Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/956fc6ba-2657-375e-8e56-0a63f9ec666e.roa
File:                     956fc6ba-2657-375e-8e56-0a63f9ec666e.roa (raw, json)
Hash identifier:          D42VybT6FIjekwjjYWGIwkcetirjUYXxcA208jv2i30=
Subject key identifier:   BB:C4:53:A7:B0:4F:00:1E:D4:49:6E:F7:4C:28:AF:00:82:CF:BB:5F
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584F4974BEDA4B991306EAE64600
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/956fc6ba-2657-375e-8e56-0a63f9ec666e.roa
Signing time:             Fri 25 Sep 2026 01:00:12 +0000
ROA not before:           Fri 25 Sep 2026 01:00:12 +0000
ROA not after:            Thu 24 Dec 2026 02:00:12 +0000
asID:                     32651
IP address blocks:        192.12.94.30/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 30 Sep 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:49:74:be:da:4b:99:13:06:ea:e6:46:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Sep 25 01:00:12 2026 GMT
            Not After : Dec 24 02:00:12 2026 GMT
        Subject: CN=93b4e0e8-532c-4d64-b19e-72fc1f1693ba
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:a9:7a:da:74:f3:2d:b9:0c:b7:a4:f4:3b:87:
                    7f:df:50:a5:a0:83:52:0e:6f:bf:cd:d3:9c:ed:91:
                    2f:67:1b:d5:1b:c3:63:31:81:79:c5:f5:37:7f:9b:
                    38:4c:24:4f:a9:b9:e1:84:5a:ac:3b:4b:6c:82:d6:
                    f4:60:9f:2b:a6:51:bd:4c:46:a8:b7:1d:96:da:61:
                    14:a9:21:77:87:84:fb:7f:e9:31:b5:25:49:92:7c:
                    4c:bc:24:77:a0:55:a4:21:c0:e8:72:37:54:a6:4b:
                    bd:7b:bf:0f:fd:0e:51:b2:65:d2:29:44:9f:7c:6d:
                    e2:04:6a:c3:fb:9b:76:bc:1a:df:3b:f9:92:03:2a:
                    a7:e9:5f:8a:e1:80:16:46:06:73:e4:bc:69:47:b9:
                    da:33:4c:cf:c3:f2:cb:ff:50:39:cd:d0:fc:e7:c8:
                    61:66:3d:d3:3e:fb:b9:16:b4:e1:1b:49:6e:b5:af:
                    41:77:ab:0f:de:ee:b6:ed:7e:54:ad:28:0b:26:3c:
                    16:32:46:7d:fd:16:fe:20:2a:e9:8c:36:b9:b3:cb:
                    51:15:6c:e2:cb:bb:ec:8d:2b:bc:d0:b0:51:66:72:
                    b8:74:3d:21:ec:06:24:07:88:52:95:ec:03:e9:cf:
                    cb:9c:67:3e:ad:b2:3c:2b:b1:46:97:81:d3:13:c3:
                    45:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BB:C4:53:A7:B0:4F:00:1E:D4:49:6E:F7:4C:28:AF:00:82:CF:BB:5F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/956fc6ba-2657-375e-8e56-0a63f9ec666e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.12.94.30/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         9c:f3:90:55:64:a1:79:7e:4d:77:d4:34:10:42:e4:0d:b0:12:
         4f:44:6c:5e:63:85:97:17:a8:3f:fe:ba:fa:b6:37:a8:b7:f8:
         34:ba:8c:d7:78:f7:8d:6c:dc:17:34:d2:47:1c:67:30:b6:6d:
         5d:a7:b6:65:63:86:20:e8:71:0e:53:b0:1f:e0:82:47:9b:03:
         4e:13:ab:eb:2c:7b:7f:f2:f0:25:3b:e8:51:c1:81:63:df:a3:
         4c:1f:d0:5a:e3:ef:34:54:82:84:76:d6:77:8e:64:3e:68:a1:
         3e:b4:9e:44:7b:3f:e6:a5:c6:16:1f:13:01:b0:0f:3c:e0:68:
         82:c8:df:75:06:a5:02:49:9e:0d:d1:b9:7f:c1:ad:a7:65:e4:
         c1:aa:fa:d3:e3:20:93:60:26:19:ac:b2:24:8a:56:68:da:17:
         80:45:c8:12:1c:38:68:ca:1c:ec:53:36:1c:f0:38:90:e7:58:
         99:7b:61:86:88:25:67:f4:61:e1:15:ff:f0:d6:4c:5b:61:a5:
         c0:aa:58:6e:1c:19:68:b0:61:c6:8d:5c:78:ee:12:3b:1c:97:
         98:28:bb:1a:5e:0b:13:07:9c:c2:e1:88:d5:0a:6a:f8:58:a7:
         12:9f:6c:48:3b:c2:29:8d:21:2e:7a:88:45:15:43:06:4e:70:
         4a:00:60:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 29 15:56:21 2026 by rpki-client