Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/94eb899b-a540-3df7-96b9-cd5605d855ee.roa
File:                     94eb899b-a540-3df7-96b9-cd5605d855ee.roa (raw, json)
Hash identifier:          LHFiA+GmgPt3LJgrXd27nwDA8Z4ReyzK5AV67hwpwlg=
Subject key identifier:   0F:88:E3:69:14:64:BF:C2:30:C0:33:FC:43:BC:AB:E2:74:80:AC:FF
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584F497F54BB3B3319C282B2AC80
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/94eb899b-a540-3df7-96b9-cd5605d855ee.roa
Signing time:             Fri 25 Sep 2026 01:00:12 +0000
ROA not before:           Fri 25 Sep 2026 01:00:12 +0000
ROA not after:            Thu 24 Dec 2026 02:00:12 +0000
asID:                     396571
IP address blocks:        192.68.130.30/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 26 Sep 2026 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:49:7f:54:bb:3b:33:19:c2:82:b2:ac:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Sep 25 01:00:12 2026 GMT
            Not After : Dec 24 02:00:12 2026 GMT
        Subject: CN=9f6fe352-6ed1-4b6b-8ab1-ba6b2e31a6a9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:fb:84:4d:3b:de:b5:3b:dc:a5:df:4b:d4:4e:
                    f7:ce:4c:eb:06:1a:6d:56:24:e6:8a:d6:58:14:c6:
                    34:8a:59:61:8e:38:7c:3e:e2:fb:d1:b1:c1:58:df:
                    7a:6e:b3:87:90:1a:7b:24:6e:04:5e:1c:ab:6e:1a:
                    d6:ad:3d:ad:71:fd:72:5d:f9:b6:d9:20:09:18:4b:
                    24:c0:34:83:87:53:c6:0a:03:e8:a2:73:c5:0d:2f:
                    cf:44:2c:af:f8:9d:9a:86:60:c4:8f:dc:55:d2:0e:
                    ff:16:a3:f6:24:ce:98:ee:3d:2a:15:19:1a:58:80:
                    44:0a:49:ac:c5:20:93:6a:9d:05:70:8d:e9:20:c5:
                    3c:7f:3d:a0:77:24:e6:eb:97:33:71:57:de:7a:0a:
                    83:16:4e:65:02:d4:a7:45:c3:0b:26:df:1f:5a:a5:
                    fe:88:e6:ff:91:fc:d3:56:f2:18:cb:e8:ab:4e:f7:
                    47:67:7b:0a:ee:db:47:1c:a0:38:56:12:d3:6c:24:
                    3b:b3:a9:51:30:09:88:f2:2d:ff:a7:13:06:5f:b5:
                    41:62:0d:24:24:cf:b6:e4:86:63:a4:4d:dd:74:7b:
                    a0:a4:53:a4:3c:2d:4e:0f:02:e6:56:8e:0e:4e:b3:
                    2b:77:31:19:74:33:f2:7a:0f:0f:46:41:c3:a9:40:
                    7c:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0F:88:E3:69:14:64:BF:C2:30:C0:33:FC:43:BC:AB:E2:74:80:AC:FF
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/94eb899b-a540-3df7-96b9-cd5605d855ee.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.68.130.30/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         15:79:9c:16:e4:0e:73:12:39:e5:88:d1:a9:00:92:87:3d:1a:
         1f:07:c0:de:01:3d:9e:ac:c7:f8:5d:b4:13:23:2b:95:95:6f:
         da:7d:58:fe:b5:8f:ba:8c:09:48:3b:b4:6b:a8:73:d4:54:6e:
         fc:89:55:91:ac:d2:e0:a7:7e:b0:bc:fc:3d:34:3a:da:8e:96:
         29:01:78:20:c8:1d:d6:bf:3b:ae:09:60:48:6e:0f:01:64:f7:
         67:e1:ff:6a:8b:4e:90:d5:b2:ce:72:96:52:c8:63:7a:65:d7:
         a3:04:00:52:1b:bb:19:ff:f1:7e:29:4b:b2:38:1c:47:14:ad:
         91:3f:0e:22:1f:4a:c8:9a:62:60:02:14:f3:9b:67:9d:b1:77:
         e1:ed:2b:4b:c1:70:83:7d:19:50:5a:da:3a:3a:c3:66:27:ad:
         6a:a1:44:3d:d6:57:fd:4d:f1:a7:e7:f1:f3:76:c0:ac:35:5a:
         a2:d5:78:bf:51:5a:40:7d:c2:17:47:7d:5d:e5:16:96:9d:5d:
         bf:e6:bd:9b:bb:2e:48:31:3c:5a:fe:a6:bf:b3:f2:1b:08:a2:
         15:c4:86:f8:78:81:8a:37:69:92:ab:3f:10:93:04:23:98:95:
         88:8c:42:61:37:82:f4:7d:74:44:23:3e:57:51:89:3c:22:c4:
         52:d8:38:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 25 06:05:18 2026 by rpki-client