Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/b7090d41-9250-372e-a7fc-9b26cb46fb00.roa
File:                     b7090d41-9250-372e-a7fc-9b26cb46fb00.roa (raw, json)
Hash identifier:          t7rzf4C9P64ate1My5gk4jp0vxVVZt28PSIXAiTndvQ=
Subject key identifier:   0A:02:E7:07:5F:9A:C1:57:A0:16:58:BD:B4:D3:F2:FC:A3:CC:20:4E
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584F067292DD2B8837985D02541E
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/b7090d41-9250-372e-a7fc-9b26cb46fb00.roa
Signing time:             Tue 01 Sep 2026 01:00:12 +0000
ROA not before:           Tue 01 Sep 2026 01:00:12 +0000
ROA not after:            Mon 30 Nov 2026 02:00:12 +0000
asID:                     396565
IP address blocks:        192.42.178.30/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 24 Sep 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:06:72:92:dd:2b:88:37:98:5d:02:54:1e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Sep  1 01:00:12 2026 GMT
            Not After : Nov 30 02:00:12 2026 GMT
        Subject: CN=8a5cc875-9572-4a1c-93ee-0f717d4b5a57
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:83:61:d9:1e:e0:db:ae:3b:b6:d2:b3:81:30:ef:
                    65:a1:af:06:6f:40:4f:5f:35:96:92:1f:c7:2c:c7:
                    c6:c4:1f:5c:f4:16:14:a4:0e:8c:62:1b:c0:87:1e:
                    9d:8f:67:4a:e5:67:d1:78:fb:49:e1:89:c9:a8:14:
                    a7:fb:4a:9e:a3:6b:c1:f0:54:d3:0c:8f:14:0a:8d:
                    5b:ae:c9:6c:7f:41:1b:a2:29:9c:75:aa:6c:92:47:
                    45:64:cb:89:ff:55:2b:51:54:f8:84:a2:ad:7d:89:
                    1c:c2:20:15:b1:91:e4:e0:14:b3:75:5e:1c:f7:9d:
                    7f:cb:b7:52:00:8f:25:84:98:62:19:45:ac:49:dd:
                    25:d8:63:be:54:88:af:5d:e8:90:34:db:85:41:1c:
                    dc:be:41:8e:84:57:0f:53:b2:41:2a:c3:d7:c4:70:
                    9d:3f:66:cd:c2:0d:ee:d5:2e:09:18:31:1d:16:98:
                    1f:2c:33:b1:a9:1c:88:e4:a1:da:dd:39:cf:ff:8f:
                    3d:16:7c:be:0b:d7:0a:d7:28:9b:4f:d6:5a:27:f8:
                    1f:d2:a4:94:28:72:d7:d6:f1:c1:e3:d9:4b:f4:7a:
                    a9:bb:94:f3:2e:eb:c6:ad:e2:17:73:52:5d:c4:46:
                    82:9c:ef:79:b8:ec:51:0a:cb:e6:72:be:87:5b:b8:
                    76:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0A:02:E7:07:5F:9A:C1:57:A0:16:58:BD:B4:D3:F2:FC:A3:CC:20:4E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/b7090d41-9250-372e-a7fc-9b26cb46fb00.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.42.178.30/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5e:04:c9:67:e1:de:1b:96:a1:08:e0:84:40:4d:71:f8:0c:0b:
         4a:fb:28:db:4c:39:52:05:92:71:a8:83:b8:f2:e8:09:a5:fb:
         f2:cd:78:f6:a7:07:f1:c6:20:2c:f7:03:0d:b1:a9:0c:b8:04:
         64:b4:0c:55:8d:9a:51:0f:7f:9b:7f:ec:8b:9b:4d:31:07:4b:
         60:cf:86:76:d0:d0:d1:d0:2c:78:93:ae:49:9a:65:d3:61:23:
         7d:4b:dd:57:5c:57:d8:32:4b:a7:c3:da:c7:40:84:15:da:b0:
         f3:b6:84:02:ed:af:94:83:21:af:d9:81:bb:70:54:b3:46:f7:
         35:69:12:26:54:25:b4:e5:92:f7:c3:d7:3f:b8:9a:f0:61:04:
         7d:dc:5f:d1:a3:f9:b1:6a:e4:dc:5a:47:75:e4:0e:e3:d3:c6:
         89:e5:02:d4:68:74:de:61:29:3c:fa:6a:35:1e:97:38:85:c0:
         62:9d:4a:bb:80:4b:13:2e:ab:2e:fe:d1:eb:49:ac:62:0e:dd:
         b3:d6:1f:fe:39:ab:f2:01:24:a6:79:8e:7c:2a:91:cc:42:e7:
         19:70:f5:16:74:c5:bb:87:6f:5a:d5:7b:c1:92:a8:d4:6f:46:
         61:6e:01:09:15:d3:7b:84:12:b7:af:e4:c5:f3:4e:f2:6c:6f:
         93:05:46:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 21 19:17:55 2026 by rpki-client