Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/9abff1eb-446a-3264-b131-1b096dfefeb7.roa
File:                     9abff1eb-446a-3264-b131-1b096dfefeb7.roa (raw, json)
Hash identifier:          OUXWxQH+nmHYo2AsWZB5pF5vKfIfgzOJ3oI0/rXnLz8=
Subject key identifier:   D9:D1:6E:D9:96:B2:C7:B3:9D:EB:E5:FE:62:73:D6:90:C1:DA:EF:3B
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584F4989BFAC84B14FDBA6EA0100
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/9abff1eb-446a-3264-b131-1b096dfefeb7.roa
Signing time:             Fri 25 Sep 2026 01:00:12 +0000
ROA not before:           Fri 25 Sep 2026 01:00:12 +0000
ROA not after:            Thu 24 Dec 2026 02:00:12 +0000
asID:                     396600
IP address blocks:        192.43.172.30/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 26 Sep 2026 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:49:89:bf:ac:84:b1:4f:db:a6:ea:01:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Sep 25 01:00:12 2026 GMT
            Not After : Dec 24 02:00:12 2026 GMT
        Subject: CN=bb6e0bbb-f24c-4a55-9a49-557a3f3d1a03
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dd:f1:8d:b5:30:fb:8c:47:e2:d3:c9:2f:cf:be:
                    dc:2f:53:11:13:9b:fd:e4:8a:c5:e5:f5:5b:bd:80:
                    85:c6:68:85:1c:e7:19:36:5c:2d:c5:7b:29:4f:24:
                    83:a2:99:c2:ca:2c:98:03:f8:c5:ff:2e:dd:82:d3:
                    40:2e:57:bb:68:20:6c:f6:e9:a9:23:31:2a:a0:0e:
                    55:6f:0f:81:06:61:f1:a9:2d:d2:19:02:08:56:03:
                    81:d9:5f:61:99:89:9a:50:66:59:81:d8:db:95:3b:
                    1a:9f:b4:b4:88:75:6b:41:2e:de:7c:ab:b1:a3:94:
                    1d:21:43:32:f4:1d:bf:f9:ac:92:5c:7d:76:3d:32:
                    61:97:4d:f4:86:09:57:dc:b0:3e:e3:7e:a4:fa:70:
                    8d:2e:b6:93:9c:c5:75:d6:6d:2a:9a:06:f9:40:d6:
                    fd:f4:b1:d4:83:52:e8:f8:92:2c:4b:ad:2c:1e:d0:
                    08:e1:c2:e0:0c:9b:9a:1b:d1:38:43:97:bb:f5:9e:
                    9d:83:d7:12:23:7d:5e:96:08:3c:c9:4a:2b:dc:f4:
                    34:79:ed:3f:17:a7:c4:2d:5d:e2:2d:16:05:39:4a:
                    22:47:87:37:25:60:ed:e2:aa:af:63:9c:ee:4c:b7:
                    e1:d6:85:4b:8c:84:0b:c8:6a:7f:0e:87:dc:09:c3:
                    b2:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D9:D1:6E:D9:96:B2:C7:B3:9D:EB:E5:FE:62:73:D6:90:C1:DA:EF:3B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/9abff1eb-446a-3264-b131-1b096dfefeb7.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.43.172.30/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5e:32:66:df:da:c3:45:cc:9e:d9:ed:0b:0d:fc:d7:31:96:ba:
         21:99:d5:a3:ce:8f:ed:a5:be:20:d8:5f:32:3c:f8:0a:44:1d:
         f8:13:35:e0:79:2b:d2:a6:cc:df:13:7c:bb:94:80:1c:2c:db:
         87:e7:60:19:47:21:bc:93:bd:ce:a5:aa:d7:f8:ab:aa:0e:5a:
         47:9a:5c:80:e1:80:d5:e3:ff:1a:fa:b2:3a:6e:9b:21:b4:6b:
         66:0d:0e:0a:ac:f7:bd:50:74:e7:7c:13:89:c9:ca:1f:39:60:
         e8:f0:dc:7f:b3:79:0d:32:bf:d4:ba:49:39:34:72:82:41:ee:
         3b:c1:f0:00:43:8d:a8:f4:67:bf:f2:70:5c:89:22:bb:95:45:
         fd:de:8b:39:8c:e9:96:ac:8f:5d:dd:17:15:18:d9:fb:e4:8f:
         2d:d0:74:e8:6f:53:f6:8c:d1:51:93:f4:9a:ce:6b:5b:9e:57:
         2e:24:a6:31:7b:01:d6:07:05:27:eb:48:ae:5a:b3:a7:46:27:
         6d:b9:da:4c:a9:23:2e:76:44:7a:93:cc:1e:36:26:7d:95:16:
         4d:cd:34:b9:04:51:64:96:97:e3:66:5f:1d:41:17:f9:a8:3e:
         a6:54:44:38:6f:29:d7:2e:dd:30:84:c4:8c:26:a6:b2:fb:e6:
         16:86:33:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 25 09:09:51 2026 by rpki-client