Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/ebc78df9-60e4-3115-986d-09323d166bd5.roa
File:                     ebc78df9-60e4-3115-986d-09323d166bd5.roa (raw, json)
Hash identifier:          zUD0AZMkguiZ4Tm8TvYvLUgCMMbGyqgFn4l2qUIXhno=
Subject key identifier:   F6:41:E7:E1:DC:C6:54:4F:07:87:E5:9F:2F:71:B1:38:D6:54:6D:4B
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584E640FB02BBA1A6A821D4B1C00
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/ebc78df9-60e4-3115-986d-09323d166bd5.roa
Signing time:             Sat 04 Jul 2026 21:00:12 +0000
ROA not before:           Sat 04 Jul 2026 21:00:12 +0000
ROA not after:            Fri 02 Oct 2026 21:00:12 +0000
asID:                     396552
IP address blocks:        192.82.134.30/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 26 Jul 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:64:0f:b0:2b:ba:1a:6a:82:1d:4b:1c:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Jul  4 21:00:12 2026 GMT
            Not After : Oct  2 21:00:12 2026 GMT
        Subject: CN=535c3b00-551c-47d4-9df1-f1b3c690801a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e5:31:18:cb:52:5d:53:b5:ae:0d:41:4c:66:05:
                    84:2f:74:72:04:7e:42:be:77:fc:5b:9d:05:e7:c0:
                    bc:5f:b7:d2:15:45:fa:17:ec:56:cd:34:3e:7b:d3:
                    2e:a3:25:96:2a:5c:cf:7f:08:56:45:8e:0f:d5:1e:
                    c3:8c:bb:d1:41:84:7e:89:94:d3:b2:5a:71:ec:7d:
                    85:5e:9e:27:da:85:f8:74:e4:c3:ec:63:e8:e7:05:
                    a5:9d:68:4a:e9:4f:27:8d:ee:5f:c7:7f:c9:b5:1b:
                    02:f4:a6:23:ee:02:a9:36:be:e4:f2:89:55:95:e5:
                    94:7a:c3:e5:fd:1a:15:74:2d:f7:90:71:28:63:0d:
                    33:fa:18:ed:61:eb:c5:fb:5e:18:04:06:1d:15:3e:
                    c2:2e:67:e4:33:1e:59:1f:22:61:6e:df:b8:5b:95:
                    72:71:e5:8b:e4:39:65:77:3e:12:91:41:e6:0c:ec:
                    5b:82:ce:dc:f8:04:43:51:76:14:a9:16:91:1b:b7:
                    10:c2:66:a6:44:1b:a0:7a:eb:0d:e8:34:30:10:38:
                    77:72:6d:19:13:18:60:c2:61:28:0c:71:f3:c5:c4:
                    9b:12:bf:20:a3:fb:e7:91:57:0b:05:4d:c3:65:e4:
                    e3:6b:f6:b3:1a:55:0e:bd:79:dc:ff:41:48:b1:4f:
                    c7:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F6:41:E7:E1:DC:C6:54:4F:07:87:E5:9F:2F:71:B1:38:D6:54:6D:4B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/ebc78df9-60e4-3115-986d-09323d166bd5.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.82.134.30/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         8c:7d:0a:c0:19:7b:c4:41:83:4a:a0:79:af:b8:71:a7:4a:0f:
         2d:c4:ba:e7:53:1a:8b:e9:e3:e1:05:7d:87:6e:e3:18:ad:eb:
         80:7b:2e:15:39:46:e0:c9:84:17:40:80:97:b1:c0:b9:8a:e0:
         79:f0:49:67:b0:fe:98:38:af:cf:13:32:5d:28:19:f8:df:ad:
         61:e7:72:f5:d7:fa:7a:67:0a:ee:1c:9c:64:8a:9c:8c:45:e9:
         2e:e9:bd:aa:18:7b:88:20:4f:a1:5d:72:ac:68:fc:c8:ab:26:
         d8:53:04:1f:90:00:75:28:2d:97:7f:39:39:92:3b:7c:bb:77:
         47:71:6e:41:54:71:ab:dc:f4:a8:59:a6:88:c8:13:91:3b:1e:
         03:8d:11:fe:35:3b:ee:70:19:eb:29:ef:f0:72:8c:8f:3b:7d:
         83:54:47:50:39:92:e2:d6:1b:de:8a:7d:ae:a1:ba:8f:c3:c9:
         9c:32:ab:97:09:f5:4e:e0:0d:6e:9a:3f:4a:8e:cd:9a:67:b5:
         df:8d:7a:8b:07:1c:d4:c3:a7:b7:12:bb:db:84:db:33:b0:a4:
         0f:3f:ef:db:c4:b5:dd:09:c4:4c:94:00:ec:b7:39:6c:b7:c7:
         21:29:14:3d:aa:13:fd:e3:2d:49:19:fb:fd:84:4f:87:3c:3d:
         86:66:72:9d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 10:13:15 2026 by rpki-client