Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/a7b75a7b-4cf4-370a-bd3f-8c361f722363.roa
File:                     a7b75a7b-4cf4-370a-bd3f-8c361f722363.roa (raw, json)
Hash identifier:          huh0wcBhHF8u2J0NAStRLA/YaoOZj46b5h5D4nWa0NI=
Subject key identifier:   25:E6:8E:24:D0:A6:9A:E0:4E:7C:B4:DD:9E:A7:7D:3C:5E:28:E6:3B
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584F4F08299B87BC799ECBCB9100
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/a7b75a7b-4cf4-370a-bd3f-8c361f722363.roa
Signing time:             Sun 27 Sep 2026 01:00:12 +0000
ROA not before:           Sun 27 Sep 2026 01:00:12 +0000
ROA not after:            Sat 26 Dec 2026 02:00:12 +0000
asID:                     396606
IP address blocks:        192.58.128.30/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 30 Sep 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:4f:08:29:9b:87:bc:79:9e:cb:cb:91:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Sep 27 01:00:12 2026 GMT
            Not After : Dec 26 02:00:12 2026 GMT
        Subject: CN=10e73183-7902-48ab-9b20-b82ea63b4ee7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:51:e7:25:77:3d:fd:41:5f:74:3c:b8:7a:1e:
                    15:e7:f2:bf:c3:1d:67:b5:2c:7c:ab:db:12:fc:0c:
                    ca:0a:9e:df:e7:6d:87:65:26:1b:50:d1:79:29:cc:
                    4e:ef:15:ec:8c:5e:81:05:97:df:4e:91:7f:9c:bb:
                    f9:07:b3:cc:58:b7:8a:18:75:7a:d8:48:91:00:20:
                    b8:1a:70:74:b0:b2:80:86:31:66:f7:2b:3a:1d:ae:
                    63:d9:e8:5f:24:23:40:bf:51:c9:22:d5:d4:6e:d3:
                    8b:36:24:fb:3a:7c:c9:9a:23:02:62:c3:ec:e4:5e:
                    b4:6d:79:f9:41:58:d5:bf:3f:eb:65:6b:3d:be:30:
                    55:5b:88:28:fe:18:a1:df:9e:1d:4f:50:d9:29:5a:
                    65:96:e7:44:51:d1:93:d7:e6:a6:f7:5d:b0:78:c5:
                    26:8f:27:fa:0c:aa:7e:cb:21:e0:a6:69:5c:de:16:
                    76:84:62:9f:2e:c5:c4:5b:64:3f:dd:7d:68:ee:4a:
                    2a:91:b5:e4:7f:28:9d:9a:bc:5a:93:b2:64:7c:68:
                    e2:e3:ee:be:28:91:40:51:89:88:f6:be:06:2e:fb:
                    58:31:aa:47:fa:d2:85:26:72:61:87:29:28:19:d7:
                    2a:d5:ce:6d:a0:cd:ba:5e:a2:cb:6f:1e:e0:e3:74:
                    83:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                25:E6:8E:24:D0:A6:9A:E0:4E:7C:B4:DD:9E:A7:7D:3C:5E:28:E6:3B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/a7b75a7b-4cf4-370a-bd3f-8c361f722363.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.58.128.30/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a3:9c:7f:8c:e4:6a:4f:49:69:8a:f0:18:25:28:c9:78:bf:ba:
         e6:9e:ba:28:95:8f:8c:1f:63:87:9b:c8:9d:82:ea:86:14:38:
         6c:5b:68:ca:ba:a1:0f:cb:99:da:dc:ce:cc:b8:75:30:36:72:
         8e:20:d0:43:13:2b:e2:51:28:8c:f8:8f:91:cf:ec:ad:00:06:
         66:d8:ba:4f:4a:22:01:e1:9f:24:c1:fa:88:c7:46:93:c0:35:
         a8:22:67:60:01:66:b5:ed:c6:74:99:76:9b:97:62:6f:60:73:
         62:d8:2d:58:d0:c6:97:62:7b:b1:33:8d:ca:e2:ad:3c:7d:ba:
         fa:a3:a3:df:24:66:88:f6:b9:55:bb:b2:a3:68:bd:97:1f:2f:
         86:45:a1:43:b6:fd:2c:6f:6f:28:51:fd:23:45:c6:58:ad:c8:
         4c:c1:c2:13:71:bc:2d:ca:92:76:bc:ee:ce:41:0f:d4:97:d7:
         cb:b3:e8:eb:be:71:ec:dd:29:13:55:77:95:e3:6b:76:74:7c:
         80:99:8f:d8:8f:c9:c2:90:2f:c4:1c:1b:bc:f7:a7:3b:59:95:
         da:f8:26:ab:b2:03:92:ea:db:dc:ba:53:d7:9e:3d:e1:9e:86:
         58:06:d7:1a:7b:05:c2:b6:0f:cb:4f:98:c5:a7:f6:5d:cf:51:
         fd:16:a1:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 28 10:31:29 2026 by rpki-client