Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/18540fd4-6def-3e76-a2c1-e37e7b3112a0.roa
File:                     18540fd4-6def-3e76-a2c1-e37e7b3112a0.roa (raw, json)
Hash identifier:          iiR1ySe7n6eyWNaPeZ/eJ3vGo/FijNjpv4S2m3pUfyY=
Subject key identifier:   9F:02:DD:3C:AE:B7:5F:10:B9:88:2F:AE:52:6F:10:26:9C:23:D1:24
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584F1037A646EFED4A9C68B4F780
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/18540fd4-6def-3e76-a2c1-e37e7b3112a0.roa
Signing time:             Fri 04 Sep 2026 13:00:12 +0000
ROA not before:           Fri 04 Sep 2026 13:00:12 +0000
ROA not after:            Thu 03 Dec 2026 14:00:12 +0000
asID:                     396572
IP address blocks:        192.54.112.30/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 22 Sep 2026 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:10:37:a6:46:ef:ed:4a:9c:68:b4:f7:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Sep  4 13:00:12 2026 GMT
            Not After : Dec  3 14:00:12 2026 GMT
        Subject: CN=b750d765-332c-4296-831b-620c1a0737e3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:27:ee:36:d3:70:eb:3a:b0:8e:3c:01:c2:84:
                    c5:7d:b4:73:7c:76:fc:02:db:8b:72:2a:fe:ee:b4:
                    49:09:ca:c2:d0:29:5d:a4:8b:0c:bc:62:15:f1:d0:
                    c5:78:93:2e:d4:3b:3e:db:c3:7d:26:48:cd:aa:ec:
                    29:71:c8:7f:3f:f1:7e:94:c8:56:38:f7:d8:63:76:
                    3f:c1:24:f9:a4:d9:a3:08:a4:ba:35:60:68:f5:09:
                    d5:61:0a:99:0d:7d:a8:95:86:df:1f:2f:6d:cc:a8:
                    92:14:7d:91:42:c4:24:57:ce:5e:26:18:52:80:7f:
                    5c:6d:54:a9:13:3c:1f:0b:e5:66:7f:e0:4a:ff:23:
                    75:12:3c:70:de:89:33:aa:37:08:57:c8:54:ac:38:
                    49:34:3e:31:1c:c4:9e:b4:e3:40:66:07:dd:9c:00:
                    4d:b0:f1:34:bf:f9:80:6d:12:66:3e:50:60:ef:ce:
                    b5:ba:d8:c3:8b:48:0e:89:49:52:0b:c9:70:4f:a7:
                    f1:2e:43:a6:4f:67:32:6c:d6:a8:19:3b:10:09:54:
                    18:b0:1e:30:f9:6a:02:b9:93:83:06:3e:a7:1b:8f:
                    7c:48:ad:27:53:35:b4:0f:0f:dd:ce:30:98:0e:8c:
                    7a:dc:f8:05:65:e8:76:6c:1a:8d:36:c0:53:2a:44:
                    20:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9F:02:DD:3C:AE:B7:5F:10:B9:88:2F:AE:52:6F:10:26:9C:23:D1:24
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/18540fd4-6def-3e76-a2c1-e37e7b3112a0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.54.112.30/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         8e:e3:d4:ea:08:05:16:fd:1e:24:58:d1:64:92:01:77:c0:d7:
         2d:e1:af:a4:3f:c5:2c:70:e3:82:22:77:c7:42:0f:68:34:8f:
         23:d0:fb:ed:71:67:3c:82:93:cc:7b:84:22:86:57:bb:6a:1b:
         d5:5b:0f:cf:7d:29:0e:08:34:e0:ae:06:70:3e:e4:af:1a:f0:
         48:7e:b8:61:6e:0b:49:7e:1b:a9:8c:82:36:a3:97:8c:82:07:
         ed:fa:0d:a6:c2:25:cd:ea:bc:61:1d:9d:42:78:85:e3:66:af:
         12:6e:bc:da:96:3d:08:d8:1a:cf:44:4b:de:c3:05:9c:6f:2f:
         1e:fb:d4:f7:c5:c2:c1:aa:18:b6:28:e0:97:5f:f9:2e:79:d3:
         b6:9c:e9:e3:89:f8:ae:9a:66:05:b0:77:d6:1f:69:dc:b2:b0:
         d1:a9:34:f8:2a:94:11:4f:89:94:0c:d4:77:6b:41:a8:8d:08:
         80:a9:f0:96:73:73:e6:ff:3c:07:33:04:77:5e:2b:bd:75:15:
         c4:23:ad:58:8b:ad:43:df:67:b5:b6:5d:e7:a1:07:34:7b:72:
         e1:f0:0a:4f:3a:6b:98:07:07:5e:b1:bd:54:ff:d3:0c:f9:d3:
         29:a5:31:a2:76:f6:a8:85:d3:2d:d7:65:12:97:29:e2:ba:b5:
         c6:ba:4b:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 21 14:14:54 2026 by rpki-client