Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/8c7835d5-430e-3fb2-8b43-a130d5d07479.roa
File:                     8c7835d5-430e-3fb2-8b43-a130d5d07479.roa (raw, json)
Hash identifier:          uQ8W9uFZg9lgg+9QKaSDwtfdu3NgysbyxcUxfixSoxc=
Subject key identifier:   B9:C4:3B:5D:CA:BD:8B:94:74:FA:56:DA:BC:CC:CF:60:60:32:63:32
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584E6DD4C69ED7108BF45ED64B00
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/8c7835d5-430e-3fb2-8b43-a130d5d07479.roa
Signing time:             Wed 08 Jul 2026 09:00:12 +0000
ROA not before:           Wed 08 Jul 2026 09:00:12 +0000
ROA not after:            Tue 06 Oct 2026 09:00:12 +0000
asID:                     36627
IP address blocks:        192.54.112.30/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 26 Jul 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:6d:d4:c6:9e:d7:10:8b:f4:5e:d6:4b:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Jul  8 09:00:12 2026 GMT
            Not After : Oct  6 09:00:12 2026 GMT
        Subject: CN=22158edb-3625-4594-a0d9-e7038a8f3992
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ef:e6:5a:c7:67:01:b9:47:4b:52:98:a3:b5:0e:
                    4e:93:c2:d5:a7:c4:35:d8:a2:5d:e6:4a:d2:46:05:
                    31:80:1b:57:29:a1:38:16:86:eb:1e:92:b7:74:1e:
                    37:c0:87:27:75:da:f1:df:41:de:f5:22:da:6c:f9:
                    df:e0:48:cd:af:54:33:7c:77:b7:2b:49:fa:12:57:
                    2f:35:5e:91:07:e4:16:a4:b8:cf:07:87:9f:65:01:
                    bb:78:5b:33:03:df:75:e9:6c:7a:a0:78:56:2d:fe:
                    4a:43:01:61:25:5e:ea:d1:a6:6c:c4:d5:64:42:c3:
                    17:ee:66:df:0c:9e:a6:a9:40:bb:2e:a4:4b:d3:c1:
                    dc:2a:29:7e:8d:3e:e4:67:67:f5:fa:03:72:7a:09:
                    ee:d4:f6:42:82:ed:d6:03:d7:44:cf:c5:d6:8d:cc:
                    60:2c:61:7e:da:4b:20:29:57:37:dc:f2:42:53:cd:
                    aa:b5:e7:8b:54:9d:d2:84:48:2f:a2:b0:43:f5:f8:
                    98:c3:cf:70:f9:dd:27:27:5e:64:53:fc:ed:55:24:
                    d6:e9:8f:42:51:dc:8a:f7:89:38:b1:10:e0:14:4d:
                    2e:a1:f0:81:62:14:ce:e4:14:f4:8d:96:de:6a:34:
                    8d:25:24:ec:98:8f:d1:fc:c8:3c:c4:df:fb:03:98:
                    f4:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B9:C4:3B:5D:CA:BD:8B:94:74:FA:56:DA:BC:CC:CF:60:60:32:63:32
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/8c7835d5-430e-3fb2-8b43-a130d5d07479.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.54.112.30/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         72:7a:23:aa:b1:7d:45:2a:bc:01:f9:1b:13:f4:04:8f:eb:6b:
         53:a9:0f:bb:12:43:4d:33:5f:5d:79:1a:87:69:88:4c:39:af:
         43:41:b3:65:2c:b2:e9:9d:2f:58:60:b0:04:76:4e:32:8a:d7:
         4e:14:8f:bc:19:4a:93:b3:64:a7:ca:88:80:05:27:6c:5a:be:
         f4:0e:b0:17:4e:ce:81:67:04:75:a9:43:ae:06:42:00:b6:db:
         cc:c1:d9:7d:c8:71:26:4a:00:f6:3f:7a:32:cf:dd:14:52:d8:
         80:4b:e1:dd:9f:57:6d:24:f6:ac:77:5a:77:26:58:3e:ca:ee:
         5f:35:3f:ef:fb:c5:4e:d1:a2:86:a6:77:33:3c:34:22:00:4b:
         60:ad:70:e7:08:30:14:f3:b4:cc:43:7e:4b:9d:51:b5:5e:6a:
         a4:d2:fb:a9:be:0e:e6:2f:f8:51:13:0c:f0:a1:63:c6:2f:e1:
         38:4d:2e:a6:cf:82:be:60:19:46:4e:57:85:01:65:c8:a7:89:
         b4:9e:a2:b3:1c:ea:43:dd:83:3e:f3:e7:ae:15:c2:03:a7:3e:
         d0:8f:db:00:a2:16:5e:31:2b:a9:e8:b1:15:bf:b3:c8:3b:42:
         f9:f0:09:e7:1e:ca:fa:21:9e:04:a4:f0:95:a5:ed:9b:72:d0:
         5f:c6:30:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 08:02:02 2026 by rpki-client