Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/b46661b7-7fd4-3c78-9058-5c71ab9f9ad8.roa
File:                     b46661b7-7fd4-3c78-9058-5c71ab9f9ad8.roa (raw, json)
Hash identifier:          0BFLDa/Df3wjcJxagVERiTX1E5GkRg9Uxa4ROBWaBY0=
Subject key identifier:   5D:AC:E5:BA:C5:D5:33:30:B0:09:42:01:21:6A:97:BE:56:5D:B3:24
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584EF1821CD8717A6FEE90770AC0
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/b46661b7-7fd4-3c78-9058-5c71ab9f9ad8.roa
Signing time:             Mon 24 Aug 2026 13:00:12 +0000
ROA not before:           Mon 24 Aug 2026 13:00:12 +0000
ROA not after:            Sun 22 Nov 2026 14:00:12 +0000
asID:                     397212
IP address blocks:        199.7.71.30/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 08 Oct 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:f1:82:1c:d8:71:7a:6f:ee:90:77:0a:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Aug 24 13:00:12 2026 GMT
            Not After : Nov 22 14:00:12 2026 GMT
        Subject: CN=0eb40c84-2fd1-4c71-9b81-430f82e9687f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:a0:0d:41:e8:e8:0c:4b:8f:d5:38:5c:77:02:
                    04:82:4a:85:4b:f1:77:a5:c7:ef:1e:81:f8:33:9a:
                    2d:ed:53:0e:05:c7:22:a6:46:d3:86:53:d7:9c:4f:
                    bf:28:26:05:9e:b8:64:0b:5a:a5:b5:68:0b:0a:57:
                    38:60:06:73:dd:83:46:f8:40:78:c5:1c:ce:60:60:
                    79:23:e1:1b:a3:2f:75:8f:01:fb:73:ca:61:c7:a0:
                    31:53:ef:6e:52:21:dd:9b:33:95:dd:79:73:50:14:
                    a2:7d:3f:92:c6:51:79:ca:a1:63:7d:9d:9b:1c:aa:
                    ff:34:5b:5a:7e:89:d0:e7:a1:73:55:29:d2:dd:8d:
                    9b:40:0e:86:05:27:79:7e:3b:84:8f:b3:b8:76:ca:
                    c5:da:3b:8c:f6:fd:fe:f1:0a:81:0c:eb:e5:7b:7f:
                    c5:a2:78:ca:f2:b2:b2:15:1f:b9:00:f7:4d:64:98:
                    25:3b:21:9b:fe:6b:1e:95:e1:e9:58:ba:9d:65:96:
                    7a:b7:22:93:49:82:ff:53:04:dc:b9:d3:36:d1:20:
                    86:34:0e:8f:1f:1b:5b:e0:e7:17:52:db:07:87:d7:
                    af:ed:99:e1:63:72:32:82:13:27:da:00:73:13:bb:
                    7d:b6:ef:f7:9d:71:49:78:3a:28:6b:45:22:d3:ad:
                    34:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5D:AC:E5:BA:C5:D5:33:30:B0:09:42:01:21:6A:97:BE:56:5D:B3:24
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/b46661b7-7fd4-3c78-9058-5c71ab9f9ad8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.7.71.30/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         46:53:dc:4c:c2:cb:2d:63:f2:fb:e1:c1:41:57:bf:07:6b:d0:
         26:da:0e:ab:e2:d1:19:fb:3c:44:a0:f0:d8:c5:a2:08:d2:82:
         86:30:39:c6:9f:ef:55:df:25:fe:be:87:91:f7:f3:ed:2c:02:
         88:78:14:75:a8:e5:4d:49:29:3a:43:37:7b:50:b0:c1:fd:d5:
         8a:73:5a:2c:12:22:d4:57:2b:5f:d6:6f:0d:79:23:35:92:e9:
         09:41:93:ba:5c:2b:4b:fe:7f:99:96:c2:8e:b8:69:4f:6c:6b:
         05:bd:d8:ae:7c:3a:38:04:a0:1a:3d:5c:e2:49:aa:15:8e:c3:
         06:dc:98:b1:27:53:d4:24:03:6a:77:65:ff:a4:d2:47:77:0d:
         c5:68:5b:66:ea:9c:ac:c5:2f:82:50:69:3a:a5:83:50:14:42:
         d9:11:82:db:ac:1f:b0:83:2d:a9:77:5e:54:4e:c6:5e:33:25:
         cc:4c:11:1a:f8:61:88:d4:91:cf:bf:5f:45:7f:2f:a6:22:79:
         d3:5a:3d:65:3c:ab:b9:24:61:57:df:42:f7:7c:8c:05:ab:f6:
         3b:ae:02:de:31:a3:7c:ce:41:7f:28:ef:60:c4:e3:1f:54:ca:
         1a:3a:d6:a8:c9:cb:d7:60:38:56:2f:d0:df:95:e7:17:12:94:
         c6:8e:f3:18
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 6 20:26:49 2026 by rpki-client