Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/4fbae04a-08e1-36b7-89f4-befb02d5ea91.roa
File:                     4fbae04a-08e1-36b7-89f4-befb02d5ea91.roa (raw, json)
Hash identifier:          +HpJWe5YeGbshlrKy3XUPwPmTyqbPEtuz4nnF3aXKz4=
Subject key identifier:   37:ED:E2:28:01:5D:BA:24:6C:4C:AE:57:D8:7B:DB:10:9E:55:12:A5
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584F173246C516B7AF9BEED79080
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/4fbae04a-08e1-36b7-89f4-befb02d5ea91.roa
Signing time:             Mon 07 Sep 2026 01:00:11 +0000
ROA not before:           Mon 07 Sep 2026 01:00:11 +0000
ROA not after:            Sun 06 Dec 2026 02:00:11 +0000
asID:                     397208
IP address blocks:        192.52.178.30/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 24 Sep 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:17:32:46:c5:16:b7:af:9b:ee:d7:90:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Sep  7 01:00:11 2026 GMT
            Not After : Dec  6 02:00:11 2026 GMT
        Subject: CN=4d168046-c69a-4432-b266-58f580cccd72
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:50:a7:da:fc:a5:ef:fb:d7:00:8c:2d:31:02:
                    cf:43:01:75:35:49:64:5b:d1:5b:25:06:23:17:88:
                    e0:99:71:28:c4:58:e8:f9:60:c5:1a:aa:1a:4a:fb:
                    1f:4a:a3:1e:1f:76:4c:4d:1e:84:87:ad:2e:27:54:
                    f5:10:71:f1:91:ad:1f:d4:91:0f:c7:86:7e:e2:77:
                    5a:12:30:46:cc:4a:5e:80:75:56:aa:46:c7:c6:00:
                    d3:d8:36:12:c4:fa:dc:78:29:4d:fd:dd:b2:00:11:
                    be:32:0d:df:47:8c:79:14:5c:56:5b:94:81:7f:18:
                    d0:2e:79:45:2a:7e:4c:77:a6:cf:f3:bd:c7:d0:31:
                    f7:fe:fc:6c:a1:dc:4d:dc:90:e6:69:f6:f0:1b:98:
                    d0:08:86:17:12:32:cd:cb:8b:a1:9f:67:c8:74:fc:
                    15:20:34:65:36:8f:7f:b4:ca:6a:2f:64:06:f7:94:
                    ef:88:f0:1e:6c:0b:9f:a3:8f:c1:9a:f2:41:e1:ef:
                    2d:a7:1b:e8:26:c8:17:34:fc:32:a8:77:5b:f5:37:
                    5b:cc:c1:00:7e:11:27:1b:42:64:5a:a4:d3:5f:a6:
                    4d:60:43:0c:89:d5:de:4f:2f:13:f4:dd:b6:92:44:
                    f4:37:ac:5d:3b:14:06:ce:bb:32:37:ca:ba:56:a0:
                    d9:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                37:ED:E2:28:01:5D:BA:24:6C:4C:AE:57:D8:7B:DB:10:9E:55:12:A5
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/4fbae04a-08e1-36b7-89f4-befb02d5ea91.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.52.178.30/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         9e:5c:46:78:8b:37:b3:c0:a2:d7:cd:83:64:5d:9a:ad:b3:9c:
         02:e9:e1:77:f4:d1:c9:77:69:ff:0e:08:62:99:60:ad:ea:15:
         92:5d:b9:1d:cf:ea:b3:25:d5:e4:3a:af:3d:1e:ac:6d:d2:6a:
         17:4c:66:96:48:11:ce:58:04:d6:0d:c2:40:73:b6:f2:a4:46:
         f2:2a:a6:c7:a6:9a:61:96:e8:85:a7:0c:ef:5b:1f:79:40:b1:
         6e:43:fe:12:75:3c:39:74:6b:be:0c:e2:33:39:f0:49:94:e4:
         a7:86:cc:b4:03:36:d3:6c:0f:91:2f:e7:c3:f9:a8:d7:8b:d0:
         7e:d5:45:59:23:92:e5:1e:74:4c:5f:45:9d:fa:0d:1e:3f:b2:
         e8:ee:f8:43:c6:ec:4b:db:bf:21:ed:6b:bf:26:30:e0:e5:3b:
         dd:a5:47:60:03:3f:fb:37:43:07:71:6a:4b:ea:65:07:b2:7f:
         d9:a6:06:eb:82:67:9a:d3:71:f0:bb:a4:df:2e:2c:3c:c9:96:
         b9:3c:32:3b:5d:6f:72:88:62:a8:5b:ae:b2:c6:13:85:88:f6:
         3e:68:c6:3d:d0:ff:9d:4d:3d:e6:20:b4:ac:65:78:aa:ae:4b:
         df:4d:e0:65:ff:35:b7:85:04:bb:5e:e5:1a:ff:1c:11:6b:b1:
         22:43:b6:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 19:02:41 2026 by rpki-client