Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/d95d79d8-27da-3d61-8647-801b2cf6de9a.roa
File:                     d95d79d8-27da-3d61-8647-801b2cf6de9a.roa (raw, json)
Hash identifier:          Aa3ZC3LuoRPeMuPjRHeFzvOjCkvDaIEpfekU7ltBwdQ=
Subject key identifier:   DB:1F:49:33:1A:BD:0D:3B:98:1E:39:CF:0B:E4:D8:A7:28:71:A9:F8
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584F225D1C8F75E3273A08EBD2B8
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/d95d79d8-27da-3d61-8647-801b2cf6de9a.roa
Signing time:             Fri 11 Sep 2026 01:00:12 +0000
ROA not before:           Fri 11 Sep 2026 01:00:12 +0000
ROA not after:            Thu 10 Dec 2026 02:00:12 +0000
asID:                     36630
IP address blocks:        192.42.176.30/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 28 Sep 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:22:5d:1c:8f:75:e3:27:3a:08:eb:d2:b8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Sep 11 01:00:12 2026 GMT
            Not After : Dec 10 02:00:12 2026 GMT
        Subject: CN=4706c69d-0364-4d3c-afcb-e8d3ac47ae20
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:06:5c:dd:38:46:60:ef:19:20:54:47:67:87:
                    d6:b9:85:55:45:d4:62:de:64:2f:c2:6e:a3:2c:d1:
                    9f:58:3d:a7:65:75:6b:7a:0c:fb:76:7b:a5:27:d6:
                    a5:14:65:24:f9:94:c6:e1:1a:30:f6:c4:0f:86:2e:
                    83:3a:05:84:15:9a:80:0e:0c:18:28:62:ae:96:f4:
                    50:54:43:13:b8:2a:f2:39:4b:d8:4a:6b:9d:6f:56:
                    f0:81:59:91:f3:79:c3:d2:9a:5b:b3:cc:dc:00:6d:
                    72:cc:15:c6:d7:10:88:1b:1f:ae:d3:86:83:f8:e5:
                    fc:a9:ee:b0:c0:01:db:fc:bb:f0:9b:9c:c8:6e:9c:
                    8e:91:26:26:75:c5:d4:6f:ad:46:69:95:f0:77:6e:
                    ff:25:10:5c:a9:b1:6b:b1:99:d0:f4:92:3e:13:d4:
                    46:e1:e2:27:ab:fc:17:fc:2b:70:1a:36:06:27:05:
                    aa:88:73:49:6c:87:09:db:6f:d4:e1:d3:2d:16:4d:
                    3f:36:ee:b2:e0:d8:58:81:44:c0:9f:71:4c:e8:7f:
                    68:e3:a0:e6:17:a2:30:0d:23:99:ed:b7:35:5a:89:
                    4a:13:9f:df:50:3d:cc:15:67:f1:ed:ed:1d:4b:5e:
                    d9:da:80:82:40:6b:65:d1:7b:2b:d6:fd:a5:f6:1b:
                    a9:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DB:1F:49:33:1A:BD:0D:3B:98:1E:39:CF:0B:E4:D8:A7:28:71:A9:F8
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/d95d79d8-27da-3d61-8647-801b2cf6de9a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.42.176.30/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         70:7e:3b:a2:6d:f6:bd:b3:2e:92:f1:35:a4:7c:03:ed:5b:8f:
         80:d0:11:bf:25:8e:9e:ad:23:ba:e2:b4:7d:f0:d0:9b:e9:50:
         a8:8b:8a:ce:cb:0b:9b:7b:0e:36:54:ec:42:72:96:16:e9:2a:
         49:4c:10:7d:62:d5:7b:58:ce:06:e1:e2:b1:76:c3:41:1b:f5:
         c5:e8:52:9c:8e:f5:b1:ba:22:1e:87:71:b3:75:1b:5b:a3:cb:
         a3:02:84:1c:78:86:61:ee:2d:b0:7d:ab:0b:3b:93:c7:69:ac:
         21:ee:0d:38:15:ab:4c:6f:10:2f:d6:04:4a:1b:b0:a0:7e:18:
         c9:41:03:32:1b:fd:b7:78:a9:80:90:26:76:94:d5:37:0f:c6:
         45:a4:d7:b5:d0:41:3d:c5:61:7f:62:71:31:db:62:ea:f2:5c:
         40:03:ae:03:e8:f9:db:b0:f0:61:3d:76:51:9a:b1:2d:4d:b2:
         2d:63:16:c2:f0:de:8a:c3:af:8d:5b:8c:71:00:af:94:a9:09:
         2b:93:f6:a0:d7:ee:e3:b3:46:8c:86:39:9a:82:20:07:35:bc:
         d6:8f:95:dc:20:05:cf:dd:c3:50:9b:44:b7:ec:b0:78:9b:de:
         93:db:c1:d6:a8:bc:08:e3:b1:7e:1a:b9:6d:91:4e:76:ed:78:
         2c:06:7a:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 25 21:59:56 2026 by rpki-client