Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/840fcf09-b8b5-3db5-b23e-746e419796d4.roa
File:                     840fcf09-b8b5-3db5-b23e-746e419796d4.roa (raw, json)
Hash identifier:          fRIwaBhDbE5FLHVIKqOsNyY5vfpPd6odKVHoLllFxFw=
Subject key identifier:   16:96:F9:93:9E:5C:9B:B6:13:50:A2:8C:84:96:3C:71:F4:63:A7:DD
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584F10379AAB2408B8897238AD00
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/840fcf09-b8b5-3db5-b23e-746e419796d4.roa
Signing time:             Fri 04 Sep 2026 13:00:12 +0000
ROA not before:           Fri 04 Sep 2026 13:00:12 +0000
ROA not after:            Thu 03 Dec 2026 14:00:12 +0000
asID:                     397199
IP address blocks:        192.48.79.30/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 26 Sep 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:10:37:9a:ab:24:08:b8:89:72:38:ad:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Sep  4 13:00:12 2026 GMT
            Not After : Dec  3 14:00:12 2026 GMT
        Subject: CN=72196b4d-b0bd-402f-ab1a-baba6f7d9a00
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:4c:5c:d1:98:90:15:a6:33:6e:67:2f:b4:8d:
                    26:b5:94:0e:66:ef:bd:9d:21:0b:d5:de:79:a9:b9:
                    29:ff:e2:41:db:10:f7:c6:db:27:b0:c9:a5:27:d4:
                    2b:72:d1:b5:50:98:ac:27:a5:fe:6f:d3:2c:cc:9a:
                    9f:8e:ad:4c:4c:bf:ee:d6:ff:c9:19:34:65:a1:8a:
                    ff:a4:a7:e9:c9:6b:52:e7:8d:df:90:1f:5a:73:f5:
                    e7:e9:2a:2c:75:b8:4d:94:27:70:e7:65:b6:6c:b9:
                    c3:1b:36:22:da:9b:b0:43:d5:4a:e4:3e:19:49:e1:
                    c5:8e:c2:23:eb:f9:2e:90:7d:70:05:3a:a1:e0:ae:
                    31:27:ff:78:4c:73:3c:73:c5:d0:ea:f2:96:5a:cd:
                    30:ac:5d:3f:bd:a0:c7:76:53:19:2c:45:40:5e:c4:
                    6a:43:27:2f:85:66:6e:41:7f:a5:77:31:ac:ed:31:
                    c9:2e:89:b9:9f:04:b7:bd:ee:64:1c:ee:a3:47:40:
                    2d:ae:9e:88:de:38:a9:0c:2d:8f:bc:3e:70:39:bd:
                    5d:66:f9:30:d0:cc:1e:3e:91:f3:b8:ff:d8:93:17:
                    4c:0e:8f:ff:07:e9:b9:37:74:d2:e1:9c:a4:48:de:
                    d8:2a:73:9c:d3:f2:8c:f7:c7:d5:42:1f:01:cb:78:
                    42:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                16:96:F9:93:9E:5C:9B:B6:13:50:A2:8C:84:96:3C:71:F4:63:A7:DD
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/840fcf09-b8b5-3db5-b23e-746e419796d4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.48.79.30/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4c:84:df:3e:6f:8c:56:64:c9:8d:a3:4a:76:80:14:ff:a1:c7:
         02:e9:b0:cb:1a:6e:64:20:d9:c7:8c:2a:2a:ce:21:c1:06:2a:
         12:e9:16:b7:33:dd:aa:3f:40:2f:1e:8f:ee:bf:b5:f7:95:cb:
         22:ac:7e:5a:6c:b9:97:ef:03:e1:d6:44:07:37:0e:b0:5e:eb:
         84:67:82:9b:8e:5c:4f:b8:8c:59:7f:34:5a:ed:63:58:48:91:
         0b:f4:2b:42:4b:e4:8a:4a:c2:3c:7f:1b:c4:02:18:86:bb:0f:
         ba:24:f6:40:15:11:8a:27:5f:3d:10:c5:60:0e:b5:ea:99:0a:
         6a:1b:ea:39:65:88:e9:af:d2:b1:7d:a8:c4:f9:9e:ad:50:53:
         06:dd:a4:fe:fe:e5:ff:0c:c7:65:2d:df:e7:8a:5a:b2:94:b8:
         af:2e:4e:2c:40:1d:b4:c3:c2:e3:12:d6:77:12:9c:37:1d:72:
         fc:0b:57:6b:02:62:0c:43:3d:2f:bf:69:37:7f:db:9c:d3:59:
         a8:fd:1a:4f:b2:50:f3:78:09:e1:90:b0:ab:72:b1:20:86:69:
         3f:d6:ab:12:08:ae:91:e6:0f:66:a7:b1:6b:fa:05:fa:db:c3:
         1d:ca:63:53:16:e5:ae:24:95:7c:54:5b:e0:15:8c:8f:05:3e:
         ff:89:4d:17
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 18:14:44 2026 by rpki-client