Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/8cb9d138-c529-3682-8707-18fb4b155e2f.roa
File:                     8cb9d138-c529-3682-8707-18fb4b155e2f.roa (raw, json)
Hash identifier:          NqfVx2dSfssX622CDF9iDJSGtPT4foPoku4MVH3Nk0k=
Subject key identifier:   78:99:8E:02:87:0F:47:15:FE:3B:66:3A:21:33:5B:D6:BC:7A:DA:7F
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584E6F3E9FF212E948733D4D6C00
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/8cb9d138-c529-3682-8707-18fb4b155e2f.roa
Signing time:             Wed 08 Jul 2026 21:00:12 +0000
ROA not before:           Wed 08 Jul 2026 21:00:12 +0000
ROA not after:            Tue 06 Oct 2026 21:00:12 +0000
asID:                     397203
IP address blocks:        192.30.45.30/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 26 Jul 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:6f:3e:9f:f2:12:e9:48:73:3d:4d:6c:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Jul  8 21:00:12 2026 GMT
            Not After : Oct  6 21:00:12 2026 GMT
        Subject: CN=93b175bf-5337-46c1-bf3d-7ccd65f0730d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:a4:60:90:d4:d4:0b:e7:cf:ad:d8:f9:8e:a8:
                    3e:64:f4:7b:19:2e:68:20:e6:83:7e:99:57:6a:84:
                    17:e7:a0:fd:ac:63:4e:3f:70:c6:ef:75:7c:54:70:
                    c8:b7:4c:60:34:6f:74:32:cb:5a:cb:a7:da:c4:8f:
                    51:b4:9e:15:3c:bf:f0:64:b8:c4:35:60:f9:7b:55:
                    8e:9f:cc:ae:d3:6e:ed:ef:da:ac:cb:bd:34:1a:89:
                    37:49:fc:d5:5b:45:06:43:a3:7d:1b:28:11:cb:4d:
                    ef:19:64:d6:0a:5c:7c:33:92:0b:e5:8a:bd:41:05:
                    bb:7f:de:a3:8b:3c:05:07:66:80:b5:a8:64:88:21:
                    5a:25:60:af:33:e4:61:0d:cf:eb:09:a9:21:a6:86:
                    30:b4:a3:5d:1a:dd:24:2a:65:79:ca:d8:fd:b1:a2:
                    c1:64:78:27:96:09:d1:37:b2:b9:60:61:c1:10:09:
                    ba:c7:e6:07:d7:07:d6:e3:1f:57:5b:29:9f:90:51:
                    e8:3f:a5:cc:66:36:70:fa:31:10:8b:b7:40:0e:2f:
                    27:03:60:31:5b:4a:ab:59:f8:6d:d6:84:8b:2b:6b:
                    67:70:01:5e:7b:6d:45:65:1e:1d:cc:8a:5a:16:a4:
                    49:9c:ac:a2:e0:d1:62:12:02:9d:f2:e0:f5:3d:14:
                    50:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                78:99:8E:02:87:0F:47:15:FE:3B:66:3A:21:33:5B:D6:BC:7A:DA:7F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/8cb9d138-c529-3682-8707-18fb4b155e2f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.30.45.30/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         58:df:f8:27:7f:f2:47:06:be:c7:d6:ce:cc:24:df:bf:a9:fe:
         02:41:36:45:1e:6e:24:22:88:ae:72:14:11:a4:35:6e:15:a5:
         a0:15:19:c7:21:a6:42:a5:df:71:43:4c:b3:a0:d6:b0:0e:bb:
         0d:ee:e6:7d:39:a0:f3:5d:30:bd:b0:3f:e1:00:96:3b:e2:2f:
         cb:f8:12:dd:ed:9b:89:93:45:fb:9b:54:c4:85:de:7e:16:9d:
         e9:ca:ac:15:91:d2:17:06:22:5c:a9:6a:28:4f:5b:db:b2:ec:
         56:23:4c:dc:1b:76:d4:53:ae:87:55:fb:10:2f:d9:c5:38:bb:
         d4:d0:a5:d2:30:a6:3a:e9:38:d1:bc:98:e7:77:28:4c:67:fd:
         05:24:28:e4:19:6d:9c:75:8c:db:ab:5e:07:55:25:0e:b5:95:
         35:29:8e:98:e9:44:1d:d4:b0:6c:2d:90:a1:3f:8b:29:4d:15:
         21:bd:d0:9a:9f:3c:2f:99:01:1f:67:1b:0b:c2:9f:37:85:d8:
         87:12:43:42:e3:4d:23:0a:a4:ed:7f:f8:f7:93:51:01:5b:49:
         e0:23:0e:48:94:8b:54:c7:d4:96:c1:10:59:07:6d:9f:bb:d6:
         09:6a:78:a7:df:a0:e6:c4:f6:b9:11:90:3d:20:f3:d1:38:b7:
         a2:10:85:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 09:11:34 2026 by rpki-client