Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/cd5a78d7-d158-356c-aade-5ab6859c6dd9.roa
File:                     cd5a78d7-d158-356c-aade-5ab6859c6dd9.roa (raw, json)
Hash identifier:          fFei81jj999NQx9KZQc8qZhMM/Rj1doGqKl20dA0Jg8=
Subject key identifier:   91:A7:72:B2:61:2E:F9:9B:8C:0F:CE:EA:2C:F1:43:97:9E:46:AD:00
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584E640FABBA68F5400942A5A380
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/cd5a78d7-d158-356c-aade-5ab6859c6dd9.roa
Signing time:             Sat 04 Jul 2026 21:00:12 +0000
ROA not before:           Sat 04 Jul 2026 21:00:12 +0000
ROA not after:            Fri 02 Oct 2026 21:00:12 +0000
asID:                     396551
IP address blocks:        192.82.134.30/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 26 Jul 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:64:0f:ab:ba:68:f5:40:09:42:a5:a3:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Jul  4 21:00:12 2026 GMT
            Not After : Oct  2 21:00:12 2026 GMT
        Subject: CN=5d942ef1-b358-4f39-892e-2bd0c7bf3dce
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:84:e1:c7:9f:f0:9e:19:5f:d9:33:24:9b:a4:45:
                    99:88:b8:6c:f8:9c:e2:88:9e:60:ba:16:f3:c2:db:
                    1c:db:c4:63:5a:ea:c5:b2:1a:cc:ae:fa:2a:e7:a1:
                    81:25:b3:be:5f:80:fa:63:e4:28:9f:01:89:a3:61:
                    78:e4:92:c2:d4:5d:50:a8:12:eb:a2:15:98:ce:b6:
                    7f:52:9e:db:11:f1:4f:79:10:8d:d7:71:de:57:3c:
                    33:5b:87:62:2a:f0:b3:55:a2:b6:af:ca:6b:e6:96:
                    52:8b:96:31:7b:76:6d:5e:be:24:16:a2:f2:28:a9:
                    b7:5a:62:bf:8f:9c:63:ab:2c:07:dc:8d:9d:69:6b:
                    71:06:19:6d:e5:67:43:8e:83:76:78:7f:6b:ee:f5:
                    61:c3:ba:88:5e:58:27:54:f6:69:90:d2:a2:8a:ee:
                    21:49:f5:ff:df:3e:8f:71:61:ca:42:29:32:82:f6:
                    81:2b:0f:bf:a4:65:37:5b:18:20:6b:45:b0:dd:1b:
                    dc:5e:fc:9c:dc:4a:ef:68:0c:41:00:ee:97:63:c7:
                    f1:39:5b:b3:9f:9f:39:ec:cd:db:26:39:29:c7:7d:
                    cd:23:5c:b3:e8:1c:f6:4d:1b:bb:ba:0f:84:27:b5:
                    8b:be:8b:27:c5:80:84:2d:4c:7d:1e:3a:6f:98:7d:
                    12:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                91:A7:72:B2:61:2E:F9:9B:8C:0F:CE:EA:2C:F1:43:97:9E:46:AD:00
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/cd5a78d7-d158-356c-aade-5ab6859c6dd9.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.82.134.30/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         ae:d9:6e:ba:82:cd:67:e4:b8:a8:69:37:27:e2:b4:a6:2f:e5:
         9e:95:f2:44:7d:96:8c:2a:0a:c2:2f:f3:ba:82:ee:7c:39:64:
         37:76:dd:6e:8a:b0:9e:c4:80:08:47:06:73:a6:99:c1:9c:15:
         1a:b3:f0:f8:6d:d7:16:cc:ce:74:9b:f8:8f:8e:4b:58:e0:46:
         49:21:b2:8f:4b:02:83:43:fb:9f:18:6c:9a:7a:d7:86:a0:0e:
         0c:88:5d:67:27:69:b3:b7:7b:9e:57:c1:b3:4d:90:d1:19:46:
         d3:86:2b:9f:d2:13:a8:67:6a:a0:5b:8b:0c:0f:c1:42:27:dd:
         f4:d3:f3:dd:df:ff:66:1b:e7:f8:ea:4d:ea:8d:db:18:d7:54:
         1b:d2:0b:fd:5a:ec:76:a6:1f:a3:f5:21:29:71:75:9f:83:da:
         4e:72:ea:d3:79:ca:08:74:c3:d4:23:d0:64:bc:1e:7a:2f:7c:
         52:60:bb:c5:1b:c5:ef:54:45:b6:d5:21:c9:0b:eb:0a:9c:ab:
         a1:ee:14:2b:0a:0c:86:5d:0e:a6:ca:80:1a:eb:d2:28:af:10:
         44:a2:6c:83:94:b2:b1:d9:7c:be:ba:a7:9c:46:b3:25:00:c7:
         31:80:eb:24:b1:39:ed:83:b4:c7:80:fa:85:41:e9:9b:e2:f6:
         df:a3:e1:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 12:50:52 2026 by rpki-client