Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/ff3bfdb1-d609-3ca0-9f7a-f207c0f028a0.roa
File:                     ff3bfdb1-d609-3ca0-9f7a-f207c0f028a0.roa (raw, json)
Hash identifier:          7+sRB8dUyAG6PaYnjeSxRseFB/TBOTGLltl7EV5t04A=
Subject key identifier:   FE:AB:FC:73:E6:B8:2B:C4:FA:73:A7:9A:34:BC:A2:DD:53:47:EF:9E
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584F1037A17371A67417DC17B580
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/ff3bfdb1-d609-3ca0-9f7a-f207c0f028a0.roa
Signing time:             Fri 04 Sep 2026 13:00:12 +0000
ROA not before:           Fri 04 Sep 2026 13:00:12 +0000
ROA not after:            Thu 03 Dec 2026 14:00:12 +0000
asID:                     396586
IP address blocks:        192.54.112.30/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 26 Sep 2026 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:10:37:a1:73:71:a6:74:17:dc:17:b5:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Sep  4 13:00:12 2026 GMT
            Not After : Dec  3 14:00:12 2026 GMT
        Subject: CN=813c327a-2bad-4880-a03a-44e2126cf4df
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:87:1d:b2:4b:b5:ee:d4:88:8c:0d:dd:c1:be:33:
                    25:8d:e5:14:72:b7:22:01:c5:eb:e6:39:14:5e:4a:
                    b0:79:51:b0:d2:f9:43:2d:05:3b:3f:03:50:12:58:
                    9b:6c:e9:50:9e:39:1e:42:1b:a4:5e:16:c5:9e:d3:
                    51:fe:8c:22:a7:5d:65:91:66:9b:7b:4d:ce:ff:3d:
                    1d:84:fa:62:82:9d:07:51:a1:61:10:9b:69:75:40:
                    14:ce:22:35:4e:7e:11:b6:27:90:72:94:3b:4f:11:
                    e6:48:ba:b4:f6:fd:c4:b0:fb:f2:9f:b6:25:d1:32:
                    a5:79:94:77:89:ec:b6:ee:dc:e6:78:53:74:68:1d:
                    93:42:16:b8:ef:10:e4:b3:3c:d1:36:3e:87:06:d5:
                    a2:e4:70:9e:75:25:6d:79:a0:4d:20:3b:38:95:c5:
                    7c:5d:4d:e4:57:e0:1d:9e:f6:ed:e7:09:a3:24:f9:
                    40:17:17:46:e4:19:16:2a:31:89:67:69:4f:a0:45:
                    a0:d4:0f:f3:b6:c3:e2:d9:44:cb:85:0a:23:50:0c:
                    0d:ae:d5:a3:03:c0:eb:5c:fd:68:b9:46:d1:3d:1c:
                    4f:c6:29:ee:c7:6d:1f:d1:d9:6a:fd:5c:2e:9e:02:
                    39:4d:06:ee:06:88:3b:49:44:67:b5:f6:44:25:e4:
                    ca:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FE:AB:FC:73:E6:B8:2B:C4:FA:73:A7:9A:34:BC:A2:DD:53:47:EF:9E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/ff3bfdb1-d609-3ca0-9f7a-f207c0f028a0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.54.112.30/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         46:f3:d5:ba:c8:0b:cb:d1:a7:f1:7d:2e:f4:f8:8d:9d:25:84:
         47:3c:f2:84:28:90:47:b2:87:a1:34:2e:50:fe:f9:98:17:c2:
         cf:5c:b1:08:ea:92:ec:34:e3:d4:8d:20:48:4c:04:e5:3a:13:
         c7:10:f9:0c:08:b2:08:27:0e:85:34:58:8b:3a:83:3e:f1:a4:
         1e:00:5b:1b:c6:ad:63:4f:c7:ba:7a:d0:0c:c8:77:e3:2c:70:
         ea:cf:c7:7b:7c:45:d8:2b:f4:77:f2:9d:ac:98:5a:fd:82:c8:
         fa:11:11:ec:ca:7c:5d:fc:a6:aa:02:3c:eb:20:8a:f4:e0:a5:
         3b:86:b2:f6:95:21:dd:e0:a2:77:bb:ee:80:34:fb:46:b5:65:
         c0:2c:9d:cb:a0:48:98:64:5d:11:ad:8e:93:f7:5d:8b:14:03:
         15:a1:de:c9:a4:08:3a:5b:93:7e:e2:f4:29:61:40:e0:0c:aa:
         d4:b2:13:70:0c:38:54:66:65:f8:73:4c:36:1b:09:10:3f:48:
         71:26:4a:3c:a5:7d:d4:eb:e2:98:eb:d5:ca:8e:9c:1b:36:86:
         4c:26:26:4f:50:80:e0:fc:58:b0:07:e3:13:00:06:44:6c:06:
         47:92:f4:22:6a:11:3c:2f:e1:dc:ea:d6:01:d2:11:9d:83:89:
         e5:5e:89:8a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 25 06:56:06 2026 by rpki-client