Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/603a32cd-7696-3730-bf9b-ebb261e7e8b5.roa
File:                     603a32cd-7696-3730-bf9b-ebb261e7e8b5.roa (raw, json)
Hash identifier:          tBQJT+RfV9llSVprHZ3i/aDDgFCPEISwOuNthWYcQuo=
Subject key identifier:   AA:B3:0E:31:43:B2:01:D3:B7:03:6C:69:1C:91:04:D3:FB:71:F4:3D
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584F093D1337DB12740E014C1B00
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/603a32cd-7696-3730-bf9b-ebb261e7e8b5.roa
Signing time:             Wed 02 Sep 2026 01:00:12 +0000
ROA not before:           Wed 02 Sep 2026 01:00:12 +0000
ROA not after:            Tue 01 Dec 2026 02:00:12 +0000
asID:                     396549
IP address blocks:        192.42.93.30/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 26 Sep 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:09:3d:13:37:db:12:74:0e:01:4c:1b:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Sep  2 01:00:12 2026 GMT
            Not After : Dec  1 02:00:12 2026 GMT
        Subject: CN=bc8e5a20-49b5-432b-b878-412504465031
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:2f:75:2b:d4:7e:a1:84:51:d4:31:ba:91:ab:
                    b4:49:d4:64:b3:f3:f0:da:dd:bd:f3:dd:b5:98:82:
                    68:a2:72:95:a3:56:32:b3:ae:d4:84:7c:fe:f0:73:
                    aa:a9:d3:3c:22:86:2d:79:39:db:14:ec:8a:9b:c8:
                    e2:12:c3:8b:7a:ef:84:ac:51:6e:7a:ba:b1:95:be:
                    fc:ea:25:02:04:15:23:7b:99:bd:98:aa:18:06:35:
                    a0:6e:31:5b:d8:d3:46:af:dc:29:d8:ad:a2:25:f9:
                    b5:4d:a4:11:54:1c:e6:a9:26:55:7a:e5:19:73:9e:
                    ea:9a:e0:d4:c2:5e:f4:02:bf:f5:36:77:03:fc:3a:
                    f7:8c:9c:d2:4b:ab:6c:54:b0:f1:ae:65:32:ae:f5:
                    bf:dc:bc:b5:8c:cd:78:0f:85:b4:6b:1c:b9:0e:01:
                    66:2e:77:25:d8:04:ef:5a:33:ae:d3:79:fa:f8:88:
                    37:b4:4d:f6:b0:d5:d1:f8:3f:ca:eb:ea:83:4c:cd:
                    ff:68:98:a1:7f:9c:0f:cb:e2:18:7d:53:0a:e5:21:
                    d6:0d:7c:6a:f1:3e:00:55:af:6f:f6:51:74:09:16:
                    3c:5e:07:be:2c:ef:31:a0:8d:76:d3:de:b7:fd:84:
                    12:44:df:ff:ee:4a:b2:87:59:f9:06:d8:5c:e0:d5:
                    db:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AA:B3:0E:31:43:B2:01:D3:B7:03:6C:69:1C:91:04:D3:FB:71:F4:3D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/603a32cd-7696-3730-bf9b-ebb261e7e8b5.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.42.93.30/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         09:df:d5:35:c2:ab:98:9b:37:37:90:fd:d6:5f:f5:14:7d:f6:
         05:c0:10:c2:ca:71:e9:5d:10:b8:b2:28:66:0d:09:72:06:af:
         b9:1b:77:79:5f:b4:9b:58:19:3f:6e:31:67:94:38:fd:53:8a:
         4f:c4:2a:c3:b8:47:98:b7:a0:8b:0d:5d:33:0b:17:72:b0:e0:
         48:de:83:c2:5a:76:07:d3:54:8c:5c:76:3a:87:82:d6:ba:72:
         03:7d:1f:67:96:28:af:18:41:05:85:72:41:79:7f:f2:27:9b:
         aa:55:cb:54:c9:78:6f:ba:4b:7c:9f:43:c8:ab:f0:69:5f:9e:
         5d:11:2c:64:07:bf:a9:97:1d:69:90:d2:60:6d:4e:36:3e:6e:
         d2:9f:a8:f0:66:61:4c:bf:ce:be:bd:52:c8:f6:c2:b9:c9:52:
         7b:14:58:7c:08:fe:4a:cb:3d:21:e5:4c:63:f7:80:83:ff:d7:
         a4:b6:f1:6c:a7:1d:28:58:e1:5c:e7:ce:b1:06:f5:cd:43:13:
         69:4c:23:72:a4:21:d1:65:3b:07:9d:11:3b:85:b8:f4:7c:2e:
         38:dc:e2:13:7a:bc:d1:90:12:01:2f:43:2a:d0:b5:22:24:34:
         1a:46:42:d9:f2:d1:37:bb:fc:a5:c5:cb:95:34:9f:99:d9:d2:
         67:ab:32:4a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 13:58:28 2026 by rpki-client