Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/8b06f7b7-8194-3dde-a79a-67105d54f495.roa
File:                     8b06f7b7-8194-3dde-a79a-67105d54f495.roa (raw, json)
Hash identifier:          wxTQO5WhdvlJuTfdaEmYAA2duL7eQXEKnUeiis4GkYY=
Subject key identifier:   41:9F:90:6C:BC:9D:72:C5:D1:D5:54:86:4B:C3:E5:A9:AC:A4:53:57
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584F49868F5882BFD2C09CCB1A40
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/8b06f7b7-8194-3dde-a79a-67105d54f495.roa
Signing time:             Fri 25 Sep 2026 01:00:12 +0000
ROA not before:           Fri 25 Sep 2026 01:00:12 +0000
ROA not after:            Thu 24 Dec 2026 02:00:12 +0000
asID:                     396549
IP address blocks:        192.42.173.30/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 28 Sep 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:49:86:8f:58:82:bf:d2:c0:9c:cb:1a:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Sep 25 01:00:12 2026 GMT
            Not After : Dec 24 02:00:12 2026 GMT
        Subject: CN=4277e4ea-939d-4efe-9b7a-2337884ed469
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8e:d1:8e:56:82:3a:dd:40:f9:aa:6e:27:d6:f7:
                    05:75:04:1c:cc:ba:d4:e4:9f:ec:23:1b:48:49:65:
                    21:ad:c5:21:3d:2f:99:ba:da:57:b3:e9:fb:c1:30:
                    1a:cd:17:a4:1c:f6:15:c7:35:ff:c2:bc:ab:8f:06:
                    e3:ea:ee:8f:3a:33:5e:61:77:b1:cb:1a:07:d2:d5:
                    54:11:f5:1f:d8:83:5b:b7:0a:33:1c:dc:38:2b:4e:
                    79:7c:fd:84:53:26:9b:e0:2b:45:0b:5b:b4:e8:65:
                    81:b6:0a:31:c6:34:95:20:9c:17:70:49:51:dc:63:
                    f3:d7:27:74:11:24:de:14:a3:a1:62:45:5d:1b:62:
                    c7:64:ca:74:9f:d3:f8:b5:6c:d3:e3:bb:52:6f:04:
                    ba:6f:e1:61:d0:ed:94:95:10:03:0f:0e:36:b1:7b:
                    c7:98:73:b9:86:e9:2f:37:f6:42:e1:7e:41:91:82:
                    ed:99:37:ce:60:e0:12:7f:25:f7:d9:f0:ce:be:a3:
                    03:45:b6:14:9f:6e:98:8a:03:0f:5d:31:b5:01:b5:
                    ea:56:46:2b:6c:09:e8:bc:49:41:81:41:ea:43:97:
                    fe:86:8e:48:99:c4:c5:80:8c:0c:3a:da:80:ff:20:
                    6d:bd:bd:60:5b:3a:68:b7:f7:6b:cb:12:33:5b:95:
                    15:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                41:9F:90:6C:BC:9D:72:C5:D1:D5:54:86:4B:C3:E5:A9:AC:A4:53:57
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/8b06f7b7-8194-3dde-a79a-67105d54f495.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.42.173.30/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         17:d8:bb:2a:87:93:b3:3b:5e:f8:b7:a7:3e:36:6e:8a:17:fa:
         29:2a:e7:57:27:2a:82:34:40:00:e6:26:fa:c3:2a:70:c6:53:
         ee:2d:b8:52:4d:01:72:27:8b:70:1f:35:50:d5:a1:98:7e:86:
         e8:f5:aa:20:b0:c3:dc:62:26:1c:f8:5e:b4:3a:0a:d4:1c:22:
         3b:82:41:c2:f5:76:82:71:53:af:5f:44:c9:79:b4:2c:fe:d4:
         af:ec:57:96:00:13:92:ad:2b:91:e7:d2:71:f0:b3:08:c9:28:
         41:da:e8:37:c4:61:e5:bc:4c:b6:aa:f8:c5:64:b4:b8:04:7e:
         3f:3a:1a:c3:2e:c4:36:60:10:72:e6:67:6b:77:25:8d:d1:e8:
         07:55:e3:08:1e:92:95:f5:5d:59:d1:80:27:84:00:7b:35:29:
         db:21:cd:ef:8b:29:52:25:22:26:40:91:85:56:f7:ac:d8:b5:
         ef:d8:11:b6:86:12:f9:86:c4:89:63:53:99:3e:6b:5e:c7:f5:
         96:bb:1e:f0:3f:f7:d6:b4:a7:bc:08:31:65:ea:da:11:d5:24:
         df:bd:fb:03:01:5f:5c:b5:ed:b9:aa:13:ec:67:08:4b:1b:90:
         27:ac:e3:90:a5:ae:a0:a1:eb:db:15:39:73:d3:99:f6:34:2b:
         8d:71:f0:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 26 10:02:04 2026 by rpki-client