Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/f57a8aeb-12d5-3dde-9928-f63d7176f904.roa
File:                     f57a8aeb-12d5-3dde-9928-f63d7176f904.roa (raw, json)
Hash identifier:          WEF3yfcapQYDW6vMPC1H6IoTctzbgUEnrgQ6SY0izYY=
Subject key identifier:   C2:56:5F:81:48:68:34:06:90:01:4D:48:DF:60:82:97:9F:AF:4B:18
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584F03A7F54C473570448AD0B1C0
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/f57a8aeb-12d5-3dde-9928-f63d7176f904.roa
Signing time:             Mon 31 Aug 2026 01:00:12 +0000
ROA not before:           Mon 31 Aug 2026 01:00:12 +0000
ROA not after:            Sun 29 Nov 2026 02:00:12 +0000
asID:                     36631
IP address blocks:        192.34.234.30/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 28 Sep 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:03:a7:f5:4c:47:35:70:44:8a:d0:b1:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Aug 31 01:00:12 2026 GMT
            Not After : Nov 29 02:00:12 2026 GMT
        Subject: CN=e16dccf4-affd-4fb1-8113-dbdd4347b108
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:da:09:04:4e:da:61:9c:c9:8d:21:2d:37:a5:bd:
                    2c:11:7a:f2:26:c3:7a:67:36:57:92:5d:81:4a:d0:
                    d5:e6:53:3f:6f:f2:f7:2f:c7:5b:f5:57:79:6c:ca:
                    05:5c:4b:97:27:be:05:72:5c:3a:02:10:dc:aa:51:
                    61:25:55:47:7c:69:8d:0f:a2:d1:b3:ca:ad:e3:fe:
                    05:91:67:7e:80:26:a3:89:72:60:0b:a0:90:f3:8a:
                    52:4b:ee:46:3d:5e:b0:63:fc:79:0d:3b:85:5a:13:
                    63:bd:6c:fb:f6:0b:ca:fa:9e:bf:a0:d7:1a:46:7b:
                    e3:69:f5:33:14:ca:f5:da:71:19:ed:2a:b5:b5:c1:
                    3f:8e:a9:28:95:6e:ae:42:c4:e5:61:86:45:83:9d:
                    fd:87:70:85:3e:83:20:7a:2f:4f:74:e7:92:f9:2d:
                    db:97:b4:a2:3a:f9:41:23:e3:c7:a5:db:64:60:d2:
                    7c:a3:4d:fe:38:a5:24:91:1d:ac:8e:65:f5:40:d2:
                    49:e0:36:e7:e9:dd:b6:dd:e5:1a:33:65:3f:9e:eb:
                    41:7f:51:3b:b2:4e:da:cf:aa:8e:b5:c8:c5:10:e6:
                    9c:4e:1e:95:d5:6f:4e:77:a6:a0:d1:5a:7d:77:9d:
                    27:b2:20:fc:62:f6:48:48:a7:33:3b:46:20:76:94:
                    41:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C2:56:5F:81:48:68:34:06:90:01:4D:48:DF:60:82:97:9F:AF:4B:18
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/f57a8aeb-12d5-3dde-9928-f63d7176f904.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.34.234.30/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         32:b6:b0:d0:14:da:92:70:43:d4:d8:c9:f2:21:0b:f1:f9:76:
         89:e2:88:1f:6f:72:09:10:bf:1c:72:d9:a4:72:6a:1d:7d:f5:
         3f:e7:8a:16:9f:97:64:19:07:53:05:1e:61:c4:29:30:9d:f6:
         55:eb:04:f7:b2:71:3c:43:23:e3:73:64:2c:1f:9b:54:71:bc:
         1b:7b:cb:43:75:d6:d5:d1:85:9b:fa:d2:9f:25:36:1e:0d:3e:
         80:f1:34:0f:52:a4:ca:1e:4f:91:da:92:bc:6d:83:13:09:ab:
         20:af:ab:9c:af:14:1c:c2:77:85:a0:39:38:2c:85:e8:0a:c9:
         c0:dd:96:c6:b0:33:9c:b6:bd:91:4a:ce:64:2f:d1:8d:61:9c:
         22:33:17:94:1a:a5:79:66:7e:44:2f:51:e5:5b:fd:a7:56:14:
         d9:35:3d:5b:98:ed:af:88:e7:84:00:0f:02:5a:b5:52:69:de:
         5c:09:f4:75:9f:10:42:f8:19:b1:ce:24:d8:df:3e:75:20:5c:
         c4:b9:9f:4e:7e:b3:ee:2d:45:4f:f8:bc:7a:da:48:09:95:d6:
         35:9a:cc:6d:81:4b:ef:45:eb:bd:6a:82:ff:36:4f:14:36:2e:
         a9:60:72:da:e3:7e:55:01:7c:91:ea:25:b5:5b:e0:55:b9:9e:
         d7:6a:28:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 25 20:53:27 2026 by rpki-client