Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/f866ad11-e86a-3e5d-aacc-289067c1bc11.roa
File:                     f866ad11-e86a-3e5d-aacc-289067c1bc11.roa (raw, json)
Hash identifier:          qdBo97S3NjG5XS3k7vq5t6kCeWW5MBTCGdB6J/cpNX8=
Subject key identifier:   C6:1E:54:94:3E:FB:34:75:F3:B5:1A:5D:5B:54:D4:C0:F5:CF:03:4D
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584F06727A7D0EC1B55A05181060
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/f866ad11-e86a-3e5d-aacc-289067c1bc11.roa
Signing time:             Tue 01 Sep 2026 01:00:12 +0000
ROA not before:           Tue 01 Sep 2026 01:00:12 +0000
ROA not after:            Mon 30 Nov 2026 02:00:12 +0000
asID:                     36620
IP address blocks:        192.82.134.30/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 26 Sep 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:06:72:7a:7d:0e:c1:b5:5a:05:18:10:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Sep  1 01:00:12 2026 GMT
            Not After : Nov 30 02:00:12 2026 GMT
        Subject: CN=85ba00d3-775b-44d6-aea9-45fa390c36be
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:ed:4d:4a:34:dd:db:21:f6:10:f9:ec:49:76:
                    65:79:25:fb:3e:a3:77:15:c2:bf:9f:c4:77:32:46:
                    9e:52:6e:97:07:ad:10:fc:91:14:03:d2:1a:9d:b8:
                    5c:e8:08:e8:60:5f:b4:6c:70:7a:2e:53:ef:e0:99:
                    c2:06:34:58:96:43:27:d8:82:f3:bb:c6:fe:47:d0:
                    8d:db:57:f0:57:6a:95:81:d6:c9:ed:32:d6:00:3f:
                    83:9b:64:65:29:bb:88:62:68:16:a4:b0:0c:7f:9d:
                    f1:db:d9:79:85:c2:93:d7:a2:0c:ba:bc:1f:e8:37:
                    a8:dd:05:e5:00:b1:59:e2:89:b8:eb:f5:f6:ce:2c:
                    e2:eb:00:a8:b5:70:5d:75:43:f9:b5:c5:e0:48:b0:
                    08:83:b0:1e:2b:7c:d3:6d:9c:7f:8c:d9:df:a4:b3:
                    12:9a:88:3d:13:b3:8e:98:64:e1:9a:ec:77:91:09:
                    8f:22:e2:24:23:e9:be:f4:9f:f8:cf:80:f9:95:ff:
                    27:75:12:49:fe:e6:70:35:6f:2e:8d:21:dc:57:b8:
                    31:eb:a4:52:01:a9:19:46:97:80:2e:17:4a:66:84:
                    f2:86:a7:97:e2:d8:1d:1c:47:68:b4:5d:eb:af:e6:
                    21:8b:01:ff:3d:53:8e:f8:f6:91:f7:10:27:5a:24:
                    41:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C6:1E:54:94:3E:FB:34:75:F3:B5:1A:5D:5B:54:D4:C0:F5:CF:03:4D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/f866ad11-e86a-3e5d-aacc-289067c1bc11.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.82.134.30/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         95:a1:fc:b2:50:6d:51:e1:53:9f:33:0c:05:67:e6:70:1c:57:
         51:c8:80:c2:18:f3:07:09:a3:1d:f2:29:f3:62:5b:01:da:a1:
         a7:89:75:07:28:44:69:da:3f:7e:f2:b4:40:71:f9:16:11:bc:
         57:ed:7a:3d:d6:bf:c3:67:c0:72:06:11:a5:44:89:51:b4:a8:
         1d:91:02:0a:f1:d0:d4:de:32:eb:ce:4f:f0:dd:79:bd:27:fd:
         51:8a:05:53:40:39:30:ed:8a:91:bb:30:7b:14:88:75:ec:3c:
         04:6e:01:af:59:e1:c5:6e:a0:66:fd:17:3e:92:f8:59:97:27:
         58:48:13:a8:9f:47:a6:04:45:83:87:62:35:92:77:18:39:39:
         65:e9:df:7e:73:d7:04:96:3c:0a:b7:84:b2:13:93:0b:55:b5:
         2a:f5:62:71:c2:bd:f9:c7:54:5d:4d:d8:a6:42:13:97:44:f5:
         8b:86:c5:ae:f3:11:7a:42:54:d7:9e:9d:9a:88:05:14:6b:0e:
         03:84:0f:f0:89:0d:36:05:99:88:ff:cc:a2:14:90:75:73:34:
         fd:ab:32:3f:4f:9e:7d:03:44:37:b2:bb:d1:e1:81:54:d4:4f:
         5a:af:ba:a3:b9:40:b4:f8:50:3c:f0:06:18:73:a7:39:83:90:
         6b:73:bb:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 11:51:49 2026 by rpki-client