Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/18fb330d-a16d-3f45-b8d6-f8ed72e4b916.roa
File:                     18fb330d-a16d-3f45-b8d6-f8ed72e4b916.roa (raw, json)
Hash identifier:          z+BmuJ9HA3+v5MjA4tIHwmUc13cAaW1c6kT6G9PooEY=
Subject key identifier:   0A:DF:28:E3:98:A8:95:F5:D0:1D:E2:05:39:F0:8A:2E:97:A8:61:1C
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584F225D1E564EF9B7B244797740
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/18fb330d-a16d-3f45-b8d6-f8ed72e4b916.roa
Signing time:             Fri 11 Sep 2026 01:00:12 +0000
ROA not before:           Fri 11 Sep 2026 01:00:12 +0000
ROA not after:            Thu 10 Dec 2026 02:00:12 +0000
asID:                     36632
IP address blocks:        192.42.176.30/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 24 Sep 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:22:5d:1e:56:4e:f9:b7:b2:44:79:77:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Sep 11 01:00:12 2026 GMT
            Not After : Dec 10 02:00:12 2026 GMT
        Subject: CN=4a0ca52e-2228-45ab-b039-1549a228dc98
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:5e:e2:44:e3:4b:e0:f7:2a:f4:58:27:9a:a6:
                    6b:ed:82:eb:85:72:5b:d9:a4:c4:db:a3:fc:43:e8:
                    ea:f3:14:9d:9c:3a:d9:4b:eb:23:41:38:19:8c:e4:
                    63:89:31:59:7f:b4:77:ca:97:0c:63:5f:22:3a:82:
                    17:dd:29:6c:b3:97:2f:5a:55:72:61:5f:ec:08:2a:
                    98:4c:4b:65:82:71:ee:8c:73:ac:f2:28:76:36:4d:
                    93:22:5d:32:01:59:79:80:db:2f:7f:ae:18:75:93:
                    8b:bd:35:d1:93:30:d8:69:e7:7a:20:06:01:6e:50:
                    ff:42:57:b9:4b:89:d4:fd:42:29:37:83:ae:1c:02:
                    26:c2:88:c0:e1:7f:01:c9:17:d5:86:26:a9:21:2b:
                    d9:ed:4f:84:b7:c7:53:78:b3:40:cf:16:88:c6:aa:
                    88:eb:ce:dd:e6:1b:a9:a5:60:0d:60:ab:17:92:c6:
                    8b:49:7a:9b:9b:57:1d:31:ca:63:c4:59:ba:3e:f4:
                    9d:8c:e1:f0:61:ce:c7:43:5b:69:be:dc:fb:99:58:
                    b5:ef:41:78:79:2f:55:7c:fa:9e:59:06:da:d3:d4:
                    8d:eb:06:14:b2:45:e2:ab:83:c7:91:60:e9:7b:6a:
                    da:b9:18:e7:3d:c8:f2:a5:e4:97:95:15:29:e1:31:
                    75:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0A:DF:28:E3:98:A8:95:F5:D0:1D:E2:05:39:F0:8A:2E:97:A8:61:1C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/18fb330d-a16d-3f45-b8d6-f8ed72e4b916.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.42.176.30/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         97:82:7a:61:00:79:b2:54:02:c0:b8:95:a6:ae:9a:17:6a:21:
         4c:b2:fb:4e:b5:9b:8b:c3:03:f2:f5:7f:21:6d:54:ed:32:79:
         e6:63:7e:63:76:51:fa:4f:e3:38:1e:41:a9:83:fb:43:ec:8f:
         40:c6:26:8a:8e:e9:d4:0b:7d:de:50:6f:0e:cc:ff:dc:66:82:
         73:c2:0a:c2:44:bb:5b:9c:0b:6a:ab:7d:e9:59:ca:a4:5c:c9:
         dc:31:ae:b8:8b:d1:ad:ef:64:36:f2:3f:d4:9e:37:cc:05:c3:
         d0:78:74:d8:32:6e:68:c9:ca:59:bf:14:30:b3:be:bd:b9:25:
         5f:cd:fa:a6:bc:7d:b1:72:59:ea:79:44:2b:62:ec:21:53:7c:
         bb:b4:90:75:c7:e5:97:ce:34:d5:af:54:f9:c6:fa:b9:8f:8d:
         97:16:17:d8:36:4c:15:88:ae:27:85:da:bc:dc:f1:c8:b2:f6:
         c8:02:0a:d1:e7:cf:a6:37:12:89:7c:94:05:e5:ad:da:a5:81:
         b1:ce:70:38:1c:ac:b8:ee:5e:80:e2:6d:3a:c0:c8:be:af:c9:
         3b:d3:08:28:82:b7:02:ba:a4:41:3d:c7:af:36:10:31:9d:e0:
         2e:f9:2c:4b:33:11:a0:01:d7:56:4c:5a:44:9e:87:92:37:c5:
         20:ec:85:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 21 21:06:34 2026 by rpki-client