Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/8795ccc0-933f-3248-9d1f-e7a882b2bb39.roa
File:                     8795ccc0-933f-3248-9d1f-e7a882b2bb39.roa (raw, json)
Hash identifier:          mkWy82j1+l9h6ztzy0EzE9h0f/dRzBCWll41+RrsZEc=
Subject key identifier:   93:8F:A4:51:43:A6:A2:4A:0D:D7:C2:1A:19:C5:02:A1:E1:3F:92:EC
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584F11A12D09A391F5D10A777D00
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/8795ccc0-933f-3248-9d1f-e7a882b2bb39.roa
Signing time:             Sat 05 Sep 2026 01:00:12 +0000
ROA not before:           Sat 05 Sep 2026 01:00:12 +0000
ROA not after:            Fri 04 Dec 2026 02:00:12 +0000
asID:                     396563
IP address blocks:        192.30.45.30/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 24 Sep 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:11:a1:2d:09:a3:91:f5:d1:0a:77:7d:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Sep  5 01:00:12 2026 GMT
            Not After : Dec  4 02:00:12 2026 GMT
        Subject: CN=2ddee112-853d-4bd0-8d57-9b5fe90a7c57
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:70:21:f7:0c:5e:ae:d9:6e:5a:8d:0d:3c:a6:
                    1e:03:60:b3:4d:46:63:83:cb:17:ea:03:36:df:6e:
                    6b:90:66:8a:6f:b3:a6:f9:05:f4:96:bd:b6:13:00:
                    77:66:25:08:17:45:da:02:79:4c:93:b5:c8:97:d6:
                    11:8a:15:0e:40:ca:13:61:66:18:af:bc:60:84:74:
                    7e:33:98:55:3b:c9:ae:3d:99:0e:12:c3:f4:9a:77:
                    32:f0:df:07:1f:19:f6:ee:62:46:14:5d:9b:75:67:
                    bc:ed:8d:08:82:91:15:54:47:a3:86:c7:5a:e5:f2:
                    52:ef:43:0b:c8:02:fd:06:d6:84:42:c6:c0:16:71:
                    c2:63:e0:ac:1b:fc:bf:83:1c:69:f0:27:ef:c6:26:
                    15:c9:a2:3c:c6:d6:7c:cb:01:ad:d6:69:f1:d3:6b:
                    63:1c:b2:37:b6:a2:39:3c:92:3b:d3:25:c7:49:fb:
                    3e:f6:4a:36:cb:6c:02:40:c2:37:3b:13:49:0a:c3:
                    24:a4:75:50:84:27:d1:fb:5e:62:ae:b8:12:a9:e3:
                    e0:34:ab:22:3d:7a:18:95:7a:4d:9a:a0:cf:f7:e2:
                    be:46:28:77:fc:35:a2:5f:84:6c:1b:dc:dc:34:ba:
                    38:09:0d:fe:2e:29:67:2a:67:b6:01:5a:a2:ed:d6:
                    44:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                93:8F:A4:51:43:A6:A2:4A:0D:D7:C2:1A:19:C5:02:A1:E1:3F:92:EC
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/8795ccc0-933f-3248-9d1f-e7a882b2bb39.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.30.45.30/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         01:86:44:a9:64:f9:e5:64:c1:be:39:c8:01:8d:42:b0:7b:52:
         99:a4:a0:6d:41:f3:d9:af:5c:6b:14:df:b3:6b:3f:29:22:1d:
         b3:1a:9a:0f:54:85:e6:d1:f7:5a:a6:5e:8e:3a:83:e4:c2:a0:
         97:dc:69:bb:db:2d:9f:9c:0a:89:57:4a:c4:12:24:76:45:33:
         11:2d:c6:08:7a:d3:4a:f2:a9:b8:80:59:0d:2c:e4:c8:bb:58:
         7e:1d:12:fd:9a:95:f1:3a:24:1c:c3:d5:ba:ba:59:d8:96:9b:
         1c:c1:2e:ee:29:a9:a5:b8:52:89:61:80:d0:cf:a8:17:c7:17:
         8c:93:c9:4f:ff:db:f5:d1:f0:e8:48:f2:78:5a:81:f9:e1:24:
         51:42:ec:2b:23:30:1c:b0:98:40:7b:e0:af:b2:33:ab:e6:aa:
         83:21:2a:0d:36:c8:db:74:ea:25:2d:c7:c0:21:20:ed:ce:25:
         51:7d:c0:62:1c:f3:68:1d:5b:17:e2:d1:a6:19:71:fe:c2:7c:
         4f:f6:c8:87:19:e4:84:31:b5:c3:d3:97:2f:82:55:0d:d6:8b:
         be:e3:58:89:b7:02:1d:cc:9d:1f:2a:dd:e0:df:1a:f8:b0:6c:
         e3:b1:02:dd:30:67:be:78:ea:b2:7b:50:e0:d2:40:b7:8d:69:
         cc:b6:cc:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 21 20:14:27 2026 by rpki-client