Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/9ae5c8a9-b23c-3986-bd41-1e783e99dc56.roa
File:                     9ae5c8a9-b23c-3986-bd41-1e783e99dc56.roa (raw, json)
Hash identifier:          06b5rqM8AWmrnB59MGXzdz4pPdzDBIO+86JezW6rh98=
Subject key identifier:   BC:A3:05:73:C0:88:E0:2B:00:93:7C:78:3B:4C:F2:A9:7A:62:86:1F
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584F11A131C7ED07F954EA20AAF0
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/9ae5c8a9-b23c-3986-bd41-1e783e99dc56.roa
Signing time:             Sat 05 Sep 2026 01:00:12 +0000
ROA not before:           Sat 05 Sep 2026 01:00:12 +0000
ROA not after:            Fri 04 Dec 2026 02:00:12 +0000
asID:                     396599
IP address blocks:        192.30.45.30/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 26 Sep 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:11:a1:31:c7:ed:07:f9:54:ea:20:aa:f0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Sep  5 01:00:12 2026 GMT
            Not After : Dec  4 02:00:12 2026 GMT
        Subject: CN=fb3942b2-fe46-40dd-b429-67a049ba410c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:34:f0:71:62:fc:ed:e9:32:9c:d7:0b:0b:1a:
                    55:e7:00:95:68:5f:04:63:db:42:ba:89:0f:f0:80:
                    be:87:6b:f4:46:ec:7a:f3:dc:9a:ab:4b:6a:c5:0a:
                    be:c2:bf:12:cc:92:a3:55:c1:81:b9:3b:70:dd:ac:
                    74:76:e0:9e:76:bf:a2:b2:9f:25:f5:c3:48:e9:ba:
                    2b:0f:55:1b:5c:f5:4a:6b:87:41:33:60:04:dd:7d:
                    47:f8:d1:5e:2c:77:f7:98:2b:9b:1c:11:1b:32:0b:
                    c5:7d:5f:9f:1d:3d:41:17:a0:ec:fc:d3:eb:5b:0f:
                    bd:e8:fe:1c:91:09:66:0f:47:87:5f:a0:5a:28:98:
                    6a:96:17:b0:03:ff:4f:20:b9:89:78:1e:73:3d:f3:
                    ba:5d:a5:10:dd:25:07:69:2b:7a:8f:f4:ef:b4:10:
                    b8:6f:3f:20:27:6c:5d:c3:22:b0:39:c8:71:7d:33:
                    e7:84:6f:de:d4:42:c7:b2:6c:9d:3b:d5:4a:98:6e:
                    d1:b5:e1:2d:e4:f7:4d:36:0a:05:eb:cf:9c:fc:a4:
                    12:ab:fc:7c:40:d5:5f:63:34:8d:ec:75:21:3d:aa:
                    95:dc:e8:57:81:93:0a:33:06:11:c4:98:0d:fd:40:
                    69:9a:d7:f9:c0:37:e8:f3:77:18:4f:f7:a9:2f:b7:
                    34:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BC:A3:05:73:C0:88:E0:2B:00:93:7C:78:3B:4C:F2:A9:7A:62:86:1F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/9ae5c8a9-b23c-3986-bd41-1e783e99dc56.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.30.45.30/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         73:99:d7:26:7e:f8:4b:ac:d4:60:29:8b:2a:7a:cd:d7:30:11:
         a1:75:8e:9f:33:ea:d8:94:be:f6:2c:c2:36:41:5a:5a:a9:8c:
         45:91:ab:f5:8d:3e:e6:f1:85:e1:73:36:61:f6:44:f0:bd:34:
         2c:08:4e:e5:cd:4b:a2:86:42:51:90:11:44:d5:ce:f9:82:ed:
         e5:49:5f:39:b7:94:8f:63:8e:56:52:5d:01:14:04:cb:0a:77:
         74:20:f7:4e:62:35:87:01:e7:75:87:80:1d:76:53:b0:85:6f:
         cf:59:64:da:ec:15:5f:bc:82:92:f7:09:7d:b8:31:6c:4b:c9:
         02:97:81:df:07:32:20:e7:23:f4:8a:f2:f8:c7:bb:99:b3:74:
         9a:a6:e7:63:1c:7d:e2:75:df:68:b8:b1:6d:75:5f:e1:95:97:
         26:e1:9c:9f:36:2d:25:e5:67:77:fc:c6:0a:b2:00:0f:6d:19:
         35:26:82:b1:ef:50:be:a3:87:02:b5:59:6d:a1:c3:00:62:9f:
         93:93:81:81:90:af:b9:62:1d:3e:02:e1:bf:8b:1a:33:ef:bd:
         a1:98:e1:44:2a:cd:a6:c2:be:be:b2:f6:36:9c:8e:d4:b1:0d:
         80:16:30:1d:9e:7f:29:23:7f:13:47:05:36:98:21:37:a4:fb:
         aa:d4:64:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 11:53:37 2026 by rpki-client