Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/bf456b06-05e3-3d5e-85bd-8162d44741e7.roa
File:                     bf456b06-05e3-3d5e-85bd-8162d44741e7.roa (raw, json)
Hash identifier:          rgI5vqQoUNn7wmlr03kzLxtc50nzDeP9USh6UKWgdog=
Subject key identifier:   99:90:07:60:6A:BE:41:3E:97:B2:58:48:42:4A:00:1E:E6:CF:B1:52
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584F067288A9EADC02CBD2EA9680
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/bf456b06-05e3-3d5e-85bd-8162d44741e7.roa
Signing time:             Tue 01 Sep 2026 01:00:12 +0000
ROA not before:           Tue 01 Sep 2026 01:00:12 +0000
ROA not after:            Mon 30 Nov 2026 02:00:12 +0000
asID:                     396588
IP address blocks:        192.82.133.30/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 26 Sep 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:06:72:88:a9:ea:dc:02:cb:d2:ea:96:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Sep  1 01:00:12 2026 GMT
            Not After : Nov 30 02:00:12 2026 GMT
        Subject: CN=3728e2e7-faf1-4570-9713-a5e58d22a7ef
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:0b:9f:80:50:ae:35:62:89:c1:1c:27:98:6e:
                    61:f1:c8:dd:63:b2:9b:35:09:54:a1:30:ed:0e:9c:
                    bf:ed:79:9d:74:c3:6c:45:09:da:8a:72:c2:c6:06:
                    44:3b:6c:f1:8f:00:7d:6c:72:f7:d1:e4:34:5c:05:
                    33:0d:b1:80:07:92:a5:16:d3:5a:5c:b1:c6:01:fe:
                    d7:14:b7:b2:fe:de:90:79:ec:dd:c1:36:26:f9:aa:
                    84:e0:36:e1:59:c5:d2:68:ad:0b:70:dd:f4:d4:b5:
                    a0:58:ed:4e:54:03:73:04:ea:e7:9b:bd:cd:95:15:
                    b6:eb:7a:9a:b6:f1:ff:66:81:04:71:0b:c1:22:9c:
                    5c:03:15:75:59:8a:28:09:18:08:c4:a3:5d:30:5d:
                    83:6a:c6:ef:57:67:6d:b9:1b:9a:d3:0e:27:4d:52:
                    c1:21:30:8b:e4:a0:9a:1c:30:98:7a:9a:4c:dd:5d:
                    61:2f:ac:65:b9:5f:63:b6:a2:ff:99:41:af:ea:75:
                    38:a9:61:7f:42:8b:92:f5:e3:1a:f7:a6:c9:c9:21:
                    76:c0:bc:94:d0:fd:be:23:c8:46:e0:24:f7:f7:72:
                    f5:8f:2a:de:5d:4e:53:7d:ee:a0:bc:47:87:a1:48:
                    0c:4b:9d:47:17:bf:98:19:d2:7f:98:8f:bd:89:72:
                    79:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                99:90:07:60:6A:BE:41:3E:97:B2:58:48:42:4A:00:1E:E6:CF:B1:52
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/bf456b06-05e3-3d5e-85bd-8162d44741e7.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.82.133.30/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         02:d0:54:12:7f:b8:20:31:ec:be:08:6a:b6:33:68:36:68:5b:
         7c:b6:c5:90:ab:ee:1b:03:e6:b9:e6:9c:46:89:ec:c6:60:6a:
         fa:7d:96:21:96:e0:7f:4c:8d:97:64:c0:bf:3e:0c:e1:ee:8a:
         fd:f8:aa:73:4b:8a:5a:5b:8c:25:ed:01:4e:8f:c7:5c:fd:8b:
         b8:4a:ed:fe:cb:91:e0:73:41:ed:55:2c:65:8f:c7:e2:5e:38:
         8d:92:0e:62:e8:b7:33:66:d1:31:0a:f9:eb:a1:c7:cc:a8:00:
         32:1d:ca:70:fa:ee:5b:a7:d9:5b:a6:e5:33:c1:89:6e:6e:c6:
         84:3c:97:e3:33:94:46:8c:37:69:0a:21:b7:b9:4d:84:b9:8d:
         fb:09:1d:94:3d:38:0c:3d:fb:1c:e0:1e:e3:39:09:4f:b1:fc:
         46:26:db:1d:63:12:03:b1:bb:30:5b:e3:be:24:d6:c6:ae:22:
         d6:8e:16:71:05:e5:e2:2c:83:31:71:05:44:d1:ea:b0:c9:12:
         cc:a5:26:9d:ff:b1:c4:6a:de:bc:87:d8:98:7d:0a:88:94:eb:
         46:63:00:bc:2d:dd:a7:3b:58:29:13:39:8b:0b:60:78:fe:ee:
         8f:7f:93:84:2b:c5:42:50:03:ca:a0:c4:4d:98:25:8b:2e:71:
         01:d1:ff:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 25 02:28:47 2026 by rpki-client