Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/abdb0678-3b93-3e3a-a94a-0c0e0e75a090.roa
File:                     abdb0678-3b93-3e3a-a94a-0c0e0e75a090.roa (raw, json)
Hash identifier:          oB0UaPMCcdeto80Zu8DUT0LyCdp4X7fRPcpc6pTPmJg=
Subject key identifier:   0A:FE:4B:7E:B1:0A:C7:F0:9A:7D:71:60:B8:D0:59:DB:CB:06:CE:B9
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584F067293EA1AB2CF4E9842D200
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/abdb0678-3b93-3e3a-a94a-0c0e0e75a090.roa
Signing time:             Tue 01 Sep 2026 01:00:12 +0000
ROA not before:           Tue 01 Sep 2026 01:00:12 +0000
ROA not after:            Mon 30 Nov 2026 02:00:12 +0000
asID:                     396604
IP address blocks:        192.82.133.30/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 28 Sep 2026 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:06:72:93:ea:1a:b2:cf:4e:98:42:d2:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Sep  1 01:00:12 2026 GMT
            Not After : Nov 30 02:00:12 2026 GMT
        Subject: CN=9e7bac57-5a33-408d-8b61-37ad3f36fbde
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:73:da:c7:0f:6b:ad:3a:15:da:4f:b0:7b:6f:
                    fd:fb:a8:45:61:63:b2:34:2b:de:c7:18:16:48:05:
                    90:96:0e:4a:5b:91:e1:24:84:c3:45:18:2c:dc:4f:
                    7a:bd:66:91:99:33:8b:83:c6:21:e6:ad:13:c9:67:
                    44:28:8a:4b:09:65:a5:34:fa:1a:36:ef:c6:4c:9c:
                    f0:50:d9:07:0e:8e:ea:59:60:d6:d5:67:e5:bc:5a:
                    6d:5b:10:d3:2c:68:23:9d:01:05:4f:8b:df:78:eb:
                    27:23:56:fb:20:ca:bb:5c:e2:f3:1e:c9:1a:1f:f9:
                    11:8a:3a:52:a4:98:ad:9a:34:73:2a:ec:e5:8e:56:
                    2e:7f:0a:19:aa:0f:a4:ae:0f:fb:c9:c3:fb:71:19:
                    54:c0:c9:e1:38:26:5f:fa:ae:c9:f6:6d:95:df:b8:
                    9b:4f:cd:1f:5f:49:c6:5d:c4:cd:58:8b:84:32:16:
                    9d:8f:b0:de:5e:f0:ad:89:8c:d5:f7:2b:30:07:cc:
                    f5:96:dc:90:cb:af:b3:1d:86:ac:ee:81:2b:99:5a:
                    6d:76:ac:3f:6a:fb:3d:ae:dd:a6:7f:d4:ad:df:c4:
                    b9:87:29:a8:62:9d:2f:7c:e3:4a:20:5f:73:a2:39:
                    a5:7a:0d:d7:84:ea:33:1a:b3:e7:a6:1d:c6:d7:ca:
                    e1:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0A:FE:4B:7E:B1:0A:C7:F0:9A:7D:71:60:B8:D0:59:DB:CB:06:CE:B9
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/abdb0678-3b93-3e3a-a94a-0c0e0e75a090.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.82.133.30/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         47:e2:82:1a:48:b9:2e:86:cb:48:1a:6e:db:dd:51:26:fe:66:
         bd:60:fe:ae:3c:a4:ee:1f:5d:82:be:6a:47:4a:30:61:19:97:
         26:7b:32:33:63:0b:a9:4b:3b:24:95:f4:fc:5d:2a:a5:5d:80:
         cc:c3:b0:da:5f:cd:67:9c:ff:2a:4f:cc:f8:88:8a:c6:ab:ce:
         d6:cb:48:a2:95:de:5a:95:32:97:33:ba:2a:17:64:34:af:89:
         38:01:b3:de:a1:0f:6c:66:42:96:c9:8b:09:87:73:0a:ab:a7:
         ed:b5:7b:46:7c:3b:fe:f9:61:86:5b:23:58:63:a4:da:f4:0a:
         4a:1e:3f:9a:b8:6b:cb:bf:d7:c4:8c:17:f8:de:d2:0b:fb:c9:
         04:c7:2e:61:e4:fb:1d:ed:06:eb:3c:a4:b3:58:2f:de:1d:44:
         c7:46:45:0d:4e:53:e5:3a:de:b9:45:e7:66:e4:f1:ab:dd:1d:
         9e:29:8c:f8:a4:ae:d3:2b:85:f9:a4:22:bd:14:01:d4:0e:a0:
         2d:1d:dd:75:96:cf:9e:0f:8f:45:06:38:11:f6:0b:0c:be:1e:
         10:d0:19:af:80:2e:2d:44:a5:08:e6:86:95:89:e4:94:e1:fb:
         29:c4:4e:d8:5d:97:70:b7:f6:e2:7c:9b:02:0d:56:a0:a9:c8:
         64:0b:34:50
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 27 08:39:03 2026 by rpki-client