Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/b42eed5f-339c-37fe-b040-9ccbcf39b936.roa
File:                     b42eed5f-339c-37fe-b040-9ccbcf39b936.roa (raw, json)
Hash identifier:          SZe84du6kbmxVPR5bbEe91TES4Y0MAmcA1uiMZJ8BGI=
Subject key identifier:   1D:88:A5:E9:2C:5E:7B:49:9E:41:DB:7A:2E:37:3B:B4:CD:12:4D:09
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584F06727A4F87556D303DAD35C0
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/b42eed5f-339c-37fe-b040-9ccbcf39b936.roa
Signing time:             Tue 01 Sep 2026 01:00:12 +0000
ROA not before:           Tue 01 Sep 2026 01:00:12 +0000
ROA not after:            Mon 30 Nov 2026 02:00:12 +0000
asID:                     20172
IP address blocks:        192.42.178.30/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 24 Sep 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:06:72:7a:4f:87:55:6d:30:3d:ad:35:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Sep  1 01:00:12 2026 GMT
            Not After : Nov 30 02:00:12 2026 GMT
        Subject: CN=c1db6914-7845-4fcb-b1cf-723af3b5d16b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:64:cd:d7:de:eb:fa:5d:13:ce:5e:e4:25:1d:
                    bf:40:80:6d:f8:f5:d8:e8:f5:83:6c:8f:f3:43:1d:
                    8b:cd:6c:09:5e:15:25:35:2b:01:05:ad:06:f9:60:
                    0a:1c:71:2a:e8:2e:c0:82:7e:e9:16:21:1f:1f:df:
                    6c:81:49:fc:32:59:e8:2e:75:40:97:72:71:49:b5:
                    e1:16:ec:83:4e:84:fe:a4:25:d0:54:28:90:fc:df:
                    06:c7:72:89:1e:17:9b:ea:d3:a5:26:57:18:12:6f:
                    36:27:a0:e3:07:b5:7b:4e:7d:d5:3d:4e:b6:df:cf:
                    d6:65:5c:d7:ca:f5:1a:82:b8:c9:1a:e0:46:88:d0:
                    b0:92:34:6d:ec:6b:75:f7:62:28:c2:1e:05:a7:0c:
                    a7:81:8b:f8:e9:77:8b:0a:ee:a6:47:1c:d9:71:13:
                    9e:e2:90:f1:7c:56:bc:c5:84:f8:bd:d3:01:7c:6e:
                    d4:9e:0d:3e:6f:01:fb:32:d6:37:f4:f3:55:e8:63:
                    03:b7:dd:b3:56:dd:91:4c:4d:f0:ac:0b:8f:d5:95:
                    46:de:21:da:3b:93:f1:e9:76:09:1f:27:50:de:cf:
                    61:60:a6:30:0e:61:7e:bc:98:b7:49:6b:29:fd:1e:
                    45:6d:bd:2b:ce:a7:5f:86:6d:c6:a5:22:15:da:d4:
                    7e:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1D:88:A5:E9:2C:5E:7B:49:9E:41:DB:7A:2E:37:3B:B4:CD:12:4D:09
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/b42eed5f-339c-37fe-b040-9ccbcf39b936.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.42.178.30/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         48:44:d6:78:5d:42:e3:88:a5:dc:48:d9:ad:e6:d0:62:26:05:
         2e:b6:40:34:2e:cb:e8:cc:1a:54:c6:16:db:eb:4e:86:ea:e3:
         8b:c6:c5:7d:34:1a:d8:27:22:58:d0:68:e3:02:d4:2a:64:22:
         bd:ff:85:e1:78:e4:f3:21:f3:ae:8b:8e:1b:09:2d:08:f7:69:
         fb:8b:4a:50:7c:22:22:89:bd:bc:d0:5b:5f:e3:b5:1e:c2:af:
         5c:67:05:48:93:b9:08:50:4f:2b:0f:3a:5d:23:76:56:91:5d:
         c5:ea:7c:5a:bd:7b:12:e2:f0:4f:3a:77:80:95:80:6f:12:a8:
         21:f4:31:5b:5b:f3:fd:d6:48:d4:6c:06:fe:bd:33:fe:86:eb:
         95:cc:67:ea:94:ef:4f:38:bb:7a:57:36:bb:8c:f7:f2:08:bb:
         d4:92:11:84:e3:16:09:fe:6c:f3:e2:c3:d2:c4:44:08:21:46:
         a3:e8:a9:60:3a:e1:31:a8:11:96:80:89:68:d0:1d:da:b4:5f:
         dc:e9:94:f9:e6:18:cc:2d:73:e3:82:41:43:fc:79:54:42:a3:
         72:0a:88:e0:ba:be:3e:15:2b:56:1b:0b:07:b3:53:08:48:ec:
         14:fa:4a:9e:22:69:bf:c2:a5:6a:6c:40:d4:0d:ea:88:5b:17:
         2b:6e:ee:28
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 21 20:34:09 2026 by rpki-client