Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/9f9f977e-85fd-35ab-9bf6-be8f82f749a6.roa
File:                     9f9f977e-85fd-35ab-9bf6-be8f82f749a6.roa (raw, json)
Hash identifier:          EP0Ddht3smaEGbSsWOPe+SYHVWaas02KudxjquxbvZ8=
Subject key identifier:   76:C8:1F:D0:95:73:6A:55:54:6A:CE:B6:14:75:A4:F6:CD:23:BB:F1
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584F4989A7FF3CF9BAF3E8403538
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/9f9f977e-85fd-35ab-9bf6-be8f82f749a6.roa
Signing time:             Fri 25 Sep 2026 01:00:12 +0000
ROA not before:           Fri 25 Sep 2026 01:00:12 +0000
ROA not after:            Thu 24 Dec 2026 02:00:12 +0000
asID:                     397193
IP address blocks:        192.43.172.30/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 28 Sep 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:49:89:a7:ff:3c:f9:ba:f3:e8:40:35:38
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Sep 25 01:00:12 2026 GMT
            Not After : Dec 24 02:00:12 2026 GMT
        Subject: CN=0bcd9a95-7cc4-45cc-be20-8cb03f64429e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8a:cd:e0:a3:44:ed:57:f6:b2:9b:77:6c:96:7d:
                    7d:1c:71:37:6b:60:eb:34:e1:68:f9:93:ad:be:de:
                    55:15:7b:56:28:23:83:69:2e:56:cb:6f:04:dd:6f:
                    7a:67:da:73:00:93:eb:c6:49:25:5d:75:02:3d:c5:
                    77:da:69:55:d5:8b:8f:bd:e2:bc:e6:e1:b1:cd:ea:
                    3e:a7:ec:74:32:7e:5f:72:da:67:d0:5e:ec:e7:3d:
                    bb:fd:eb:81:be:ab:c7:95:85:69:fb:dc:86:01:fb:
                    f0:9e:17:4c:25:dc:44:6e:6d:a7:f2:8e:6b:f4:d7:
                    22:7c:98:0d:7d:d2:83:a5:b3:3d:d5:11:85:ed:1a:
                    fe:95:7f:2b:0b:fd:54:e6:1c:7c:96:52:15:d5:1a:
                    1e:0b:5e:63:96:28:93:b3:78:8c:9c:7e:51:4a:91:
                    5c:92:d6:e1:09:bd:4c:55:04:89:af:04:92:46:31:
                    17:7e:f1:30:0b:f5:70:e1:97:cc:cf:b5:e4:05:46:
                    ab:6d:8c:ac:9c:4a:26:bb:14:7f:53:bb:94:80:03:
                    39:ab:1b:cb:5e:1f:89:25:1b:1f:0f:47:35:ae:02:
                    94:37:0f:44:ed:51:75:38:89:bc:5e:a9:de:48:91:
                    08:21:fe:8c:78:d1:1f:81:c9:8b:3f:8a:6d:94:3c:
                    94:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                76:C8:1F:D0:95:73:6A:55:54:6A:CE:B6:14:75:A4:F6:CD:23:BB:F1
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/9f9f977e-85fd-35ab-9bf6-be8f82f749a6.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.43.172.30/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0d:c7:a2:14:eb:eb:18:35:73:f5:ca:c9:79:f8:ca:06:8d:19:
         9b:f0:1c:fc:b5:3e:8d:d0:b0:2a:e0:f7:52:a4:c3:72:ba:05:
         4e:2d:bc:91:c2:5a:e5:9d:45:99:10:dd:df:42:5c:c8:f5:de:
         a5:33:46:cb:2b:ce:74:1f:74:69:d6:ae:e1:f4:b1:f1:14:d0:
         ed:0a:d1:36:c9:5b:1a:c0:3a:0e:a2:ed:ae:63:b3:34:ca:8c:
         6c:80:a6:90:99:22:2c:3f:b3:8c:d2:13:a4:9b:03:33:9d:f2:
         b6:a2:08:9b:1a:ac:d3:93:e3:12:f9:91:36:b8:22:2c:e3:62:
         71:eb:ff:64:92:26:7a:e4:bb:9d:26:15:9f:6e:23:48:af:17:
         70:5f:ed:33:7b:bb:04:22:fc:9f:00:57:13:68:98:33:23:92:
         8e:d1:15:56:a0:b1:a5:e1:cd:57:1c:6a:a0:a8:ab:89:b1:56:
         60:76:ff:52:7e:67:cf:34:4f:19:be:9a:31:2d:95:c4:17:f6:
         25:37:7d:16:f8:46:2d:b4:49:02:43:b7:46:40:c7:b4:ae:55:
         14:58:4d:20:89:1e:5f:86:d4:3e:a0:2a:55:5a:ad:8f:3e:9f:
         40:4c:27:47:59:a3:d6:21:50:39:da:39:d7:ce:21:51:db:7f:
         b6:29:1f:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 25 21:59:47 2026 by rpki-client