:05:41:ec:5b:75:0c:9d:
                    98:10:55:c9:d0:df:0c:44:b0:e8:32:73:cc:67:e0:
                    5f:e5:55:eb:5c:4f:ce:62:04:53:0d:f8:9a:b1:24:
                    69:eb:f0:e3:f5:f3:84:c9:73:71:c5:b0:25:88:de:
                    0b:ec:e8:96:ee:92:45:80:6f:36:9f:9c:ac:3d:59:
                    75:e2:45:32:23:f9:80:a6:6f:41:97:0e:c7:ad:29:
                    7d:32:1e:4a:49:2a:6f:5d:92:d8:f4:2e:f6:f5:f0:
                    8a:c9:d4:7c:b2:ca:07:5f:6d:96:4e:83:a8:0a:9d:
                    7e:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0B:2A:29:8A:3A:05:66:AF:43:2F:A3:03:7E:19:ED:58:F5:C9:23:AF
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/78c5b996-410e-3869-965d-99903270580f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.42.176.30/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         bd:fc:e2:db:e1:15:49:c5:de:e6:70:4c:79:f3:3c:c2:50:d4:
         f1:db:29:74:12:30:60:94:87:c4:e9:fb:94:d9:17:f3:db:f4:
         fd:f2:b5:44:48:b5:33:81:e8:c2:f8:f5:70:f3:3e:bb:5b:35:
         ec:8b:c0:4a:fc:09:05:c4:ed:46:79:e1:cd:36:1f:b0:ff:68:
         10:70:96:41:a4:b5:d3:60:fe:54:2d:85:7f:7c:bc:8f:58:0e:
         67:3d:3d:1f:90:60:0b:6b:3c:e6:9d:f8:25:04:d6:40:a6:7d:
         25:d4:70:60:bf:60:2d:e1:89:d6:ce:97:10:03:1e:03:29:ab:
         b4:30:87:f1:be:67:e1:83:aa:38:ee:b1:b5:75:b9:45:f5:6f:
         d5:f4:3b:f3:d8:8f:4a:ec:98:d9:df:ad:0e:20:a1:82:5b:1f:
         b9:b3:33:ec:26:02:87:86:6c:41:c3:25:bc:22:86:70:88:e5:
         9f:11:c6:eb:43:a2:07:31:1a:10:81:ce:66:49:0a:e7:12:1f:
         69:f3:8e:af:8d:16:52:83:cb:32:59:53:1c:ed:cb:be:fd:d8:
         08:d8:c4:f1:26:52:fb:17:dc:f2:ef:c2:9a:11:12:57:8e:e4:
         e6:c9:22:ed:4a:e7:09:b8:00:3d:38:01:70:dc:98:7b:7c:05:
         31:d1:ee:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 4 19:40:05 2026 by rpki-client