Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/28e22d1b-b11a-30fc-bfc9-83e77253140d.roa
File:                     28e22d1b-b11a-30fc-bfc9-83e77253140d.roa (raw, json)
Hash identifier:          CUhFroGSAYOak/Hy2VJ1nxP4MFbdFOREjfXa0oBh59k=
Subject key identifier:   75:FB:5A:D3:E6:39:6F:FF:6E:8B:B2:9C:44:72:7F:CB:32:87:E2:E0
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584F10378AC507E7DC17CC256980
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/28e22d1b-b11a-30fc-bfc9-83e77253140d.roa
Signing time:             Fri 04 Sep 2026 13:00:12 +0000
ROA not before:           Fri 04 Sep 2026 13:00:12 +0000
ROA not after:            Thu 03 Dec 2026 14:00:12 +0000
asID:                     396602
IP address blocks:        192.54.112.30/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 24 Sep 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:10:37:8a:c5:07:e7:dc:17:cc:25:69:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Sep  4 13:00:12 2026 GMT
            Not After : Dec  3 14:00:12 2026 GMT
        Subject: CN=30c6230f-7beb-4494-a14b-6e1f9a313663
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:90:28:93:41:3a:f2:3d:8c:2b:d8:ba:12:24:7a:
                    ed:47:af:9b:34:ba:a9:51:0b:05:fd:db:42:e3:3a:
                    f5:8c:94:f4:03:e4:80:35:8b:2e:a4:da:d0:c9:11:
                    c0:11:e7:26:3d:0a:bd:55:40:80:87:fe:20:42:ae:
                    a9:6f:0c:4e:c9:7b:8e:b8:be:d8:35:e7:aa:78:5b:
                    b0:86:e0:c8:3b:d1:5a:ec:14:dd:42:71:60:c9:f9:
                    6b:34:06:52:44:49:53:41:3c:36:8f:04:38:af:64:
                    25:a4:a1:fb:6a:de:a9:e5:f8:a2:c4:bb:e2:52:c9:
                    8b:0b:66:c6:46:c4:75:28:1e:6f:ce:98:e4:70:69:
                    e4:ee:37:eb:5b:63:86:11:fa:09:c5:81:14:98:ff:
                    77:ba:bf:97:94:b8:41:f1:dc:2f:4b:ae:da:45:4c:
                    75:f2:3e:b8:f2:25:c0:33:b2:fb:76:63:1c:a7:29:
                    4e:19:c8:ec:94:0e:e4:ba:6a:49:50:2c:e7:58:9f:
                    b1:20:bf:67:88:20:62:de:f1:b3:83:b4:8c:98:7d:
                    7a:84:f8:d0:90:34:82:51:8f:85:47:7d:61:7b:ba:
                    b8:fe:ff:e6:ba:55:dc:48:53:96:89:68:0d:41:af:
                    4e:22:a7:7e:8f:ec:11:1f:bb:0a:e8:5b:6c:73:82:
                    f8:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                75:FB:5A:D3:E6:39:6F:FF:6E:8B:B2:9C:44:72:7F:CB:32:87:E2:E0
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/28e22d1b-b11a-30fc-bfc9-83e77253140d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.54.112.30/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         ae:e7:c2:55:f3:c2:f8:cc:94:45:86:b3:49:e8:7f:f2:f2:88:
         1c:23:0f:6f:4d:42:1b:3d:af:71:38:6f:7f:9c:60:60:4b:09:
         80:77:9e:72:25:5b:78:f3:d3:02:cf:2a:aa:05:d2:99:7a:21:
         48:94:e9:0c:d4:14:c0:ce:55:00:13:17:5d:dc:31:c9:1e:64:
         9e:a8:dc:43:c0:10:22:8c:ec:b0:09:83:7a:e3:30:94:32:68:
         e9:c8:db:ba:be:fd:bc:18:87:68:49:a5:5c:30:1b:87:eb:fc:
         fc:8d:ca:4f:b9:4b:05:40:18:97:38:59:7e:50:3e:9e:4c:dd:
         e2:1b:b1:51:7c:a1:ca:13:c5:88:e4:1e:ff:39:78:37:b9:6d:
         aa:b6:f1:d5:94:03:b2:4f:b6:67:a2:54:79:a7:b0:2b:f5:3d:
         ea:84:20:7c:0e:5f:b5:08:3e:7e:3c:4c:47:e9:0d:31:25:ee:
         98:fd:d8:88:ae:35:fe:39:f7:04:24:01:96:91:59:d2:3c:9d:
         bf:d4:85:79:5e:b9:92:75:ce:60:7b:42:6f:d6:2e:ab:0d:9b:
         fb:fc:7b:c1:67:20:b8:dc:5c:27:65:76:77:a2:f6:24:7e:1a:
         22:8b:24:da:7b:c0:b8:d5:f8:64:82:47:57:56:41:a5:33:71:
         89:1f:85:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 21 18:15:17 2026 by rpki-client