Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/8cb9d138-c529-3682-8707-18fb4b155e2f.roa
File:                     8cb9d138-c529-3682-8707-18fb4b155e2f.roa (raw, json)
Hash identifier:          FbANDO7tMBVY1a21kAy4bTkJnxA3but/x6OkGvWi+8I=
Subject key identifier:   99:76:F6:88:37:CF:EF:BF:50:F1:D0:3A:F9:69:1A:53:31:6B:BC:14
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584F11A13820A034AF3F8B3FC7C0
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/8cb9d138-c529-3682-8707-18fb4b155e2f.roa
Signing time:             Sat 05 Sep 2026 01:00:12 +0000
ROA not before:           Sat 05 Sep 2026 01:00:12 +0000
ROA not after:            Fri 04 Dec 2026 02:00:12 +0000
asID:                     397203
IP address blocks:        192.30.45.30/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 22 Sep 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:11:a1:38:20:a0:34:af:3f:8b:3f:c7:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Sep  5 01:00:12 2026 GMT
            Not After : Dec  4 02:00:12 2026 GMT
        Subject: CN=59b77b18-fd76-47e9-bead-101787dca71e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:5a:ca:31:42:43:6e:b0:ad:92:3d:f5:ac:e8:
                    ad:1c:42:a3:f4:ce:fa:e9:da:4b:f4:f3:69:c0:36:
                    47:1a:15:57:13:23:a1:2f:7c:c1:32:54:75:c2:88:
                    28:54:12:41:a0:07:6f:c1:c4:e7:f1:19:8d:16:10:
                    ba:23:6b:32:9e:2d:fa:dd:89:47:f7:1b:4c:20:36:
                    2f:18:25:77:52:ea:0d:d9:01:d5:2d:12:cd:74:c9:
                    29:a7:b0:07:dc:e4:ae:cd:6d:a9:aa:f7:5f:71:19:
                    10:32:0b:ec:35:e0:02:5f:eb:40:37:60:17:04:58:
                    b0:81:8c:3f:24:1a:6f:b1:d0:ea:8c:85:43:f8:a6:
                    62:43:36:9b:59:67:b4:da:8f:f0:55:f7:54:10:5a:
                    de:ad:7e:91:73:2f:0a:a6:26:9e:17:3d:77:d8:79:
                    07:cf:76:8b:ab:08:a9:6b:ad:e5:b3:b9:21:b4:91:
                    d3:d2:b4:f5:1a:73:f9:65:76:dc:d0:6b:7b:24:2a:
                    7d:ba:f9:a3:77:65:42:73:03:24:8e:a9:b1:71:2c:
                    2a:e8:c9:0d:8e:9f:74:21:98:58:03:3d:69:d8:cb:
                    a6:31:f7:69:0d:b9:ce:9b:83:7b:ef:ce:d6:7a:f2:
                    fb:51:5a:9b:1c:45:6b:b5:3b:e8:31:72:e2:9c:bb:
                    57:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                99:76:F6:88:37:CF:EF:BF:50:F1:D0:3A:F9:69:1A:53:31:6B:BC:14
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/8cb9d138-c529-3682-8707-18fb4b155e2f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.30.45.30/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         b1:ef:79:06:5e:d7:ee:58:e1:21:ba:0a:c9:6d:d6:5d:82:9a:
         d5:3b:ef:2e:92:e7:ae:82:52:c3:1a:0f:ca:8e:f7:a3:a4:c3:
         e6:ab:04:e0:dd:99:90:46:08:cb:85:fe:d4:aa:bd:da:0e:6c:
         d6:75:fe:97:37:dc:ad:76:fb:b1:19:be:cc:7c:15:09:10:50:
         fb:05:b7:7a:2f:d7:e3:c2:fc:b1:23:44:da:07:ce:09:32:93:
         7a:0d:ed:95:48:0d:de:47:2d:6e:ba:fc:09:28:b7:86:b6:d8:
         7c:2f:30:d3:ac:27:3a:b4:c0:94:90:40:ae:1a:89:7a:94:fd:
         1b:52:60:b5:9e:8f:2c:a5:3d:11:b9:b9:91:21:7a:4a:80:9e:
         47:cd:13:4c:03:b5:f2:f9:fa:5f:cd:bf:0a:59:b3:32:e7:52:
         74:4f:5e:a0:38:f0:ff:6f:ba:5b:5f:87:b5:2f:7f:ca:89:55:
         38:87:ce:b1:e9:c2:8e:6a:c8:0c:aa:61:c5:b6:b2:7b:ac:6f:
         99:3f:30:17:b4:96:ba:ce:2a:a6:8e:fe:c3:fe:49:04:90:05:
         3b:6b:4c:91:ad:e4:d1:aa:80:ff:72:31:b7:62:e3:ab:4e:07:
         ea:38:50:71:f2:19:c6:a8:c3:47:75:5b:a1:d1:ab:dc:3d:86:
         02:26:a9:01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 21 17:23:51 2026 by rpki-client