Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/e68c4566-fb73-3775-a071-a56a3941d4ea.roa
File:                     e68c4566-fb73-3775-a071-a56a3941d4ea.roa (raw, json)
Hash identifier:          ZRxDsK4FDtKrxY6/iWBEO1Q6YlANlCln9JKoCnqH85k=
Subject key identifier:   C3:56:68:11:AC:95:DD:84:7D:B6:03:1B:E0:FD:1B:2F:B2:65:3B:CB
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584F497F5F6BB7551DD9268D7200
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/e68c4566-fb73-3775-a071-a56a3941d4ea.roa
Signing time:             Fri 25 Sep 2026 01:00:12 +0000
ROA not before:           Fri 25 Sep 2026 01:00:12 +0000
ROA not after:            Thu 24 Dec 2026 02:00:12 +0000
asID:                     396540
IP address blocks:        192.68.130.30/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 30 Sep 2026 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:49:7f:5f:6b:b7:55:1d:d9:26:8d:72:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Sep 25 01:00:12 2026 GMT
            Not After : Dec 24 02:00:12 2026 GMT
        Subject: CN=a5b03a5a-4480-472d-8b20-94782fe793d9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:cf:33:04:ed:4b:6c:2f:3a:dc:5e:50:55:ab:
                    be:fc:7a:8c:e1:7b:b6:79:a8:aa:d8:2e:a8:5e:d4:
                    c4:50:88:94:4b:db:4b:fd:f9:23:aa:fa:b4:d0:9d:
                    9a:ca:fb:ee:09:8d:63:37:5d:e9:31:ef:d4:95:d0:
                    23:f1:26:fb:bd:90:83:8d:7c:0d:2f:86:83:a9:9d:
                    7b:4b:c9:8c:33:65:68:33:02:f0:39:23:66:b6:2c:
                    b4:c1:7d:c9:c8:45:1a:a4:51:ab:fa:f8:aa:e9:7c:
                    97:48:2a:5b:fb:bd:ca:b7:85:b3:66:f6:fe:f6:fe:
                    3f:f6:1a:0d:58:ca:f3:72:40:a6:53:f2:9d:ef:18:
                    f8:7d:67:84:55:2b:07:91:bb:13:44:b1:ca:4a:04:
                    28:e9:02:c5:08:ed:37:93:b2:34:79:48:d5:ce:94:
                    a9:f8:8c:5e:b9:18:9c:53:dd:f9:6e:2d:6f:e9:a0:
                    b3:17:04:d2:63:3b:46:2a:3b:3c:fe:2c:d3:28:d8:
                    2d:93:58:58:b2:c7:6c:74:e5:2b:5e:d7:2c:b2:a0:
                    58:40:0a:b2:d1:46:a5:5a:10:fd:17:d7:d1:d9:22:
                    e8:c6:24:f0:b0:de:ba:6c:53:7a:32:16:15:46:ca:
                    76:d8:cb:38:d9:bf:9b:08:a7:ee:74:87:d5:cd:d3:
                    16:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C3:56:68:11:AC:95:DD:84:7D:B6:03:1B:E0:FD:1B:2F:B2:65:3B:CB
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/e68c4566-fb73-3775-a071-a56a3941d4ea.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.68.130.30/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         b5:65:73:9a:f2:ff:3f:72:e4:52:f6:f5:94:16:d6:1e:c7:a8:
         8c:d0:34:64:43:99:6b:db:c8:ce:c4:fc:56:2f:79:dd:7e:2f:
         82:de:2f:8b:80:49:20:47:fd:42:3d:50:14:88:5a:2f:36:bc:
         04:a7:03:d5:cd:5c:bc:90:e7:34:d5:56:96:1f:ef:ea:7e:32:
         2f:4f:25:9b:8c:04:8b:30:eb:af:1b:27:6e:99:60:12:9b:05:
         ba:22:f0:5f:1c:b8:3e:fa:06:4d:c3:76:48:a5:17:43:4d:54:
         ca:03:25:7a:95:1a:51:a8:f7:b5:b4:fd:ce:3c:36:dc:5a:f1:
         22:a8:9f:b4:0f:da:fc:ba:96:c1:97:6a:3c:c1:70:0a:64:ca:
         ff:71:eb:12:b5:6e:9c:7e:73:da:1f:5a:fe:27:00:b2:26:7f:
         54:4c:67:1c:09:52:79:13:84:ea:2b:0c:49:9d:2f:fe:34:a0:
         a2:d0:17:37:7d:b2:ba:b6:85:a1:1b:ad:b1:a9:e4:64:23:4d:
         c0:b4:70:97:5e:cf:84:7d:e7:3c:49:61:71:43:6b:95:e2:51:
         fc:c2:22:f9:c0:99:23:85:8a:b9:53:ae:a7:7d:c8:66:10:83:
         97:f1:33:1c:b9:10:42:b0:ea:e0:37:85:de:ac:0f:08:7c:68:
         78:fd:17:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 29 09:29:58 2026 by rpki-client