Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/8f8e1cc6-80d5-342b-bab5-015b82c8dfaf.roa
File:                     8f8e1cc6-80d5-342b-bab5-015b82c8dfaf.roa (raw, json)
Hash identifier:          7r8H+h6oLW8mH4Anc+WADz16frirWajzNE9b9uKUhv4=
Subject key identifier:   60:04:82:66:B5:88:61:A8:74:04:E0:23:97:86:1A:4F:46:C6:35:DA
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584F49894290174CD6FBC8C8D800
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/8f8e1cc6-80d5-342b-bab5-015b82c8dfaf.roa
Signing time:             Fri 25 Sep 2026 01:00:12 +0000
ROA not before:           Fri 25 Sep 2026 01:00:12 +0000
ROA not after:            Thu 24 Dec 2026 02:00:12 +0000
asID:                     21313
IP address blocks:        192.43.172.30/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 26 Sep 2026 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:49:89:42:90:17:4c:d6:fb:c8:c8:d8:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Sep 25 01:00:12 2026 GMT
            Not After : Dec 24 02:00:12 2026 GMT
        Subject: CN=3e380dcf-be34-449e-9374-dbbbe4704412
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:75:9c:0b:f0:c8:d0:5f:8a:e6:ff:b4:2d:29:
                    44:6f:3d:c4:c0:5c:e7:15:7c:5c:5d:ec:83:22:3e:
                    67:82:30:4a:13:3f:08:c1:3b:b6:3b:cb:72:5b:eb:
                    11:c6:34:40:f3:1b:be:0c:07:80:93:a3:c9:f6:9b:
                    20:d2:0e:e5:db:93:e1:e2:ff:de:6d:09:ce:99:11:
                    4c:6b:07:f7:06:56:92:75:27:1f:c9:75:31:9e:15:
                    56:64:a2:a1:e7:64:cf:09:35:67:fb:e3:79:bc:52:
                    7c:77:e9:26:26:d2:54:c4:b9:a3:a1:d9:8a:89:e4:
                    ba:d5:10:43:5b:06:70:a4:a8:3f:b4:01:63:1a:1f:
                    3d:c3:6a:cf:fb:1a:cd:65:8f:b6:14:10:fa:93:64:
                    22:0d:9a:36:65:e7:56:78:21:36:09:3b:36:9f:84:
                    04:c8:13:c8:f8:f2:be:72:28:4d:b1:83:1a:b9:5f:
                    ff:47:c0:82:ed:28:6f:31:b4:9d:ce:f5:9d:40:c0:
                    00:88:68:81:67:d3:ef:98:c2:af:0f:c1:c9:46:22:
                    0c:59:55:5f:6a:b4:7f:f5:6d:a8:da:a7:f1:51:11:
                    14:73:b4:8a:f5:84:e0:7b:ab:8a:8b:d7:e4:e8:7e:
                    35:b9:39:da:9c:29:7c:7d:86:d6:7d:94:af:58:56:
                    4b:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                60:04:82:66:B5:88:61:A8:74:04:E0:23:97:86:1A:4F:46:C6:35:DA
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/8f8e1cc6-80d5-342b-bab5-015b82c8dfaf.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.43.172.30/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         38:6d:65:04:bf:13:91:ac:5a:95:5f:34:5e:00:8a:fd:a2:f0:
         08:76:16:67:5b:9f:55:24:20:b4:2c:8d:7c:6e:2c:b4:cb:15:
         33:c3:f2:7e:f4:75:fd:1b:ab:2a:56:50:b8:2a:3d:e7:a6:9e:
         3e:ae:75:5f:a7:65:af:d6:73:82:ba:38:19:6d:1a:09:3c:88:
         2f:81:17:d6:a7:19:51:af:f5:ab:83:16:90:4f:36:92:86:a8:
         6b:d6:68:3c:2e:56:c7:8f:95:f8:77:1c:15:ba:22:cb:ab:4a:
         ef:7c:55:6b:a2:d7:21:c1:0b:9e:46:00:81:f2:80:19:f3:4b:
         17:f7:d8:71:ba:d3:91:0d:b0:ab:ad:31:99:ed:2c:4d:7a:6e:
         bb:c1:82:3b:30:93:b3:57:d2:75:08:96:2b:fc:a5:52:1e:54:
         6a:10:2e:7e:c0:43:3c:1b:d8:65:cb:1b:1f:b5:34:8c:06:20:
         26:1f:86:9a:df:ef:ff:4a:99:e4:33:a5:a8:de:be:32:9d:1b:
         88:dc:d8:51:b4:e4:22:a3:ec:9d:e2:a3:13:4b:f7:6c:e0:b3:
         35:8b:0b:9b:52:1b:0c:bb:7f:37:8f:dd:6f:8c:c1:12:b5:4e:
         6a:b5:9c:23:0f:99:96:12:dd:ca:d9:98:5f:32:84:7c:51:ff:
         62:b1:62:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 25 06:55:46 2026 by rpki-client