Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/8e5e895d-3562-31d7-ae5b-b2703f6d4709.roa
File:                     8e5e895d-3562-31d7-ae5b-b2703f6d4709.roa (raw, json)
Hash identifier:          AhpbDFkPlPy5RarhvqSbjxnqRgluxAocuQFVUo/sXuE=
Subject key identifier:   EB:69:C4:6F:03:AE:B5:FF:F6:84:32:CF:D1:18:20:61:80:80:5A:AD
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584F4972AF788FD3B1CA52A61D80
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/8e5e895d-3562-31d7-ae5b-b2703f6d4709.roa
Signing time:             Fri 25 Sep 2026 01:00:12 +0000
ROA not before:           Fri 25 Sep 2026 01:00:12 +0000
ROA not after:            Thu 24 Dec 2026 02:00:12 +0000
asID:                     397212
IP address blocks:        192.43.172.30/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 26 Sep 2026 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:49:72:af:78:8f:d3:b1:ca:52:a6:1d:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Sep 25 01:00:12 2026 GMT
            Not After : Dec 24 02:00:12 2026 GMT
        Subject: CN=c0f791c5-f869-4c65-b970-d5cb93528ac8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8c:08:b3:11:5c:fa:a2:06:14:04:c4:95:3c:37:
                    c3:f0:67:03:a8:fa:5c:56:6d:c6:f4:50:71:6f:c7:
                    28:fa:7a:4c:62:a2:de:a9:07:0a:10:ea:7c:2e:fc:
                    35:fc:81:3e:46:34:28:4c:7b:a9:04:be:75:69:df:
                    9b:37:c2:d1:d7:c8:85:06:24:26:27:ca:21:46:37:
                    91:df:e8:57:2f:a1:4f:52:06:21:4f:8b:13:9c:b4:
                    e8:99:5c:0d:c2:28:98:1c:b5:2e:86:e4:c2:a9:05:
                    8a:fa:5c:26:6d:63:ed:53:aa:ec:83:c3:6f:4d:df:
                    dc:38:59:59:f2:3b:39:78:66:ec:5e:3f:12:9e:14:
                    b9:1f:55:20:ed:61:35:b1:70:1f:a9:bb:2b:84:d9:
                    c4:3e:12:50:9c:72:43:99:15:8a:af:9a:1a:b0:37:
                    16:6f:0e:e7:18:52:c4:ff:24:36:9b:8f:75:68:5f:
                    0a:f5:95:e5:3f:a3:6f:92:20:e1:cd:74:17:10:45:
                    9a:a8:2e:7a:e6:5b:77:5c:3a:f6:72:f0:63:95:3f:
                    2c:17:d4:9a:05:22:a9:e7:81:9e:e8:67:d5:29:c4:
                    58:ba:5f:7c:25:59:c2:99:f0:cf:18:e6:78:ca:7d:
                    32:c2:f6:70:e4:1b:21:e1:d2:7d:4d:fb:de:20:80:
                    6f:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EB:69:C4:6F:03:AE:B5:FF:F6:84:32:CF:D1:18:20:61:80:80:5A:AD
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/8e5e895d-3562-31d7-ae5b-b2703f6d4709.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.43.172.30/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         36:de:17:1a:c0:9e:83:de:41:d2:22:27:8b:34:3f:b0:a6:04:
         4b:9b:71:72:9b:f1:70:cf:dd:df:5e:e8:b2:91:26:46:4e:a1:
         ec:ed:f7:a3:0a:5c:50:90:c2:11:a0:6e:dd:4d:3a:9a:cf:d5:
         9a:e5:e8:24:93:0a:55:51:31:ec:0f:c2:61:5d:da:d7:b4:6c:
         71:07:1b:e0:3e:7f:17:48:dc:cb:de:20:3e:07:b8:b6:5a:1c:
         33:c5:6a:52:0a:4b:a0:07:12:c8:ce:8c:99:f0:fe:08:cb:d6:
         f5:ee:f7:c9:97:d7:d9:93:f9:2d:17:e5:b5:5e:00:41:2a:6b:
         47:33:13:c4:b3:91:7e:2a:ac:70:ec:4c:87:db:ac:81:50:27:
         a2:33:12:cf:d3:88:ce:7f:79:5f:5a:81:43:3a:0c:da:b4:2d:
         e9:7b:0e:d2:ad:23:5f:8f:00:fd:e1:91:ba:ed:09:f4:8b:8f:
         08:f7:7d:93:43:45:af:8c:0b:95:c3:3a:2e:7b:7f:da:88:a1:
         39:00:c6:0b:85:7c:b7:59:8e:90:80:08:b0:8b:62:5e:15:c3:
         4e:e7:ea:63:09:42:3b:3c:7d:9a:a4:02:c0:43:23:c4:17:c9:
         53:95:34:c3:b8:6f:9f:07:27:d3:92:45:44:41:3b:fc:79:76:
         f4:07:30:85
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 25 07:24:16 2026 by rpki-client