Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/e565c0a0-ebe8-361c-8a8b-03f3d3cc5525.roa
File:                     e565c0a0-ebe8-361c-8a8b-03f3d3cc5525.roa (raw, json)
Hash identifier:          H/fBZFC/CS50pBCFFkMgCdFURNz4qi6cNcBMCPQdFMo=
Subject key identifier:   0B:F1:68:D5:15:B3:E0:BD:C4:36:A3:CE:45:29:BB:66:25:BB:40:08
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584F497D93D89832568D501D8BD4
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/e565c0a0-ebe8-361c-8a8b-03f3d3cc5525.roa
Signing time:             Fri 25 Sep 2026 01:00:12 +0000
ROA not before:           Fri 25 Sep 2026 01:00:12 +0000
ROA not after:            Thu 24 Dec 2026 02:00:12 +0000
asID:                     396599
IP address blocks:        192.68.126.30/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 04 Oct 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:49:7d:93:d8:98:32:56:8d:50:1d:8b:d4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Sep 25 01:00:12 2026 GMT
            Not After : Dec 24 02:00:12 2026 GMT
        Subject: CN=77e4b77f-e6e7-45de-99b7-0a9176b47ca2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:76:94:f2:4e:2b:24:51:db:05:7f:7f:b5:c8:
                    64:1f:0f:6b:e6:93:d9:68:30:61:9a:79:95:f5:7b:
                    76:84:a7:f7:46:6a:6b:c1:a6:5c:ef:5d:f4:dd:79:
                    13:86:b1:49:8f:58:13:43:2f:37:b2:06:cd:05:30:
                    23:12:59:2e:56:d3:b3:34:28:17:73:0a:83:c7:cb:
                    f0:e2:42:af:be:44:c4:d2:aa:8e:83:e5:ab:9b:68:
                    fd:36:fe:51:9e:5f:eb:1b:ee:00:8d:56:16:71:f9:
                    bb:aa:83:7d:93:44:a5:0d:58:ff:ea:18:25:86:a3:
                    5d:a9:e6:54:ad:08:29:27:36:a1:00:16:77:a5:39:
                    d2:ab:bd:02:4b:9c:9f:c8:d7:83:a5:05:49:87:41:
                    62:c5:19:61:94:9c:80:cf:b2:00:67:a6:ca:48:c3:
                    9c:f6:ec:9f:d1:fb:19:38:04:a5:7f:0d:92:d9:48:
                    8c:ee:d8:e4:34:93:75:79:15:e3:96:fc:0f:3c:78:
                    2d:f6:79:60:84:07:32:7c:37:36:74:92:b4:38:72:
                    ca:08:57:d7:a4:c4:06:bc:8d:e7:d0:11:cb:12:6d:
                    d0:d8:b4:55:f9:d6:a9:5b:7f:7a:5a:90:77:40:25:
                    23:8b:db:7d:76:32:86:ed:9e:d7:a1:84:b1:ed:0e:
                    22:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0B:F1:68:D5:15:B3:E0:BD:C4:36:A3:CE:45:29:BB:66:25:BB:40:08
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/e565c0a0-ebe8-361c-8a8b-03f3d3cc5525.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.68.126.30/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4d:be:29:55:4a:e4:eb:90:17:8b:0a:5d:b6:d3:8b:9d:82:8a:
         27:c4:17:85:f5:99:c6:79:5d:59:78:7f:86:aa:e0:85:04:c1:
         61:95:0c:12:8a:0e:f9:26:6d:95:1f:c3:91:5d:48:19:e7:79:
         a2:a1:83:9b:63:c9:39:e2:a5:eb:d8:61:4f:6a:da:aa:a7:f7:
         93:05:7b:ad:1f:6b:1c:62:ae:c7:a9:2b:28:3f:a7:f7:78:c2:
         69:2c:8c:33:c0:3e:d4:c4:34:c4:08:d1:bf:03:6b:90:e7:02:
         93:ae:32:b1:f4:b8:4c:24:89:d0:1a:f4:15:2e:f2:6a:40:28:
         58:54:a4:d5:7f:11:fe:6c:5b:b8:e6:eb:9c:05:f4:b8:3c:87:
         a7:31:11:6c:2f:c7:d0:6c:83:b8:58:c2:5d:28:8e:00:99:e8:
         26:40:2c:46:4c:8b:0a:07:9d:b9:01:19:e6:93:8f:85:58:f6:
         83:67:f0:42:65:e1:92:37:cd:3c:3d:1e:c8:83:d4:50:01:1f:
         ae:a5:f4:39:9e:80:9a:e5:41:19:4a:bc:56:72:34:6a:c8:ff:
         bc:6e:fd:3c:3d:99:3a:c0:75:e2:3a:c0:0f:f6:67:dd:dd:ed:
         cf:5b:c3:6a:47:9c:1e:b4:03:d1:07:d9:10:9b:08:e4:d2:f0:
         77:80:89:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 1 22:01:10 2026 by rpki-client