Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/918f6954-d37e-3ab6-ade5-662ec64337e1.roa
File:                     918f6954-d37e-3ab6-ade5-662ec64337e1.roa (raw, json)
Hash identifier:          Af36TZzNeMU5bjTXo9Sdo+vssHkFH5JSW/RHQs2XvUg=
Subject key identifier:   53:4B:B5:48:71:CE:04:8D:F5:33:10:B4:8C:CA:59:A5:4E:BE:D1:11
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584F480D514ED0B2A441ADF8C580
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/918f6954-d37e-3ab6-ade5-662ec64337e1.roa
Signing time:             Thu 24 Sep 2026 13:00:12 +0000
ROA not before:           Thu 24 Sep 2026 13:00:12 +0000
ROA not after:            Wed 23 Dec 2026 14:00:12 +0000
asID:                     396551
IP address blocks:        192.42.175.30/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 30 Sep 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:48:0d:51:4e:d0:b2:a4:41:ad:f8:c5:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Sep 24 13:00:12 2026 GMT
            Not After : Dec 23 14:00:12 2026 GMT
        Subject: CN=2e5881af-f195-4d82-aaee-6d70f6a836a4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:64:5d:dc:4c:90:7d:71:01:3c:82:1e:81:e3:
                    5c:e6:29:36:35:02:54:d4:eb:0a:43:28:ef:dd:2c:
                    61:5f:df:9d:bf:a2:42:69:eb:08:2f:89:30:b2:f4:
                    43:7e:60:31:1f:c0:cf:d9:53:ab:57:14:e2:ee:dd:
                    7d:4d:00:a1:a7:11:0d:0e:4b:f5:f4:86:53:06:35:
                    1c:4c:2b:02:ea:81:be:b2:e4:7e:76:69:1b:92:c2:
                    2b:bc:05:3b:a6:b0:45:d7:36:05:63:59:15:d6:6e:
                    1d:bf:f6:62:fc:fa:70:83:f1:1f:4f:f0:ff:3e:d9:
                    08:e2:a3:5a:6f:0a:b9:c4:98:df:b1:d6:43:94:94:
                    70:11:be:3e:42:02:b1:84:90:3e:d5:24:cc:a0:ed:
                    f1:36:03:5a:6c:4a:d3:52:1e:ec:65:c9:16:42:85:
                    22:81:bd:17:be:2c:5c:30:e3:5e:0e:94:46:72:d6:
                    f4:c2:59:e7:51:e3:05:6d:67:70:b1:0c:23:91:f6:
                    39:61:49:4f:1a:4f:a1:78:e9:19:eb:ae:13:c5:e1:
                    4d:92:8b:78:3f:33:6d:c3:44:b7:48:48:52:22:f9:
                    37:c1:57:00:cc:c0:e0:3b:a9:3e:38:c8:27:a8:d6:
                    59:69:4c:c4:6f:db:6d:63:aa:1b:5c:59:32:a6:23:
                    33:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                53:4B:B5:48:71:CE:04:8D:F5:33:10:B4:8C:CA:59:A5:4E:BE:D1:11
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/918f6954-d37e-3ab6-ade5-662ec64337e1.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.42.175.30/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         80:da:f3:79:f2:a2:18:46:16:5a:82:1f:b5:7f:a3:ec:ee:43:
         91:be:eb:0d:e8:a6:ac:8a:da:19:40:04:2b:a2:7e:d7:76:8a:
         cd:9e:10:ad:c5:58:90:f8:7d:1b:96:67:6e:af:53:7f:3a:a1:
         d6:1f:b5:0f:d4:e3:cf:e7:a7:7e:02:25:06:e7:85:15:ab:4b:
         92:4a:5a:11:6d:c8:ca:d4:7e:05:f5:dc:17:b2:29:06:1a:a3:
         a8:2c:f8:19:70:d6:1d:39:c0:e8:77:f3:21:f2:e5:89:32:8c:
         c0:f2:59:80:d2:4f:bb:35:00:a2:7f:69:e1:fe:94:df:29:15:
         2b:fe:f3:4a:d1:93:48:4e:09:b3:5f:18:33:74:07:ea:3a:e2:
         93:ad:af:6c:88:b3:9c:e2:92:6e:7b:b7:84:3b:c0:d0:6e:1b:
         f3:89:54:5c:28:7c:8a:a7:0b:cc:87:e9:64:f0:8b:90:cf:53:
         d6:60:8f:cd:ab:56:03:84:79:c9:48:b8:3f:c1:00:3d:4a:25:
         99:1e:ac:1a:41:81:54:6f:55:d5:e6:6a:16:f2:4f:e9:7b:ed:
         87:18:71:83:60:ea:04:9d:19:7a:8a:32:94:c0:ab:f0:a0:7c:
         51:bd:46:ae:69:f6:0c:26:a0:3f:e5:cf:03:1d:f9:65:b7:2b:
         aa:79:d9:05
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 28 00:50:23 2026 by rpki-client