Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/89e88199-e06b-3fce-ac0d-bb23b2011e65.roa
File:                     89e88199-e06b-3fce-ac0d-bb23b2011e65.roa (raw, json)
Hash identifier:          chd1UE4b5IBWliIX0Zh1rr5YpcsgRZWNAjsYDKSpNgM=
Subject key identifier:   0B:B9:68:56:EC:8F:F6:66:6E:EC:B6:A9:CA:DA:B2:E6:1C:3B:99:B0
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584EA791D73BA0CFB3D4ED30D600
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/89e88199-e06b-3fce-ac0d-bb23b2011e65.roa
Signing time:             Wed 29 Jul 2026 01:00:12 +0000
ROA not before:           Wed 29 Jul 2026 01:00:12 +0000
ROA not after:            Tue 27 Oct 2026 01:00:12 +0000
asID:                     36621
IP address blocks:        192.68.126.30/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 30 Jul 2026 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:a7:91:d7:3b:a0:cf:b3:d4:ed:30:d6:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Jul 29 01:00:12 2026 GMT
            Not After : Oct 27 01:00:12 2026 GMT
        Subject: CN=692a95c3-d19d-42f6-8be5-3eb3a060de37
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:36:30:d7:16:7b:d9:72:0e:29:f0:99:88:2f:
                    49:8b:40:12:2a:9b:74:d1:1f:0d:5a:7c:33:e9:aa:
                    08:4b:e2:e4:2b:e5:a2:22:7a:7e:5c:05:fa:a1:3e:
                    61:b8:7d:37:5d:f4:ff:75:0f:80:b0:e2:06:bf:e3:
                    b2:f8:a7:70:01:ba:b8:e4:98:99:fa:bd:a9:64:ac:
                    65:07:f7:d4:86:54:cc:55:89:9b:70:8e:c3:0e:07:
                    4c:58:b8:81:7c:73:e7:a5:6e:01:62:5e:d5:b2:24:
                    22:09:16:34:c9:28:ba:f4:1e:cb:4c:a6:ee:72:18:
                    5d:b3:d3:7d:6c:89:2e:1d:bd:92:22:9c:fb:08:39:
                    2a:89:15:89:f7:8a:cf:51:16:eb:05:1b:a8:b7:fa:
                    e2:73:8c:e3:c9:f3:70:31:94:7c:a3:58:e9:af:90:
                    0a:5d:9f:df:4f:9c:3e:88:1c:0a:52:47:e5:8e:f6:
                    18:04:04:8d:b9:cb:bd:90:3f:16:03:eb:9e:08:d9:
                    97:5e:18:d6:fc:96:2c:2f:66:f2:74:17:d7:69:cd:
                    33:14:64:77:0d:c7:02:8a:fb:12:fb:59:e5:69:ab:
                    7b:a0:71:64:f6:4e:d1:1b:20:ea:00:d4:5d:04:ac:
                    82:c7:07:ba:61:a5:97:8a:45:8c:df:e9:99:d2:9f:
                    c4:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0B:B9:68:56:EC:8F:F6:66:6E:EC:B6:A9:CA:DA:B2:E6:1C:3B:99:B0
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/89e88199-e06b-3fce-ac0d-bb23b2011e65.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.68.126.30/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         59:5e:bb:e5:ab:c2:cc:1a:a6:f6:6f:54:b5:9b:b4:76:80:a5:
         d7:0c:e8:69:4d:5e:b2:2e:6e:37:8b:45:f4:59:9b:82:19:4e:
         da:14:1f:b7:8e:d7:ad:56:db:f8:31:41:e5:f5:4e:61:ba:17:
         b8:27:e0:d3:99:d2:c6:b1:5c:25:94:86:79:50:e2:fe:fb:d5:
         a0:21:85:f4:8d:cb:02:65:8a:4d:f0:ab:30:c0:d9:d2:73:c6:
         82:a6:0e:0d:ad:95:0f:f0:66:38:31:25:15:65:fa:c8:3c:e2:
         2b:da:16:7a:0f:59:ac:4f:57:cb:e4:ff:da:a9:91:01:05:93:
         da:27:92:1c:1b:c3:45:ff:89:d0:6d:69:6d:37:80:73:9f:12:
         ae:4e:7c:16:ff:b1:59:28:82:1d:36:0c:58:47:29:42:d1:6e:
         c7:16:66:36:92:2d:0c:05:94:35:22:8e:71:78:1b:ba:9f:62:
         68:ab:bb:2d:0b:ba:31:91:be:f4:06:59:51:4f:e8:2c:18:f9:
         0b:64:87:49:b7:f1:d9:45:26:b5:a8:a1:74:36:52:98:ac:ef:
         75:d9:74:13:7a:25:2c:26:20:6c:9c:9f:79:6f:8f:54:9b:e6:
         13:a6:e3:be:67:33:7c:c0:85:06:e7:eb:6a:4f:c7:a5:ec:fe:
         55:34:c6:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 04:28:08 2026 by rpki-client