Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/e465b337-7ab5-3eb4-a509-125625697a87.roa
File:                     e465b337-7ab5-3eb4-a509-125625697a87.roa (raw, json)
Hash identifier:          yDmKxn9bPVjGCIlWPzXzNCuMRd8sdsbCGipFEfNdWT4=
Subject key identifier:   17:BE:01:15:34:C2:F1:77:29:41:4F:95:F8:22:E8:13:69:3B:A2:E1
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584F06728E6AC9D4E26E7F92F500
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/e465b337-7ab5-3eb4-a509-125625697a87.roa
Signing time:             Tue 01 Sep 2026 01:00:12 +0000
ROA not before:           Tue 01 Sep 2026 01:00:12 +0000
ROA not after:            Mon 30 Nov 2026 02:00:12 +0000
asID:                     396542
IP address blocks:        192.42.178.30/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 28 Sep 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:06:72:8e:6a:c9:d4:e2:6e:7f:92:f5:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Sep  1 01:00:12 2026 GMT
            Not After : Nov 30 02:00:12 2026 GMT
        Subject: CN=f5cae007-7cc8-4e1d-a087-18b98e0e2183
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:90:0c:af:7c:80:4e:a7:63:1b:94:88:f9:17:cf:
                    c8:ae:62:41:9a:87:77:d6:49:22:d3:ed:1f:15:97:
                    0c:13:8e:88:5b:67:c6:b5:99:e9:cb:77:84:a0:17:
                    06:cb:84:6d:b7:32:f2:75:c5:79:fc:e7:91:2a:17:
                    71:27:3b:86:90:33:d3:ee:01:dc:1a:79:4c:ee:cd:
                    91:bf:ce:f8:8b:47:13:39:af:87:0d:82:68:a7:56:
                    89:37:43:93:e5:cf:cc:1e:47:0d:b8:4e:82:60:72:
                    91:a2:5f:2a:ee:1e:32:39:70:1d:e5:e0:3b:08:93:
                    42:7a:3d:50:f9:ab:d1:24:40:01:3a:61:57:a8:9e:
                    ec:1d:1a:89:4f:64:ff:a9:d7:6b:41:82:99:1b:d0:
                    d1:d3:77:e4:74:dd:f3:7c:5f:9e:06:d8:05:b2:93:
                    5c:0e:9d:33:a0:07:f2:c1:48:11:5e:a9:f8:d5:b1:
                    cf:f8:75:3d:73:6a:75:52:50:3b:8b:d0:9e:7b:f3:
                    7e:97:f3:e3:2f:c9:31:c5:d6:47:34:0d:e6:e1:eb:
                    5b:9f:ec:13:4d:8c:38:95:2b:53:32:bb:ed:3f:6f:
                    0d:74:9f:24:b1:92:d6:93:34:ca:f1:56:e1:57:0a:
                    32:88:fe:56:f9:67:72:3d:b9:28:4b:43:4c:8d:82:
                    c8:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                17:BE:01:15:34:C2:F1:77:29:41:4F:95:F8:22:E8:13:69:3B:A2:E1
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/e465b337-7ab5-3eb4-a509-125625697a87.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.42.178.30/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         99:0c:3e:c1:42:bb:b4:14:df:38:93:9f:d9:45:02:7d:73:c1:
         97:de:b0:2f:5a:e1:c9:5e:74:77:f9:fd:61:09:6f:9c:4a:5d:
         5b:b4:10:a6:bb:82:6f:dc:d3:57:c5:cf:f6:9b:36:ac:27:0e:
         73:72:f2:c6:72:ab:57:80:37:e4:29:bc:74:c3:9e:21:c4:9e:
         03:0f:cf:8b:bf:ee:12:89:91:d7:60:cd:fb:72:d1:10:5e:df:
         0d:29:08:d6:2d:f2:45:bf:65:cd:c5:da:26:01:ab:57:b7:80:
         2e:74:b6:4a:25:a4:2e:f6:02:48:58:c9:74:01:2f:37:f2:70:
         f2:fa:33:c0:d2:d8:26:9f:24:f6:ed:51:7f:8e:18:e2:63:66:
         e6:a3:95:b7:ed:4b:2f:1f:fa:8f:c2:96:85:11:fc:4d:ee:c0:
         2d:20:f6:c9:90:ed:b2:98:26:c3:56:9f:bb:b9:7f:40:53:8c:
         f1:11:8c:12:5b:64:35:e7:85:2a:37:20:32:33:c4:39:ae:70:
         25:08:e9:49:42:dd:3e:1e:19:a4:ba:b6:d4:9e:d2:57:c4:5d:
         f5:7c:f0:8c:23:1c:01:7a:9c:9e:99:6b:ff:d6:f7:d1:e6:9d:
         96:f8:cb:f2:0c:5f:f5:ae:33:59:0f:4b:49:d1:33:78:ff:98:
         82:36:6a:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 25 22:57:45 2026 by rpki-client