Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/8f92e9ee-bbb6-3eb1-bbfd-bf0556f96da4.roa
File:                     8f92e9ee-bbb6-3eb1-bbfd-bf0556f96da4.roa (raw, json)
Hash identifier:          Jp0NguHzSvJb6+4q+qhXJhkIQVZrSovt5vR7QkJ+SvE=
Subject key identifier:   96:4D:4E:E2:85:27:A0:26:68:17:F4:71:04:8B:F9:16:51:57:26:63
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584EA79519CA881387C6BAAB3040
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/8f92e9ee-bbb6-3eb1-bbfd-bf0556f96da4.roa
Signing time:             Wed 29 Jul 2026 01:00:12 +0000
ROA not before:           Wed 29 Jul 2026 01:00:12 +0000
ROA not after:            Tue 27 Oct 2026 01:00:12 +0000
asID:                     20172
IP address blocks:        192.26.92.30/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 30 Jul 2026 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:a7:95:19:ca:88:13:87:c6:ba:ab:30:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Jul 29 01:00:12 2026 GMT
            Not After : Oct 27 01:00:12 2026 GMT
        Subject: CN=ed64db8a-bf66-47c4-98ac-61f2edb29133
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:19:c1:a0:af:d6:02:27:a9:8e:29:b1:66:c2:
                    56:24:1e:43:bd:72:21:c4:82:19:b2:9e:2b:96:49:
                    ce:4c:85:9c:3c:e0:0b:2d:e2:04:56:c5:b3:10:fb:
                    c8:d9:94:a0:4f:a8:7c:c3:7a:aa:48:9d:de:e8:b0:
                    b6:0b:9f:6c:f5:9c:a2:da:8a:95:9b:6c:bf:ef:51:
                    83:52:82:3b:f9:fd:e1:48:06:61:11:4a:7f:6e:4c:
                    19:55:fd:2f:fe:83:43:8d:e7:e1:c1:31:47:ee:11:
                    b4:73:fe:98:15:10:f0:d0:1f:be:aa:33:ef:70:83:
                    61:b1:e8:5b:ab:ee:ec:16:fc:56:d8:e2:47:56:7f:
                    cc:42:4b:42:1b:b2:04:b0:e9:13:70:f7:fc:f3:3a:
                    23:40:6a:4a:8d:6f:b7:49:c4:b5:ec:26:2f:c5:1f:
                    85:fd:29:9e:cd:40:28:84:62:c1:b3:22:fd:9c:19:
                    3e:71:e3:4c:f1:8b:14:f3:7f:1c:9e:0d:60:4f:fc:
                    09:81:64:9d:e7:28:99:f7:df:33:56:0f:3d:7a:a9:
                    f8:d3:b5:91:bc:ce:a6:90:08:9f:91:40:a5:63:68:
                    16:75:00:7e:87:db:5a:f6:e9:ae:c1:0e:f6:09:b9:
                    ff:3a:4d:aa:65:a4:f1:50:ad:e8:39:47:14:97:3f:
                    e2:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                96:4D:4E:E2:85:27:A0:26:68:17:F4:71:04:8B:F9:16:51:57:26:63
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/8f92e9ee-bbb6-3eb1-bbfd-bf0556f96da4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.26.92.30/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         71:f9:3a:a4:db:46:e8:52:6c:b5:53:11:d7:53:1f:a5:d0:48:
         41:2d:8d:d3:0b:3b:6d:61:f4:ba:a4:bf:18:46:d8:a5:3b:99:
         30:84:b3:9d:c3:17:3b:d8:9a:5a:4f:f2:ed:ba:e5:9e:60:0f:
         d1:e1:b5:ea:49:b5:f5:9f:5c:6a:4e:06:8f:ee:e5:e4:e3:55:
         e1:fe:4a:cf:8d:f1:11:13:f6:cc:7e:1f:fb:ab:ef:86:56:80:
         23:a2:9a:62:18:9c:01:90:b8:9d:15:0f:6a:8b:ca:6c:41:d9:
         04:70:83:ea:36:73:ff:50:15:ee:6f:c0:c2:10:3e:f6:5a:7c:
         fd:1f:31:0a:ae:44:57:5c:76:bd:98:c8:a4:12:c6:b3:72:cf:
         9e:1c:61:ec:cf:cc:2c:65:9a:09:0e:2a:3e:43:03:ca:aa:75:
         44:72:67:da:2c:d7:8c:22:a1:cb:a3:8b:1c:d6:7a:69:93:8a:
         e5:32:6c:01:13:8f:11:67:51:be:ef:d7:c2:99:d1:f7:1b:e7:
         4a:bb:be:c1:17:51:c9:e1:d4:89:38:de:06:75:85:07:01:28:
         98:51:4e:be:01:e9:c1:ba:6f:91:e3:53:b7:96:6d:f9:3f:0e:
         04:3f:54:63:e5:2c:b4:2b:1a:d1:67:c4:38:5a:2d:fe:9d:23:
         8f:f6:c4:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 04:44:19 2026 by rpki-client