Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/f84ad808-5259-3a89-b4ec-ee12d809fef5.roa
File:                     f84ad808-5259-3a89-b4ec-ee12d809fef5.roa (raw, json)
Hash identifier:          kYp8xDr5dKjt90d2DPWSgbZF0Gsvw7nI4i4UZqxlS0c=
Subject key identifier:   AE:8D:F6:00:38:8F:6F:E7:4A:65:E8:B8:F3:03:1A:EE:91:07:9E:7D
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584F497F5440B2FC9CD45F7C4D80
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/f84ad808-5259-3a89-b4ec-ee12d809fef5.roa
Signing time:             Fri 25 Sep 2026 01:00:12 +0000
ROA not before:           Fri 25 Sep 2026 01:00:12 +0000
ROA not after:            Thu 24 Dec 2026 02:00:12 +0000
asID:                     27544
IP address blocks:        192.68.130.30/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 30 Sep 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:49:7f:54:40:b2:fc:9c:d4:5f:7c:4d:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Sep 25 01:00:12 2026 GMT
            Not After : Dec 24 02:00:12 2026 GMT
        Subject: CN=d60b3dd8-9fe6-432d-a94e-d65fe455ccf7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:f5:b3:13:7c:07:8b:a4:20:3c:c6:a1:0e:6d:
                    65:02:6b:c7:ce:b2:7b:d6:9e:00:85:d1:a3:bf:cb:
                    9f:46:fa:bf:5a:02:e7:7b:60:28:f4:01:c5:e4:03:
                    f2:97:35:14:06:2f:4c:77:37:b1:4a:5a:11:a2:48:
                    00:d1:37:b6:c0:64:c2:64:6e:00:b5:2b:c3:88:11:
                    2a:28:de:6d:a2:7c:ec:01:49:33:03:b7:e8:f1:28:
                    92:85:1b:19:28:1b:69:55:11:87:53:f9:e4:37:63:
                    44:b7:0f:9c:f8:ac:98:a4:0a:d8:78:64:e8:f5:a5:
                    3c:ab:dd:1a:fe:c4:98:23:b3:da:27:60:75:68:2b:
                    dc:c8:c0:74:13:75:a6:30:56:ac:6c:12:34:92:89:
                    da:51:75:9e:d0:45:50:c6:83:7c:65:36:d5:d2:c8:
                    d8:c8:91:94:79:8c:69:70:f9:ed:40:dc:18:24:70:
                    07:7f:96:dd:8c:57:5a:22:45:e4:ca:4c:42:44:34:
                    a3:ba:2e:b3:ad:18:ac:0f:39:94:91:c4:ab:33:31:
                    a3:a7:1c:7e:ee:f7:53:da:e8:c1:8b:fb:c5:d7:d8:
                    73:f2:d2:2a:1e:7b:75:b1:b3:76:80:cd:5c:c6:0d:
                    13:20:b9:a1:cc:5b:fe:4a:3a:ad:16:ab:17:c0:22:
                    42:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AE:8D:F6:00:38:8F:6F:E7:4A:65:E8:B8:F3:03:1A:EE:91:07:9E:7D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/f84ad808-5259-3a89-b4ec-ee12d809fef5.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.68.130.30/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2f:79:75:dd:fe:6f:b0:b0:35:51:cd:cd:94:fc:b9:76:16:09:
         ef:56:f4:d8:54:6b:89:e5:33:8a:f1:2d:64:07:b9:40:dd:3b:
         d8:e0:00:62:6e:c8:e8:e3:a7:b3:31:76:29:05:1c:f2:ec:91:
         57:d8:ea:91:2a:cd:f0:39:f8:a3:7d:df:23:52:70:0e:4c:37:
         9e:2a:d9:95:52:33:44:46:68:b5:44:44:1d:fc:0d:c2:bb:1c:
         7b:22:f6:0c:40:3f:dd:ef:e9:51:4f:cb:2d:32:ed:e4:37:b8:
         84:ff:bc:78:19:95:51:eb:6b:94:87:fd:65:d3:8a:a3:d4:19:
         f8:7e:fc:ae:b1:8f:55:59:cf:9b:8e:98:02:06:3d:ce:44:39:
         3f:d5:75:9b:24:54:b5:09:d7:4c:97:f7:1e:d3:d8:80:98:45:
         33:ee:5c:6b:f0:97:50:f4:9c:b5:fa:20:41:4d:78:27:a7:04:
         40:83:38:c1:df:cd:62:80:10:0d:5f:15:25:93:a1:28:3b:27:
         1c:66:46:c4:21:1b:8a:8e:99:e0:23:98:8d:99:bf:75:94:8c:
         0a:7c:4e:c8:d7:42:ce:33:74:8d:0d:6f:32:b8:f7:e4:c1:96:
         0a:cc:ab:e4:f3:ee:a5:b2:78:10:c2:1c:06:f7:09:43:99:2b:
         48:42:3f:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 27 17:32:07 2026 by rpki-client