Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/d8d1faf8-2cc6-3883-bc78-577be530d1dc.roa
File:                     d8d1faf8-2cc6-3883-bc78-577be530d1dc.roa (raw, json)
Hash identifier:          BMNgjgpX7fyZW1pf81qfx56WNlVrsy0ct3zi/WQCp1Y=
Subject key identifier:   B3:55:CE:86:0D:B6:0D:83:DA:3E:D8:07:12:DA:2A:5B:CE:12:E7:F8
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584F49737796B9A91EB07C337080
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/d8d1faf8-2cc6-3883-bc78-577be530d1dc.roa
Signing time:             Fri 25 Sep 2026 01:00:12 +0000
ROA not before:           Fri 25 Sep 2026 01:00:12 +0000
ROA not after:            Thu 24 Dec 2026 02:00:12 +0000
asID:                     40647
IP address blocks:        192.12.94.30/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 26 Sep 2026 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:49:73:77:96:b9:a9:1e:b0:7c:33:70:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Sep 25 01:00:12 2026 GMT
            Not After : Dec 24 02:00:12 2026 GMT
        Subject: CN=399e584e-8eb4-4eef-ad03-1f05b578915f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:f4:44:54:c2:22:62:79:5c:a5:a6:10:24:fe:
                    0b:b5:c1:d3:d5:5d:71:b5:93:81:0e:43:e3:3d:69:
                    89:bc:ec:1b:72:a2:c5:40:6b:44:f2:e1:78:ea:13:
                    5c:40:56:3b:f6:49:e9:38:43:bc:14:3f:c4:10:c2:
                    e7:e4:07:26:b5:3a:6a:b8:bc:1b:ee:82:f0:cc:35:
                    26:bd:80:5d:23:0c:ab:6a:d9:68:5e:34:1c:8d:84:
                    86:52:68:28:91:9c:05:18:cd:f1:8f:c7:92:0d:80:
                    6c:d4:68:ae:79:df:f6:18:ff:29:56:dd:d8:e1:f2:
                    3f:fd:ab:da:3a:6a:6a:06:9e:88:55:37:62:57:92:
                    ce:7c:7f:32:0a:6a:45:73:6a:34:a5:c9:49:08:bb:
                    58:87:ff:17:b1:f6:a1:03:af:55:81:cc:21:7b:22:
                    7c:2a:99:36:cb:63:d0:5a:c1:68:11:88:9b:5e:ed:
                    fb:29:7c:99:ca:ca:7e:3d:5c:62:c6:0d:eb:e7:e7:
                    bc:33:9c:cc:69:b7:7c:a7:10:3e:5c:7b:ea:91:78:
                    8b:04:8d:ea:86:27:12:6f:d3:81:d8:53:fa:63:3f:
                    87:ed:1d:03:eb:01:04:e0:df:64:ef:ca:97:00:c4:
                    92:b1:cd:2a:54:ff:cb:f8:a6:ae:5d:81:01:27:e8:
                    8e:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B3:55:CE:86:0D:B6:0D:83:DA:3E:D8:07:12:DA:2A:5B:CE:12:E7:F8
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/d8d1faf8-2cc6-3883-bc78-577be530d1dc.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.12.94.30/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         23:57:41:1b:41:83:04:aa:0e:e8:fd:ba:64:dd:1d:4a:71:73:
         50:9e:1a:aa:5a:41:94:e7:a1:51:df:7a:44:68:2d:b8:17:fc:
         43:c8:b5:75:01:5a:1d:70:6a:2b:61:41:9b:2b:44:e6:4d:6c:
         8d:ea:be:b4:85:cd:15:5d:94:da:06:bb:5e:0e:0a:be:bc:fb:
         d5:ab:a5:e8:d2:c5:89:99:a8:69:90:29:65:99:80:60:ee:b8:
         5c:bb:41:b8:96:b2:ab:bb:b0:70:4b:ff:b3:ab:71:6b:2e:09:
         29:eb:bf:a4:3e:4b:54:dd:1d:1d:13:82:db:1e:96:30:dc:ee:
         10:16:73:42:c0:fa:b7:3b:d2:9b:66:3e:62:45:85:66:65:25:
         45:e4:c0:83:f9:55:01:02:aa:c4:90:f1:74:03:75:72:b6:1b:
         cb:8e:60:7d:ad:ba:0c:e0:6d:e2:02:b7:e7:c6:51:96:a9:d2:
         bb:f3:e9:60:9e:52:6e:43:40:b8:6b:98:cd:96:a0:b7:bc:07:
         74:ba:c7:8c:b8:13:ca:77:77:2e:27:37:18:17:1a:60:88:be:
         4b:28:b5:b8:e6:b8:ed:22:19:e7:96:ef:1e:8b:94:32:8f:ad:
         56:b4:2b:bb:f0:1e:03:aa:22:4c:9b:ee:05:75:fa:17:38:9f:
         53:da:63:0c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 25 05:37:06 2026 by rpki-client