Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c16a2cc6-ba0b-3930-951f-23f233f56e12.roa
File:                     c16a2cc6-ba0b-3930-951f-23f233f56e12.roa (raw, json)
Hash identifier:          z+c45SpUh7MZV2X/wPLJak7p6ZnelW0bJn94BYrwRsg=
Subject key identifier:   2C:C1:0D:88:D5:10:37:DF:F1:48:90:25:6F:F5:A9:6D:AD:39:CD:7A
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584F0672859BA736F1F28BD76C80
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c16a2cc6-ba0b-3930-951f-23f233f56e12.roa
Signing time:             Tue 01 Sep 2026 01:00:12 +0000
ROA not before:           Tue 01 Sep 2026 01:00:12 +0000
ROA not after:            Mon 30 Nov 2026 02:00:12 +0000
asID:                     397209
IP address blocks:        192.42.178.30/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 28 Sep 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:06:72:85:9b:a7:36:f1:f2:8b:d7:6c:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Sep  1 01:00:12 2026 GMT
            Not After : Nov 30 02:00:12 2026 GMT
        Subject: CN=4479eb34-861e-4494-a731-e76a59432165
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:fd:3c:3a:94:69:9c:2e:ea:13:58:4b:19:1e:
                    b6:3e:b7:88:58:fa:5d:a2:43:ef:61:17:dd:1c:22:
                    5b:1e:53:8b:ae:b5:65:42:86:2d:af:e1:c7:43:fd:
                    dd:29:b2:82:3e:89:c6:9e:4e:e4:c7:c0:4c:b9:a8:
                    a0:51:c6:f3:46:c8:da:34:ea:50:84:88:04:b2:3f:
                    96:45:8e:12:98:e0:03:2d:4a:c9:d6:f3:c3:df:09:
                    b6:9f:bb:ab:0a:d6:d0:32:5a:a3:33:a3:0a:b1:d7:
                    31:3e:13:53:45:3f:83:b0:bd:4d:36:02:b3:2a:30:
                    c4:6d:5b:32:65:e4:31:e3:f9:24:27:f6:72:13:b4:
                    7d:8f:2f:f4:c7:9b:d8:75:2c:b2:60:18:6a:f6:82:
                    de:b4:11:ed:87:65:bd:c4:48:7b:bf:d3:93:82:71:
                    28:e8:15:cb:67:0e:7e:ce:47:47:ac:fc:b7:da:91:
                    f5:00:07:df:a7:b8:91:82:12:83:3d:77:1a:05:47:
                    58:47:01:87:c6:d9:86:c4:14:53:95:01:f1:4a:21:
                    3a:64:15:88:cc:44:a2:6c:01:01:b9:e1:fc:8d:9e:
                    5e:57:fe:cd:ce:a9:5d:07:e8:bc:2d:a2:0d:17:a8:
                    e7:9c:49:a1:c1:e1:bc:0e:b1:4d:31:a0:1d:ca:a3:
                    7b:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2C:C1:0D:88:D5:10:37:DF:F1:48:90:25:6F:F5:A9:6D:AD:39:CD:7A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c16a2cc6-ba0b-3930-951f-23f233f56e12.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.42.178.30/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         36:39:f1:84:4c:1c:87:6c:02:22:7b:9b:80:fb:50:3b:4b:98:
         36:13:71:7f:b9:a5:8a:f0:63:25:f6:03:7e:3d:03:07:0c:d9:
         eb:7f:25:3e:a7:e5:1b:f0:2c:17:15:d7:bf:e6:8f:ef:03:49:
         3e:27:09:b1:9c:4c:a5:03:4f:ad:66:ea:94:ad:bf:24:c8:39:
         74:5e:50:1b:19:73:aa:b5:98:33:8e:32:8d:52:1f:ce:a0:3b:
         f8:be:79:bb:03:db:b0:dc:78:60:b6:f8:b7:53:3b:05:a3:9d:
         d5:4b:52:25:0c:fe:9e:d2:b8:da:b4:7f:71:b1:16:e0:3c:9c:
         75:4e:7f:c9:a7:ac:a7:fa:69:9c:44:22:05:5e:f6:84:d9:67:
         a0:66:2e:a9:2f:1e:f3:f4:59:da:54:f2:6d:69:83:b8:20:26:
         dc:21:2a:55:d4:f5:7b:87:c3:c6:f0:c9:47:31:4e:22:cb:23:
         48:67:d5:3c:85:b6:c5:81:1c:0e:51:e1:85:c4:98:01:41:43:
         c2:37:89:e9:e2:3c:b7:95:5a:ee:cd:78:47:33:2a:75:89:ee:
         0c:58:5d:27:b1:51:40:91:b9:e9:80:79:95:00:dc:cc:d2:da:
         e6:5e:01:3d:4c:fe:5c:ba:1d:33:24:45:9d:cd:88:8e:8f:38:
         f5:3b:68:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 26 23:31:19 2026 by rpki-client