Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/1dccc5c9-3a64-3a79-bb91-54464da82820.roa
File:                     1dccc5c9-3a64-3a79-bb91-54464da82820.roa (raw, json)
Hash identifier:          Ehx4sh/M9xCtYUwcNFjs1gSxDG8eDua9aliqN5g+MiA=
Subject key identifier:   8B:8C:9F:82:C2:3A:12:E2:9E:86:B2:3E:FB:29:EC:77:33:B0:5F:16
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584F067282F45F00B54FBA2095C0
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/1dccc5c9-3a64-3a79-bb91-54464da82820.roa
Signing time:             Tue 01 Sep 2026 01:00:12 +0000
ROA not before:           Tue 01 Sep 2026 01:00:12 +0000
ROA not after:            Mon 30 Nov 2026 02:00:12 +0000
asID:                     397212
IP address blocks:        192.42.178.30/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 24 Sep 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:06:72:82:f4:5f:00:b5:4f:ba:20:95:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Sep  1 01:00:12 2026 GMT
            Not After : Nov 30 02:00:12 2026 GMT
        Subject: CN=7f638129-8576-4e12-9dc0-e4d9951a7c26
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:6b:1a:84:12:23:c3:84:62:04:41:80:cb:e5:
                    7d:92:67:c2:37:9b:e0:0f:fb:2c:59:66:3e:6d:79:
                    d2:e3:23:d3:a9:40:8f:a9:ab:7f:5e:13:15:16:a8:
                    6d:b7:24:90:6f:41:7a:dc:a8:10:7a:5b:12:bf:7c:
                    4f:31:9e:0d:16:ce:15:01:f3:b0:9b:80:0e:6b:5f:
                    d0:72:d5:26:6a:56:03:79:d7:19:97:9b:77:81:91:
                    d9:7b:63:c2:a6:d2:f7:54:cc:d8:d5:1f:49:9a:36:
                    34:69:9b:99:c5:a1:b1:d1:e8:fe:dd:c4:48:a1:76:
                    47:3a:b5:73:51:57:74:ec:58:a1:46:d3:8d:8e:cf:
                    01:cb:04:e0:1d:3b:6d:f7:a9:3a:68:ea:e5:ea:c3:
                    ed:ff:8e:89:61:f8:98:d5:57:3b:d4:d3:da:14:b4:
                    6e:fe:9c:ef:82:cc:0f:00:f6:70:b0:76:bd:ea:01:
                    86:20:d3:96:ed:df:2b:3d:30:f4:a1:29:e8:bb:7b:
                    27:c1:34:6e:d7:e4:98:02:f9:4c:4a:cd:90:aa:d7:
                    1d:54:fe:0a:df:ce:a9:fc:a7:e6:7e:02:47:b6:1b:
                    fb:bb:79:8a:6c:5c:85:7c:0c:ef:2e:43:a7:07:c9:
                    50:49:7e:7a:dd:85:a8:bd:c2:a8:9f:b0:29:02:71:
                    24:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8B:8C:9F:82:C2:3A:12:E2:9E:86:B2:3E:FB:29:EC:77:33:B0:5F:16
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/1dccc5c9-3a64-3a79-bb91-54464da82820.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.42.178.30/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         20:49:ee:d8:33:4c:9e:fc:08:c3:07:cc:37:cf:91:ee:50:70:
         30:6f:e2:18:7c:82:9c:7a:f5:6a:6b:22:ef:d6:e1:6a:05:39:
         bf:a7:bc:54:66:30:45:cb:e3:7a:4c:4f:2d:d3:d5:67:34:22:
         2d:ce:f2:68:56:33:62:96:cf:56:4c:ce:8d:27:50:cc:03:c5:
         34:1f:ce:88:e0:ba:8e:e3:70:2e:c9:3e:40:8f:cf:89:75:7e:
         49:8e:3c:bf:9a:96:58:9b:43:48:0e:fe:29:a8:3c:47:41:d9:
         e5:18:9d:49:bf:15:c9:76:7d:de:ea:d4:14:3e:5d:e8:b9:a5:
         03:f4:34:8e:ac:54:f9:89:06:55:33:d5:86:bb:a6:1b:0a:69:
         10:f3:b4:bc:bd:57:d3:f8:99:f9:40:7a:21:9c:86:46:c5:a7:
         44:ae:04:fa:ca:71:79:d9:0a:4a:e3:e1:de:03:bc:ea:99:32:
         6f:96:ed:7a:4d:41:42:1a:ce:f9:cc:c3:55:73:92:3d:ad:1d:
         05:eb:1c:3f:27:47:42:c2:49:87:34:fc:f0:4a:26:c9:7c:46:
         62:84:d8:11:f7:6a:4a:08:3c:d6:d0:92:b1:7b:7e:b5:41:f9:
         08:d4:22:37:70:55:fd:ab:f0:af:a6:1f:d1:ce:a8:7d:8f:2e:
         cb:12:83:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 21 19:32:53 2026 by rpki-client