Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/8b74cf42-ed22-3802-8ffc-6b84e4fcd657.roa
File:                     8b74cf42-ed22-3802-8ffc-6b84e4fcd657.roa (raw, json)
Hash identifier:          urLuhidQAP0WUmxgIuUtCxBo3I0gzBh+ozlwv+Wr7uQ=
Subject key identifier:   8B:B2:AC:6E:53:8D:B4:37:64:26:A7:BE:E8:45:37:9D:FD:1F:32:40
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584F11A12CAD772E4D1A0A5E3400
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/8b74cf42-ed22-3802-8ffc-6b84e4fcd657.roa
Signing time:             Sat 05 Sep 2026 01:00:12 +0000
ROA not before:           Sat 05 Sep 2026 01:00:12 +0000
ROA not after:            Fri 04 Dec 2026 02:00:12 +0000
asID:                     396596
IP address blocks:        192.30.45.30/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 28 Sep 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:11:a1:2c:ad:77:2e:4d:1a:0a:5e:34:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Sep  5 01:00:12 2026 GMT
            Not After : Dec  4 02:00:12 2026 GMT
        Subject: CN=3a6dd7bb-3915-45f4-9f9d-631cc6adcd15
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:39:b3:3d:31:3e:1f:86:b3:e7:df:66:45:a7:
                    bb:11:6c:06:24:35:ba:93:f3:b6:f3:60:67:6f:28:
                    5f:af:57:c6:92:e1:c3:a9:c5:a6:0c:fe:3c:69:f2:
                    65:ab:cb:85:c0:ac:d2:34:60:28:cc:54:c2:46:d8:
                    93:8c:e1:b5:61:e7:20:c4:98:64:00:0a:ed:f1:d1:
                    3d:ef:e6:e7:c2:2e:70:37:15:bf:11:ad:a1:a9:72:
                    de:70:49:47:0e:70:cd:38:d4:dd:ec:83:8c:af:d9:
                    65:bd:9e:44:00:50:73:9c:63:eb:0f:fd:69:ce:86:
                    7a:df:f8:f8:9e:ca:4c:eb:a6:09:ed:e3:68:39:ef:
                    7f:b5:33:01:ef:0c:b1:18:f2:2e:0c:7f:9d:2f:f5:
                    74:aa:72:ce:07:55:1c:94:05:a2:fc:fd:2e:29:4a:
                    31:12:fa:b7:ae:50:23:9c:fa:5e:7e:c2:86:58:a8:
                    d4:84:ac:00:81:25:d0:fa:20:c9:3f:ba:0e:76:9e:
                    61:43:01:13:43:18:7e:e0:c8:33:e8:47:5f:55:20:
                    00:ce:35:56:24:09:f2:7f:5f:7d:15:d0:c3:5a:d8:
                    06:e3:e8:f6:0d:91:58:6d:50:53:2f:b4:f7:00:6a:
                    99:04:ff:9c:21:cf:a1:5a:85:ed:e6:b8:44:3d:3d:
                    4d:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8B:B2:AC:6E:53:8D:B4:37:64:26:A7:BE:E8:45:37:9D:FD:1F:32:40
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/8b74cf42-ed22-3802-8ffc-6b84e4fcd657.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.30.45.30/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         72:7a:ad:31:06:79:dd:bd:c8:ff:e5:b6:8b:e0:0c:9a:59:78:
         0d:d2:75:1a:ad:20:0e:43:6e:ac:cc:7c:ff:4b:52:43:4a:88:
         f9:da:d8:7a:6b:35:ef:78:83:ac:85:2d:1b:66:eb:c0:95:c3:
         7c:ac:6c:28:f2:32:6d:ca:f6:e7:78:24:31:14:4d:1a:7e:fb:
         f7:b9:8d:5f:94:91:e2:ec:4d:db:a5:1c:03:32:b4:7b:80:94:
         cd:8d:f0:c1:1c:2a:7e:2f:13:b6:53:f3:9f:91:0c:20:05:17:
         a0:de:8e:ff:db:39:e0:22:55:3a:6d:ed:4e:27:24:7c:1c:e2:
         c4:f6:bd:95:1f:71:8b:b0:2c:4e:78:53:9b:91:85:33:0e:27:
         e7:2e:c2:43:30:ff:53:98:03:18:a6:57:34:9f:30:0d:c5:29:
         4e:81:52:09:f4:d0:65:4f:d8:06:5e:31:7b:2a:4c:ca:41:22:
         f0:29:0d:d8:fd:5c:db:a3:ab:79:ac:eb:7d:99:4f:e3:3f:4a:
         c0:c0:7a:6c:21:db:a0:cd:8e:3f:d1:10:2f:1c:38:e5:95:c2:
         8c:3c:34:21:b3:07:62:b9:24:6d:0f:b1:2d:12:e6:e7:8f:db:
         f5:8f:ef:b5:e7:ea:1d:21:d6:7f:2f:c5:47:1a:22:94:46:a3:
         d4:e6:26:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 26 09:21:13 2026 by rpki-client