Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/1d2228e4-690a-3439-895b-a85f3ab673b9.roa
File:                     1d2228e4-690a-3439-895b-a85f3ab673b9.roa (raw, json)
Hash identifier:          /gvrYnKJl+e1yI/ymTiMBGsk2z74hFW+OqhKGfmhoMY=
Subject key identifier:   D4:4B:01:04:00:5C:BF:34:0A:FD:14:5A:BA:48:D0:A8:FF:84:BB:9A
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584F4974397F75EEDF8AD4461980
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/1d2228e4-690a-3439-895b-a85f3ab673b9.roa
Signing time:             Fri 25 Sep 2026 01:00:12 +0000
ROA not before:           Fri 25 Sep 2026 01:00:12 +0000
ROA not after:            Thu 24 Dec 2026 02:00:12 +0000
asID:                     396613
IP address blocks:        192.12.94.30/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 28 Sep 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:49:74:39:7f:75:ee:df:8a:d4:46:19:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Sep 25 01:00:12 2026 GMT
            Not After : Dec 24 02:00:12 2026 GMT
        Subject: CN=3d02ab10-2b29-4787-807f-59e3fea1c49f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:4d:9b:02:74:c8:75:42:81:09:b6:5e:bd:7f:
                    b0:5d:85:c3:03:8b:79:ca:f0:ff:cc:d8:69:eb:13:
                    68:5c:5f:9b:e3:6a:a2:10:ef:e9:e7:5f:b7:d6:5e:
                    d7:b9:5e:f0:9e:2a:37:1e:c8:25:3c:ca:d9:d7:33:
                    d2:d6:dd:f1:cf:d1:a7:df:98:08:e7:a0:5f:06:bd:
                    eb:71:c8:b4:99:6f:87:e4:74:55:dd:4b:e7:85:67:
                    39:99:c6:c1:66:ca:9a:7c:1a:9d:53:74:0b:8e:d4:
                    fb:1f:04:bb:93:f2:6c:cd:1b:ca:d0:05:bf:4c:7a:
                    83:35:f4:dd:43:a0:36:be:6b:c2:f3:ab:3d:20:5d:
                    c0:11:a6:78:55:e7:02:49:9e:94:b6:f0:a5:cf:fe:
                    d6:f4:2d:7e:c5:21:50:e7:ba:bf:c1:74:c4:29:1f:
                    ed:52:4c:d2:c0:c5:e6:cd:b5:36:d1:cf:be:c6:07:
                    73:6c:f5:66:b1:73:d5:7c:b7:16:c0:1c:ba:c2:4b:
                    94:d2:40:ac:ae:8c:3a:9f:3f:53:13:ba:af:f3:10:
                    93:11:af:74:f7:aa:bc:e2:45:55:e2:9b:3a:b1:52:
                    21:b7:be:7c:33:85:05:21:b7:85:cd:2e:05:bd:1c:
                    91:4f:9a:53:e8:c5:27:e5:db:c3:65:69:0d:bc:a2:
                    86:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D4:4B:01:04:00:5C:BF:34:0A:FD:14:5A:BA:48:D0:A8:FF:84:BB:9A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/1d2228e4-690a-3439-895b-a85f3ab673b9.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.12.94.30/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         70:cf:b4:97:e0:e3:5b:60:fb:98:fb:53:b7:3e:a4:f2:83:90:
         2c:2c:df:4c:37:dc:fd:b7:57:3a:05:85:e7:c5:53:21:aa:f5:
         9e:e0:a6:a1:36:fd:4b:44:93:19:f0:10:f1:ad:2b:7c:4c:2d:
         bd:37:63:ed:7a:de:0e:50:71:65:32:57:d3:d3:7f:08:f4:62:
         a5:28:3f:05:02:6c:6c:4a:88:59:85:b6:13:01:06:69:1b:7c:
         3d:27:18:70:ba:ed:f1:8a:02:a4:68:bc:e6:d9:23:db:4a:88:
         1f:17:10:e5:3f:51:6b:93:21:98:48:c9:db:3d:42:46:de:7d:
         a6:fb:c8:80:a9:fa:be:45:55:0d:79:9f:81:24:4f:0b:0d:73:
         63:58:91:19:a4:84:5b:60:58:5e:69:db:5f:73:7c:4a:ce:b7:
         51:14:a0:66:aa:97:87:fd:b6:c3:ff:1f:81:5d:d4:46:eb:e5:
         40:08:81:82:8c:19:70:d8:93:2e:54:68:4c:7d:d2:4a:d7:05:
         22:81:bf:99:61:1d:58:40:be:d2:30:88:38:fe:35:e9:e5:cb:
         48:99:07:70:95:be:a4:95:f7:9a:49:f6:eb:9d:1d:39:b3:47:
         fe:ce:b5:68:8f:7e:e5:d4:d4:d5:1a:15:12:3c:1a:62:d7:c6:
         47:7b:b9:18
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 27 00:19:48 2026 by rpki-client