Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/cbb0290b-43d1-3686-a5f4-28bc0a839e0b.roa
File:                     cbb0290b-43d1-3686-a5f4-28bc0a839e0b.roa (raw, json)
Hash identifier:          qTojfkPvoJ3228LuO6NdXDXNGa5yttgC4c+DuGQu1RA=
Subject key identifier:   2F:1C:AD:35:61:96:78:3B:9F:BA:BA:98:39:3E:10:13:31:E0:9F:78
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584F497DA06BA34E608D2761EB80
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/cbb0290b-43d1-3686-a5f4-28bc0a839e0b.roa
Signing time:             Fri 25 Sep 2026 01:00:12 +0000
ROA not before:           Fri 25 Sep 2026 01:00:12 +0000
ROA not after:            Thu 24 Dec 2026 02:00:12 +0000
asID:                     396589
IP address blocks:        192.68.126.30/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 26 Sep 2026 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:49:7d:a0:6b:a3:4e:60:8d:27:61:eb:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Sep 25 01:00:12 2026 GMT
            Not After : Dec 24 02:00:12 2026 GMT
        Subject: CN=909ceb96-5253-4167-9cec-6a219357d9a6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:85:03:31:e6:e1:1b:fc:86:4b:1f:b5:7d:67:
                    96:27:74:78:c5:9b:99:26:41:b3:c2:db:27:45:1b:
                    89:ff:e2:df:1a:0f:30:4b:50:0b:b9:f6:53:3e:7a:
                    c6:9e:38:bf:1d:f3:a6:a2:67:b2:e0:76:8c:d0:92:
                    35:25:7a:6f:9c:c2:18:0b:d9:98:2a:28:e3:86:12:
                    89:78:d0:72:f7:82:59:01:fa:38:38:2a:3a:6d:b8:
                    78:a1:67:e1:2b:73:9a:5f:67:df:dd:b4:3c:62:9c:
                    ab:6f:03:6c:29:5c:38:d8:a8:cd:f7:58:17:3f:e8:
                    26:d8:3c:0c:87:64:0f:49:c1:fc:23:18:74:a4:48:
                    20:cd:f1:df:3d:75:cf:a9:0d:4e:28:0d:58:59:83:
                    1b:07:b8:20:ac:66:fd:83:9f:c0:c8:da:0f:ec:08:
                    56:e8:23:bb:77:ef:57:3a:78:53:61:2e:71:c9:2e:
                    c1:6c:81:70:b2:60:19:7b:de:f1:b1:88:41:6c:b5:
                    49:ef:f8:df:8d:e7:77:09:20:c9:91:9b:b1:f2:ba:
                    55:05:8b:79:eb:f2:b8:46:86:28:eb:3a:9b:dd:8c:
                    06:14:68:7f:c1:d9:5a:96:6e:6c:11:b9:32:79:d9:
                    f1:a4:6d:6a:85:c9:4d:b6:ae:52:dd:58:a3:43:95:
                    53:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2F:1C:AD:35:61:96:78:3B:9F:BA:BA:98:39:3E:10:13:31:E0:9F:78
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/cbb0290b-43d1-3686-a5f4-28bc0a839e0b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.68.126.30/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         b5:b5:f1:cf:92:08:87:b7:14:89:ce:9f:92:a7:ac:ee:bb:9b:
         a8:d9:95:86:8d:9a:b3:cb:6d:7c:20:89:be:00:ec:fb:18:f0:
         bb:9e:c7:55:03:4f:89:8f:73:3c:22:10:df:10:82:9b:51:e9:
         37:6a:98:7a:17:bc:1a:2b:69:a1:0e:34:d4:da:0e:6c:7a:92:
         1c:15:ec:27:6c:6e:9a:11:f7:2a:1a:ba:e1:96:de:07:3f:5b:
         d7:04:0e:1e:bd:5f:9a:7e:c0:3b:07:db:46:10:f6:f2:78:56:
         b6:a2:6b:fb:c9:c1:d1:65:b6:e3:b3:e6:1a:b8:33:4c:a0:7f:
         85:31:36:bd:c2:0f:68:88:42:5c:70:e6:bd:84:94:38:17:32:
         cd:dc:e6:e4:a2:8d:49:b6:4b:1e:02:58:08:27:dd:e5:53:2b:
         1a:c8:3f:dd:e9:00:99:1f:60:f0:68:27:49:aa:3b:56:17:c4:
         af:42:39:a1:37:7d:94:4d:fb:f4:f8:d4:38:0b:bd:a9:fb:a1:
         f4:26:d1:e8:bf:d8:ab:22:b8:ea:96:0e:c2:c7:dd:bb:59:e9:
         cf:a1:f5:20:1c:e2:11:94:ba:ec:51:55:42:fe:f2:76:98:1c:
         af:11:7b:19:34:90:af:78:79:c0:a8:61:11:11:17:5f:64:16:
         ce:53:35:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 25 07:19:27 2026 by rpki-client