Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/532a1c92-944e-3a42-a43c-5280f81c84a7.roa
File:                     532a1c92-944e-3a42-a43c-5280f81c84a7.roa (raw, json)
Hash identifier:          jgByY4lxTmNWjSWknHeZKRsyAZtFwhS4jen9Dm5ctFg=
Subject key identifier:   5D:E3:13:B3:98:54:69:E5:86:9E:85:CB:F5:5C:24:49:9E:F9:AC:5F
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584F1037A3EB89D498517B1F8980
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/532a1c92-944e-3a42-a43c-5280f81c84a7.roa
Signing time:             Fri 04 Sep 2026 13:00:12 +0000
ROA not before:           Fri 04 Sep 2026 13:00:12 +0000
ROA not after:            Thu 03 Dec 2026 14:00:12 +0000
asID:                     397203
IP address blocks:        192.48.79.30/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 24 Sep 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:10:37:a3:eb:89:d4:98:51:7b:1f:89:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Sep  4 13:00:12 2026 GMT
            Not After : Dec  3 14:00:12 2026 GMT
        Subject: CN=b9289233-76fa-440c-ba14-6edcaae5772d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:e9:5f:22:74:6c:71:3d:a7:89:6c:64:61:cb:
                    3f:bf:1c:5e:8e:5e:37:4d:d1:f5:cd:bf:ae:dc:f0:
                    a9:65:bc:73:79:07:82:5b:27:7b:f0:20:66:2a:4e:
                    bb:69:06:fc:35:0a:dc:a4:04:cd:7a:f4:9f:e4:5c:
                    0e:c5:f2:19:d9:b0:4d:3d:7a:88:08:70:03:0c:d0:
                    0b:76:56:cd:4c:6d:78:d4:c4:c1:cc:ac:08:81:1b:
                    4a:22:10:75:28:3d:e2:fc:75:dd:65:7e:e2:c6:20:
                    7d:bc:11:b5:3e:d8:ef:5d:77:2c:dc:a0:a5:64:6a:
                    18:98:eb:f3:75:f7:b0:4e:6c:4b:51:f6:74:cd:b9:
                    af:48:c8:4e:06:b4:05:4a:af:d9:29:13:51:10:c0:
                    04:fb:2a:95:e3:38:79:c4:f3:de:03:8a:32:17:99:
                    3f:25:35:b0:ec:be:bb:b2:9b:fd:3a:6c:c1:c2:e6:
                    7f:ca:d8:de:3d:dd:7e:61:3e:fe:cd:a7:7a:b8:e8:
                    4c:34:a4:4d:b1:c4:ae:9a:f4:91:a1:59:e9:d7:ff:
                    bd:6c:b4:91:17:48:e7:f1:ef:43:a8:57:53:38:3d:
                    3f:64:2a:12:72:a5:a4:96:d3:a0:8a:eb:26:09:95:
                    77:c6:57:55:05:57:18:a6:90:a1:99:8e:dc:1b:40:
                    e2:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5D:E3:13:B3:98:54:69:E5:86:9E:85:CB:F5:5C:24:49:9E:F9:AC:5F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/532a1c92-944e-3a42-a43c-5280f81c84a7.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.48.79.30/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0c:90:09:e2:93:bf:0c:7c:5a:b4:37:0d:cd:38:4a:23:1c:4b:
         72:71:3b:81:d9:e0:dd:7d:78:9e:4d:b9:37:00:47:47:0a:11:
         18:1f:47:1e:64:73:dc:ef:0f:e6:bd:c8:3a:c2:38:96:f9:ac:
         e8:08:60:09:0b:1e:8a:99:51:7f:cf:40:a7:d3:63:0d:d3:5e:
         10:d2:3c:0e:d5:b6:d2:7f:e3:da:b8:dd:8e:99:b4:2c:eb:30:
         ec:a7:83:39:df:c3:0c:34:46:54:1d:86:ae:28:5b:c2:80:ca:
         2f:d4:b8:63:a4:9a:a0:b0:0b:fc:2f:90:ad:83:1e:55:cd:eb:
         8e:64:fa:87:92:b7:ce:c0:33:f0:49:90:d0:8a:ac:74:20:5a:
         0a:7f:53:2a:78:aa:db:29:25:47:d8:b0:dc:e8:47:1e:f4:1d:
         89:3c:72:d1:56:89:f6:18:b9:2f:83:4a:0a:3d:53:c5:f0:bc:
         6b:98:bd:14:f6:ab:4b:e7:ad:c4:c1:a0:c3:ae:d8:6f:e9:a6:
         a9:7d:95:ad:f2:c1:b6:29:ee:33:9e:03:50:a2:00:7d:1a:b1:
         d2:ef:a5:81:6b:b6:ab:3b:15:c8:f9:cc:04:9c:09:8c:0e:5f:
         76:6d:ee:7a:8f:c4:5e:af:63:b9:e3:05:3f:c6:5c:4d:02:92:
         67:cd:45:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 08:29:27 2026 by rpki-client