Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/6648beec-8493-332e-8ad6-df3ed87b3180.roa
File:                     6648beec-8493-332e-8ad6-df3ed87b3180.roa (raw, json)
Hash identifier:          Bt22MRX2DqaiVtWNXInP3coFqAGspjLjb80HtjyE9Yk=
Subject key identifier:   BB:FE:FE:71:73:91:20:EE:89:8C:21:F3:19:35:A0:A8:D3:6B:C8:13
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584F1037A3145408A1DD81842560
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/6648beec-8493-332e-8ad6-df3ed87b3180.roa
Signing time:             Fri 04 Sep 2026 13:00:12 +0000
ROA not before:           Fri 04 Sep 2026 13:00:12 +0000
ROA not after:            Thu 03 Dec 2026 14:00:12 +0000
asID:                     397210
IP address blocks:        192.54.112.30/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 28 Sep 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:10:37:a3:14:54:08:a1:dd:81:84:25:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Sep  4 13:00:12 2026 GMT
            Not After : Dec  3 14:00:12 2026 GMT
        Subject: CN=648a5a0b-f149-4853-8a60-d78bcf1680dc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e9:6b:1c:b8:a3:33:5e:6c:f7:31:fd:b4:e2:61:
                    84:25:d5:f5:7c:bd:fe:3a:a0:2c:c7:96:ba:1d:ce:
                    d1:33:f2:51:a5:e5:c9:fd:16:29:a0:b4:6e:2e:c3:
                    b6:11:63:fb:50:a9:ef:9e:89:76:f7:3a:6b:18:45:
                    47:59:40:76:e3:54:a9:d6:a4:c2:f1:49:0e:73:19:
                    75:dc:9a:ab:b8:57:09:f1:13:05:5e:6a:9c:2a:f0:
                    75:2e:57:b0:58:5d:89:0e:ec:f2:01:a9:76:a1:c3:
                    0b:cd:78:fd:c3:b1:99:19:dd:32:2f:10:6b:0b:68:
                    96:68:be:b5:4a:5f:1b:da:28:f9:2d:6a:c2:4d:09:
                    cd:c9:0d:a5:53:b3:3c:ab:12:a2:ea:f7:5e:3b:b9:
                    e8:bc:24:96:83:40:8c:02:1a:1f:d9:e1:4b:0a:d6:
                    ff:f5:0a:12:b0:c1:e9:44:79:a5:ba:72:d4:72:62:
                    07:38:23:41:cd:32:b2:f8:1e:f9:a1:4d:d4:dc:f5:
                    34:72:2c:bc:4e:2d:d9:eb:ba:2d:3b:e4:d3:00:ab:
                    ef:1e:48:cb:ed:02:d9:c8:2c:18:ef:a7:79:28:b7:
                    72:46:8a:d1:eb:9b:7c:76:b5:2e:bd:28:32:a8:86:
                    d5:3b:c0:0b:b2:00:d5:96:89:7c:e3:ea:af:11:2b:
                    b1:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BB:FE:FE:71:73:91:20:EE:89:8C:21:F3:19:35:A0:A8:D3:6B:C8:13
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/6648beec-8493-332e-8ad6-df3ed87b3180.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.54.112.30/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         b6:6f:d8:ec:5a:cc:42:03:48:fa:62:5c:e8:e4:45:5a:be:a1:
         83:7f:13:3f:a2:88:c2:d5:cb:6a:2b:8f:c7:d8:f2:48:f3:c5:
         a3:d9:f9:0f:cb:b9:9b:72:6c:fe:64:e6:6d:e9:ff:b3:db:90:
         36:a4:c0:27:aa:4a:2c:3c:f9:d7:12:08:9f:60:3d:0d:bc:6a:
         98:22:74:c8:8b:2e:c0:0e:07:af:af:0c:10:cd:c3:06:6e:af:
         85:c3:c5:37:da:5b:9b:16:be:6f:1b:1f:4e:c2:9b:ac:ca:8c:
         ba:89:88:58:f3:96:4c:c1:d4:6e:3a:d4:90:23:51:e7:41:45:
         2f:c9:c6:57:02:7f:3e:97:ab:9a:75:42:3f:7a:74:80:38:85:
         e0:62:11:c8:43:f6:c3:5c:84:3b:88:96:83:37:f8:1c:4c:fd:
         bc:a9:6d:7c:76:ab:4f:b4:4e:bc:41:bc:5f:cd:ab:26:74:d5:
         50:6b:e6:c1:76:72:8a:23:b6:d9:46:4f:e7:d6:eb:22:fc:7e:
         90:44:b1:c4:70:df:93:45:7b:73:00:c8:5e:34:1b:1e:2e:0d:
         24:f9:15:13:6f:42:e8:ae:7f:60:1c:d1:28:f7:45:14:c6:d5:
         5e:6d:13:61:bb:38:f3:8c:97:2b:49:28:6b:72:59:f4:9f:e3:
         41:e7:1b:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 27 00:18:05 2026 by rpki-client