Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/8a3c8a29-91c6-3347-ad8c-d0ebefb80cdc.roa
File:                     8a3c8a29-91c6-3347-ad8c-d0ebefb80cdc.roa (raw, json)
Hash identifier:          AgacOjW2sNtCvsGgGMZLsNAuZG6xQoGKh/jcJ0GBtWk=
Subject key identifier:   9B:A2:D9:B0:25:B5:F3:50:83:B5:25:A8:C7:B4:EA:B0:10:DC:44:A0
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584EA796A3A9E66B3772DDAEC600
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/8a3c8a29-91c6-3347-ad8c-d0ebefb80cdc.roa
Signing time:             Wed 29 Jul 2026 01:00:12 +0000
ROA not before:           Wed 29 Jul 2026 01:00:12 +0000
ROA not after:            Tue 27 Oct 2026 01:00:12 +0000
asID:                     397202
IP address blocks:        192.68.130.30/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 30 Jul 2026 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:a7:96:a3:a9:e6:6b:37:72:dd:ae:c6:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Jul 29 01:00:12 2026 GMT
            Not After : Oct 27 01:00:12 2026 GMT
        Subject: CN=c805a5ba-5391-480a-881f-c623c8b73e2c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:69:a6:a6:38:1c:73:78:0f:74:f6:d3:4c:91:
                    9b:cf:c9:07:bb:29:f8:50:95:c4:e0:7f:9e:a3:b4:
                    b9:df:ef:fd:b8:c3:3a:04:bb:a0:06:02:af:aa:b6:
                    cc:00:27:92:0b:d1:00:a8:96:90:2b:a1:f9:87:89:
                    da:62:27:43:0d:1c:30:04:91:f3:99:87:43:3a:a6:
                    5b:98:32:4e:bf:10:64:e5:a5:d6:1a:34:cc:e1:54:
                    94:ae:ee:d2:75:25:6f:4f:b1:7b:7d:02:f9:de:53:
                    8e:08:26:63:9b:d0:d7:3c:2e:46:5f:c5:be:b7:90:
                    9b:a2:2b:d6:a0:ea:dc:3e:fa:93:4c:9f:cd:7e:12:
                    a1:b8:cc:22:7c:50:ce:ec:50:85:da:8c:4f:6d:63:
                    9a:8f:50:90:73:7f:98:74:7e:c6:8c:b1:7e:e2:0f:
                    8b:02:20:c7:40:3b:35:14:69:8d:b8:b0:17:8e:2b:
                    f0:26:b8:2b:8f:67:b9:88:8f:be:d0:b1:e3:b6:4e:
                    29:e4:0a:0d:6a:4c:da:10:b8:eb:09:fb:36:ec:89:
                    59:a9:15:9b:aa:1b:59:91:88:31:8e:f4:1d:fd:ef:
                    a8:b4:b9:7d:64:00:e1:d2:72:20:01:3e:95:4e:3b:
                    5e:a0:44:67:9e:d1:8e:96:32:8d:8e:19:14:18:b0:
                    be:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9B:A2:D9:B0:25:B5:F3:50:83:B5:25:A8:C7:B4:EA:B0:10:DC:44:A0
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/8a3c8a29-91c6-3347-ad8c-d0ebefb80cdc.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.68.130.30/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         06:fc:e7:35:2e:80:27:8e:9e:a2:99:0e:00:af:cc:5b:8e:7e:
         e6:2e:1f:cd:32:89:d0:40:ad:cd:17:6f:2c:d8:7d:3d:ff:b9:
         a2:9d:9f:12:5b:da:f9:5b:ae:d0:28:50:00:78:e6:c4:c5:12:
         e5:f1:a3:6f:bf:aa:59:c2:00:8c:79:85:7e:80:b8:c0:52:fe:
         1e:6f:08:6a:21:8e:0f:ef:0b:90:79:11:ba:95:df:a2:27:68:
         76:5c:60:9a:fb:3c:38:74:91:8c:e8:62:4d:11:0e:43:0c:77:
         25:91:06:dc:13:13:58:5b:2d:ac:30:82:0b:33:f2:63:ef:37:
         be:e7:c0:24:9d:3a:05:4b:38:07:ed:bc:7f:d9:c3:78:46:da:
         a7:6f:5c:1b:7f:0d:95:c5:e3:d7:9d:8e:d3:ca:1f:b7:3b:e7:
         b9:0d:d2:cd:83:df:c9:79:c3:61:2f:04:a7:37:8f:e7:1c:58:
         09:88:e2:ed:72:68:4a:cf:26:bc:ad:8c:e9:d9:4a:40:1c:01:
         42:64:af:85:90:ea:a0:a4:25:0e:ef:63:a4:e2:43:7a:b1:0c:
         01:8d:58:61:e4:d1:33:05:d7:46:fa:57:3d:ed:46:9e:ca:1a:
         82:89:39:b4:a2:44:ff:d6:3e:a5:6d:47:75:95:6d:ba:25:a1:
         8e:be:47:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 06:39:41 2026 by rpki-client