Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/fd6e9bc5-230d-39a7-820e-65b56ee22594.roa
File:                     fd6e9bc5-230d-39a7-820e-65b56ee22594.roa (raw, json)
Hash identifier:          ZsgR5X/zGQ6gEI7nqdPsbCJOD4y8Pjg9BXptCovA8Aw=
Subject key identifier:   E0:E9:E9:D2:90:C2:AD:2F:8A:89:79:A2:D2:D0:DA:BD:46:2A:5C:2E
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584F1037A293D928486763A84F60
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/fd6e9bc5-230d-39a7-820e-65b56ee22594.roa
Signing time:             Fri 04 Sep 2026 13:00:12 +0000
ROA not before:           Fri 04 Sep 2026 13:00:12 +0000
ROA not after:            Thu 03 Dec 2026 14:00:12 +0000
asID:                     396542
IP address blocks:        192.48.79.30/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 28 Sep 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:10:37:a2:93:d9:28:48:67:63:a8:4f:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Sep  4 13:00:12 2026 GMT
            Not After : Dec  3 14:00:12 2026 GMT
        Subject: CN=cd61b330-f03b-473f-915b-19aeb6a9c6ee
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:f5:29:05:2d:32:0b:d4:28:3d:80:1c:ce:08:
                    41:14:f7:73:aa:ee:57:ff:86:de:0b:c5:7e:84:59:
                    b6:30:b5:2e:0e:df:6e:f1:ca:fa:7b:6f:aa:4b:da:
                    50:9f:88:31:e8:d6:fc:db:54:05:04:4a:b8:86:e7:
                    60:ff:bd:87:63:ab:e1:40:92:36:0c:9b:26:16:24:
                    db:ee:87:9c:fd:3a:e4:7b:81:c6:c8:9f:ed:4d:8b:
                    ae:b1:6f:f2:6e:8e:40:f9:64:ef:a6:63:9c:73:00:
                    f5:d2:57:d6:67:35:95:ed:f1:a9:15:46:4e:0b:0a:
                    af:a1:a9:d8:0e:11:ab:7b:7e:2b:49:f0:5a:fb:70:
                    16:a0:0e:71:2a:22:10:a6:21:2f:7b:bf:4e:bd:c3:
                    76:86:cb:6a:37:3a:6e:37:e6:59:e2:db:02:8c:4a:
                    3b:bb:b1:ba:56:c1:61:76:6b:a1:17:bf:48:14:b2:
                    21:da:8c:0f:d4:04:f5:43:fa:4d:a1:15:23:d4:95:
                    d8:ff:4e:3f:08:81:51:77:d3:cd:12:25:0d:2a:a7:
                    00:80:c8:08:33:08:6a:7c:7e:cd:d9:39:30:cd:c8:
                    36:92:d8:97:fd:e8:a1:58:fa:fa:c3:b6:8b:8f:21:
                    62:eb:1a:97:75:bc:d9:43:0a:c9:8e:ef:65:7d:d2:
                    d7:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E0:E9:E9:D2:90:C2:AD:2F:8A:89:79:A2:D2:D0:DA:BD:46:2A:5C:2E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/fd6e9bc5-230d-39a7-820e-65b56ee22594.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.48.79.30/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         07:3c:05:4e:09:a9:2a:3f:57:0f:98:af:a2:5f:59:ae:f5:ba:
         ee:ea:a9:5d:f0:5e:8f:50:92:29:f4:d8:8b:40:ac:cb:7f:14:
         d3:20:03:2e:49:90:55:9e:97:19:93:77:e9:ef:85:86:8c:81:
         99:76:c2:32:1c:05:7e:2f:8a:ea:8c:2b:a7:00:ad:23:b9:f7:
         5d:a6:ac:c6:ef:1a:a7:08:87:f1:59:30:41:14:6f:a7:1f:54:
         c3:d7:5a:45:7d:e8:fa:0a:77:e0:5d:d0:29:4f:f3:fc:45:3e:
         89:18:cb:4e:94:31:e2:ee:7c:b4:08:e7:d8:bb:53:5e:1a:9d:
         14:ab:a8:cf:11:b1:00:bb:f2:1c:0d:42:f6:bb:7b:40:d6:35:
         92:3e:73:01:c5:73:4f:a5:11:e9:7d:9d:0e:8d:41:2b:24:31:
         44:0d:35:5c:2d:ed:76:24:36:cb:b8:89:99:4e:2a:b5:e7:bf:
         b5:35:d3:7f:c7:eb:88:a9:a8:1e:c2:25:ae:37:cd:3c:e6:7e:
         54:1c:b7:65:65:fc:c2:f1:e6:17:f6:db:9d:63:40:d5:61:ba:
         8a:9c:57:62:a0:ab:b3:e2:84:5e:10:07:00:38:3e:1d:a7:eb:
         d5:fc:83:34:be:83:d2:17:ab:75:3d:11:b5:59:f7:a7:80:de:
         99:4e:dd:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 26 15:24:04 2026 by rpki-client