Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/4a947910-940f-3fbf-8f18-9650ceda6005.roa
File:                     4a947910-940f-3fbf-8f18-9650ceda6005.roa (raw, json)
Hash identifier:          sr07uuTj0XabLz3yfyGpeJqewdp1vdFgGAPHkRt6J28=
Subject key identifier:   2B:C6:67:7D:35:35:4F:AF:2D:16:4C:44:E4:D0:3D:72:DC:7E:CB:AD
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584F067289CBE662C5993D15A5C0
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/4a947910-940f-3fbf-8f18-9650ceda6005.roa
Signing time:             Tue 01 Sep 2026 01:00:12 +0000
ROA not before:           Tue 01 Sep 2026 01:00:12 +0000
ROA not after:            Mon 30 Nov 2026 02:00:12 +0000
asID:                     396565
IP address blocks:        192.82.134.30/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 24 Sep 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:06:72:89:cb:e6:62:c5:99:3d:15:a5:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Sep  1 01:00:12 2026 GMT
            Not After : Nov 30 02:00:12 2026 GMT
        Subject: CN=7fe79239-ac2c-4c7b-947e-7878401dc16c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:15:9c:16:b5:26:c0:d3:0b:12:26:73:61:8e:
                    fd:dd:40:5b:4e:91:09:31:b1:58:2e:0d:d7:60:44:
                    57:79:3d:a3:e2:fd:b1:9c:10:1b:4b:fa:12:36:92:
                    73:89:16:62:6c:94:29:ac:9d:a3:43:99:4d:a8:8c:
                    72:22:a6:1b:cf:d1:07:6f:e2:9e:7e:99:a4:ab:1f:
                    ae:d2:3b:2b:ea:55:b7:c4:6c:cb:bb:ea:53:5f:38:
                    96:c4:95:73:55:fd:9e:64:03:84:62:0d:8f:c2:34:
                    ef:82:4d:dc:f5:28:da:b3:c6:5e:3e:93:a7:81:61:
                    ad:7e:a7:49:5c:58:14:a1:fe:89:63:6d:61:b1:bd:
                    e6:8e:63:9e:49:3f:d2:d7:4b:71:1b:a9:62:03:92:
                    7f:53:1e:66:bd:26:c8:d5:4a:d8:31:e0:8c:8e:9f:
                    32:ca:ba:35:53:01:1b:bb:92:96:4e:f3:23:0e:cc:
                    8c:36:8f:36:2a:9a:51:74:87:22:f3:8e:10:0b:74:
                    f6:28:21:a2:17:e5:35:c3:0d:7b:33:7a:cc:ac:8b:
                    65:61:1b:0f:20:ac:19:c0:75:d8:58:96:ff:61:b7:
                    97:18:f4:99:17:89:87:d3:e7:2b:00:2f:f1:17:21:
                    bc:04:bb:6c:08:6f:41:5c:b1:6b:6e:28:f3:fc:04:
                    bd:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2B:C6:67:7D:35:35:4F:AF:2D:16:4C:44:E4:D0:3D:72:DC:7E:CB:AD
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/4a947910-940f-3fbf-8f18-9650ceda6005.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.82.134.30/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5c:7e:0a:39:0b:e7:67:9c:0a:f3:be:72:d9:a7:78:10:13:13:
         14:7c:8d:5e:3b:b2:1d:c4:3a:34:87:d0:c8:29:f1:1c:ae:ea:
         2d:ed:b5:4e:c2:07:55:ad:f7:6f:41:ba:1c:1e:53:39:35:be:
         5a:45:55:4e:fe:97:5d:d2:35:1b:05:f8:1f:ca:1d:dc:bb:3d:
         78:86:57:17:47:12:20:c8:a7:dd:5a:89:a4:bd:32:03:76:c9:
         0f:64:ef:f4:fd:ef:01:1a:c3:5c:97:41:52:30:39:f0:3b:e6:
         e6:93:87:19:29:7c:e8:fd:00:31:fe:d6:fd:07:d1:79:4f:8f:
         9c:e4:fd:ca:45:7e:83:a3:2b:bb:2f:fe:d5:f4:91:cb:00:fc:
         71:fc:c9:54:bb:ba:f6:51:7f:df:9d:c1:34:91:34:55:0f:c7:
         12:ec:df:36:e7:64:7b:22:38:4e:5f:9d:74:99:f0:7c:0e:5f:
         33:3c:31:7b:33:dd:cc:cc:ee:c9:b8:ae:6b:67:88:19:4f:8a:
         ec:84:24:63:0f:94:0d:57:be:a8:ce:00:9a:b5:ff:71:bf:40:
         5b:8f:70:62:d9:1b:49:0a:a5:f7:11:15:3c:2d:11:91:be:d9:
         1b:d3:d8:50:ee:b5:9e:48:9f:cf:d6:37:08:e2:ed:cf:fb:45:
         f5:62:57:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 17:10:16 2026 by rpki-client