Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/b683ac75-d583-306d-bff5-162308d43d71.roa
File:                     b683ac75-d583-306d-bff5-162308d43d71.roa (raw, json)
Hash identifier:          pIn1cN2TJTZIxXSHNWPbsffadNRG+KY9zNDra3iajP0=
Subject key identifier:   32:15:1D:77:3F:FB:D0:B8:0A:50:CB:02:7C:E2:78:59:6B:F4:BC:96
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584F49749673841DBAF8FC0E34A0
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/b683ac75-d583-306d-bff5-162308d43d71.roa
Signing time:             Fri 25 Sep 2026 01:00:12 +0000
ROA not before:           Fri 25 Sep 2026 01:00:12 +0000
ROA not after:            Thu 24 Dec 2026 02:00:12 +0000
asID:                     397203
IP address blocks:        192.12.94.30/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 28 Sep 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:49:74:96:73:84:1d:ba:f8:fc:0e:34:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Sep 25 01:00:12 2026 GMT
            Not After : Dec 24 02:00:12 2026 GMT
        Subject: CN=abad9c91-f459-493d-a1a6-5a068d237305
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:87:59:4a:22:f8:82:2e:82:5b:9a:7b:6a:6f:04:
                    af:33:84:a6:59:94:5e:8a:4d:0f:36:0a:ea:6c:7f:
                    37:3b:bc:0a:1a:5c:a4:f3:13:c5:b5:80:b2:a4:e0:
                    0b:32:b3:e7:10:47:ac:5b:8d:9d:a9:cd:bf:d1:7c:
                    78:44:1f:ff:a6:98:38:c3:8a:ce:13:77:49:0d:bc:
                    05:d5:3e:12:2c:70:11:b3:5a:8a:7d:0c:37:0d:a7:
                    a9:88:9e:ad:96:ac:26:d3:4a:94:90:d5:8e:5d:0d:
                    5d:e2:61:fd:0a:ca:54:7d:22:0d:1a:76:85:a5:88:
                    72:12:30:eb:ea:6c:97:c4:78:a8:3d:c5:71:79:66:
                    ff:7c:b1:ab:35:e8:ca:17:02:d7:9d:1c:00:19:fe:
                    26:a7:13:35:40:cd:cf:da:0b:4c:53:62:59:6a:f0:
                    39:c9:a8:51:18:61:fa:ca:d1:79:47:2d:7e:9b:58:
                    e7:cf:41:df:3f:7a:38:9a:52:ad:b4:47:c4:da:80:
                    7f:cb:bd:9d:eb:78:57:66:db:7f:ef:bb:7e:e8:0d:
                    61:e0:cc:ea:77:52:71:19:fc:c8:84:c3:9f:61:96:
                    6c:16:ee:3e:65:71:1f:7d:20:a7:c6:49:4f:ff:83:
                    f7:df:f9:ac:10:ee:ba:a1:38:bf:8a:bd:a1:62:a7:
                    8b:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                32:15:1D:77:3F:FB:D0:B8:0A:50:CB:02:7C:E2:78:59:6B:F4:BC:96
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/b683ac75-d583-306d-bff5-162308d43d71.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.12.94.30/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         02:52:dd:f8:02:61:6c:34:7e:9e:2b:d7:39:98:39:6e:07:c2:
         8c:56:f6:29:99:4e:b9:7d:5a:12:51:77:6a:ae:36:f8:e7:6f:
         77:1b:ce:da:0a:0c:a3:65:3c:2c:01:e3:bf:18:77:a7:fc:59:
         b2:dc:68:39:46:4e:4d:3e:cc:5f:ce:d4:20:c8:28:2e:b3:16:
         a0:d7:d1:40:f5:49:61:5a:2f:8f:77:56:01:56:80:a1:17:be:
         ed:83:9e:d8:67:f8:ea:06:d5:4d:4d:91:3a:c9:95:2c:48:d2:
         5a:bf:ba:01:b2:fd:73:f0:23:b1:95:57:cc:08:62:b0:cf:ec:
         0d:96:ca:de:b4:92:55:6c:fc:f5:66:73:68:8f:d9:59:62:50:
         02:dd:e6:98:56:23:77:4f:b7:e7:bf:ac:52:c1:1d:4e:83:6c:
         00:72:72:f0:b4:f5:d2:06:75:ee:53:28:83:53:25:00:f0:fa:
         05:8b:47:ea:35:64:75:2f:4c:93:25:a9:67:e8:ef:be:ea:d7:
         8b:83:38:84:f8:91:a6:a0:34:05:06:1c:3e:a2:d9:5f:ed:74:
         64:ac:c7:ce:f8:d8:dd:a7:a9:36:46:7c:e0:91:62:7a:94:e2:
         5f:1c:ae:7a:26:8f:ab:a1:33:7f:d9:c1:d7:fe:17:19:97:d3:
         5d:fe:ed:e9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 26 16:28:09 2026 by rpki-client