Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/9c7719eb-12d7-39af-94be-bd11abb7632b.roa
File:                     9c7719eb-12d7-39af-94be-bd11abb7632b.roa (raw, json)
Hash identifier:          DeSb4SvSaRXdluXNOuVfF1QuPZTK3jeMByVowP/mYHE=
Subject key identifier:   E8:AA:EE:8E:B7:1C:E3:B9:2B:8D:DA:AE:C4:52:C0:9B:70:0E:CF:C0
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584EA797C342CE05ED6A3CC64B00
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/9c7719eb-12d7-39af-94be-bd11abb7632b.roa
Signing time:             Wed 29 Jul 2026 01:00:12 +0000
ROA not before:           Wed 29 Jul 2026 01:00:12 +0000
ROA not after:            Tue 27 Oct 2026 01:00:12 +0000
asID:                     396576
IP address blocks:        192.43.172.30/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 30 Jul 2026 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:a7:97:c3:42:ce:05:ed:6a:3c:c6:4b:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Jul 29 01:00:12 2026 GMT
            Not After : Oct 27 01:00:12 2026 GMT
        Subject: CN=6f148166-dc06-42d9-a61b-8ca5c5bb7a69
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:34:01:b4:44:7a:e8:60:bc:6f:5d:cd:01:74:
                    4b:16:38:f8:a0:a5:89:4c:7e:42:a2:e0:3f:26:50:
                    3a:4d:ec:b8:0a:ac:28:83:5e:35:68:98:f7:66:e5:
                    f2:76:0e:93:89:5b:4d:87:56:1a:06:f6:ac:6d:3e:
                    31:2f:f4:0c:1a:c0:0b:a6:ac:87:a0:36:ed:27:a3:
                    f1:c2:33:d9:fe:b0:b3:7c:55:61:44:fb:47:b9:97:
                    0c:72:9b:45:94:df:44:f0:51:91:76:48:c5:54:d9:
                    72:b6:79:18:cf:73:48:f6:92:a5:47:4a:cf:a3:6a:
                    0b:d3:5d:27:39:d2:9e:9b:83:d5:01:6b:a6:9c:f2:
                    c5:55:db:31:f4:65:f7:15:3d:2b:ff:05:b7:be:10:
                    32:d0:0f:6e:75:f5:a5:e7:a7:3b:50:89:f6:89:be:
                    2e:00:a1:d9:fc:fc:87:ba:e6:fd:d0:f3:b6:fc:bc:
                    a5:57:8a:71:ff:c6:15:2d:44:e2:e4:9a:69:65:c1:
                    00:fc:6c:65:8f:83:99:ea:fe:b1:ba:7f:08:6e:14:
                    05:fd:50:43:9f:ec:16:ee:92:a6:db:64:11:8f:57:
                    16:21:1d:bd:21:6b:ff:89:94:b5:7f:2f:13:0b:81:
                    20:84:11:d7:38:1d:9d:44:fa:d9:5d:b0:17:0c:ad:
                    43:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E8:AA:EE:8E:B7:1C:E3:B9:2B:8D:DA:AE:C4:52:C0:9B:70:0E:CF:C0
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/9c7719eb-12d7-39af-94be-bd11abb7632b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.43.172.30/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         ab:a2:82:a0:81:e9:e6:51:97:21:6f:86:9e:ab:20:5a:eb:0e:
         14:83:25:a7:5f:87:93:f9:cd:51:6b:0e:ab:b4:e9:f4:00:69:
         da:d5:cc:79:50:05:53:5a:fb:c0:26:45:13:83:05:90:c1:71:
         7c:fe:24:1b:c7:b3:ca:6a:a0:73:ad:35:d8:94:cc:9f:fa:d5:
         83:b7:1e:ac:54:b6:8f:c2:93:f2:c7:68:65:7c:02:6e:6d:ff:
         a1:5f:85:de:1a:76:d6:e4:de:8e:34:f6:e7:45:45:11:f5:a6:
         ac:86:4e:c0:04:67:11:81:43:69:c0:dd:e1:cc:24:cd:8b:d3:
         4f:d9:b1:2d:8c:60:9e:a4:4e:8e:a0:15:04:a8:7e:d9:a3:95:
         6d:00:00:8e:15:1e:79:a9:49:5f:10:52:04:77:bd:07:52:47:
         83:bb:30:16:27:c2:0c:e9:be:2c:d8:8f:40:90:50:41:de:6b:
         e0:7a:af:93:00:01:a0:3b:f7:91:99:0c:94:a6:e9:3d:a2:35:
         6f:29:c4:ae:5e:28:30:46:f7:72:02:35:e4:d7:5d:8f:08:78:
         9c:ca:b2:7a:89:15:b4:b6:5f:fe:4c:90:e4:63:6e:36:d2:85:
         3d:5f:9f:ca:50:b7:ae:a8:f7:6a:56:f5:c7:13:88:81:0a:26:
         a3:18:81:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 07:10:39 2026 by rpki-client