Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/23e71739-87c4-3497-8dd4-6ab45fee8a44.roa
File:                     23e71739-87c4-3497-8dd4-6ab45fee8a44.roa (raw, json)
Hash identifier:          JpktwDwB9LeDTpYFKFSQa+agJvJESYeFQq2S8ttP6pE=
Subject key identifier:   65:EE:F6:72:1E:9F:10:F9:AE:2A:25:54:CB:A3:D6:ED:61:B1:BF:78
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584F10379CCEA16A3F1FCB7A6180
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/23e71739-87c4-3497-8dd4-6ab45fee8a44.roa
Signing time:             Fri 04 Sep 2026 13:00:12 +0000
ROA not before:           Fri 04 Sep 2026 13:00:12 +0000
ROA not after:            Thu 03 Dec 2026 14:00:12 +0000
asID:                     19836
IP address blocks:        192.48.79.30/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 28 Sep 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:10:37:9c:ce:a1:6a:3f:1f:cb:7a:61:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Sep  4 13:00:12 2026 GMT
            Not After : Dec  3 14:00:12 2026 GMT
        Subject: CN=f27e97c6-2f1b-4214-bb11-4d2f0ca12c6a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:c5:55:3d:92:05:77:76:17:f1:ac:16:c1:49:
                    42:66:da:14:b9:41:f5:f5:78:99:da:7d:3d:96:b3:
                    f7:19:bd:d2:ac:47:5d:5c:c9:80:4c:73:9d:f2:b0:
                    d3:ed:c1:da:51:b1:ae:29:cb:6b:d4:5e:88:71:83:
                    11:29:78:a0:5d:f0:20:d8:c8:00:8d:3f:08:33:d1:
                    23:f9:ab:3f:7a:5e:b2:18:3b:83:56:5a:ce:9a:d9:
                    d7:d9:ec:f8:d3:44:60:43:c8:50:60:dc:1d:1d:10:
                    e3:5e:3f:0e:84:a3:6c:cf:e8:ca:33:a4:48:1e:81:
                    72:88:8f:ca:90:c7:79:9f:88:de:72:25:ec:1b:c5:
                    9b:28:de:40:a3:6b:b4:b7:e0:ea:3f:58:40:1b:e7:
                    60:68:8f:3a:c0:9c:c1:02:44:35:54:69:9e:ed:3f:
                    63:6f:37:2a:d5:7d:a4:40:37:09:ca:5b:ed:3e:56:
                    c3:2f:57:66:f2:5c:9e:05:a8:4f:da:fa:d5:1a:b0:
                    4a:f1:ea:61:e0:b6:fd:e7:e8:0a:ac:93:84:00:9f:
                    f3:6b:88:2f:85:0c:5f:e6:b9:b5:af:93:cb:f2:95:
                    3c:48:74:be:51:ef:73:0b:4c:45:7d:ea:2f:ef:8c:
                    51:ac:1d:cf:80:4f:10:04:7b:dc:62:69:c0:bd:1c:
                    46:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                65:EE:F6:72:1E:9F:10:F9:AE:2A:25:54:CB:A3:D6:ED:61:B1:BF:78
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/23e71739-87c4-3497-8dd4-6ab45fee8a44.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.48.79.30/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         33:af:be:dc:e9:ee:56:5d:cd:3d:72:d7:69:f8:17:ef:3c:11:
         e2:4d:1a:94:60:78:be:4b:1a:93:64:f3:97:0d:c6:91:78:8a:
         23:ab:31:2b:39:8e:41:a9:50:dd:f5:a6:f2:b5:6a:72:8e:ab:
         0b:3d:13:c4:62:a9:19:2f:6d:b1:3a:3b:dd:b0:96:9c:47:58:
         31:62:bf:8b:a6:61:5b:cd:6c:04:bd:1e:89:43:d0:8a:80:25:
         ca:bb:fc:68:72:3d:46:ee:81:9c:b7:34:07:e9:ec:89:21:c6:
         05:86:59:75:02:1a:0a:74:bd:50:52:9f:b3:cc:a9:e9:2e:49:
         ae:c7:84:e6:9e:5e:df:e3:0b:03:ca:f3:03:a3:41:2f:dc:7f:
         7b:8e:48:3a:90:b5:60:c1:de:c0:f5:b9:94:9b:93:f1:c0:17:
         de:5a:a1:e1:61:6c:c5:8f:90:11:ad:2d:de:26:b3:7c:9e:1c:
         b2:42:bc:b6:61:76:5b:e6:ee:4b:6c:70:02:bc:c0:bc:18:2e:
         0f:2e:50:86:7d:eb:91:83:65:66:2b:74:23:22:19:0f:c3:e9:
         a7:4f:41:a6:c6:36:2a:fa:a9:29:12:ff:76:0d:38:25:0b:ea:
         2d:81:4a:24:b7:7a:d4:1e:76:db:dd:2a:7c:df:95:dd:54:75:
         04:42:92:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 26 22:40:04 2026 by rpki-client