Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/e8e19aa0-c95c-3ac5-9848-a5493dbbbaa0.roa
File:                     e8e19aa0-c95c-3ac5-9848-a5493dbbbaa0.roa (raw, json)
Hash identifier:          YXw5PebXk/2ILMIXbswKRp6OVurjBwZ7VgPx2dMvg14=
Subject key identifier:   85:69:B2:3E:72:32:06:0D:A0:77:61:4A:9F:1A:76:53:E2:F6:F8:24
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584F067274AB62A865726C069580
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/e8e19aa0-c95c-3ac5-9848-a5493dbbbaa0.roa
Signing time:             Tue 01 Sep 2026 01:00:12 +0000
ROA not before:           Tue 01 Sep 2026 01:00:12 +0000
ROA not after:            Mon 30 Nov 2026 02:00:12 +0000
asID:                     21313
IP address blocks:        192.82.133.30/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 24 Sep 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:06:72:74:ab:62:a8:65:72:6c:06:95:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Sep  1 01:00:12 2026 GMT
            Not After : Nov 30 02:00:12 2026 GMT
        Subject: CN=33c9de48-76f2-41fa-b334-55cb75bba8e7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:86:40:3d:02:a8:f4:0a:6b:3c:dd:b6:14:5f:db:
                    eb:bf:11:50:f6:df:7a:d1:0e:f2:55:1b:a7:22:a1:
                    73:14:5d:0d:2b:84:c5:0a:d8:84:6e:b5:f8:f0:e4:
                    03:35:78:fa:4f:dc:a1:e6:74:3d:e6:62:4a:a2:55:
                    1f:65:cf:3e:d8:6e:85:bc:35:b5:7e:3b:45:00:ee:
                    7b:53:83:00:eb:12:a2:dc:c2:cc:ec:ff:65:58:4a:
                    5e:ba:a2:46:87:c8:54:2e:b3:e8:c3:f6:59:3f:cc:
                    3e:6b:fe:02:6f:37:75:ca:d2:c4:8c:0d:68:21:91:
                    13:e5:9c:0d:e6:45:f4:4e:0f:01:f3:b4:9f:5f:11:
                    67:ae:b3:1e:8f:ab:9e:63:af:89:70:b7:90:78:c6:
                    34:01:73:28:94:b2:df:f1:24:d5:94:58:f4:3d:4e:
                    bc:e0:e0:73:5c:5f:74:5a:fe:94:58:cf:0b:30:d6:
                    f1:a8:c9:5c:35:eb:9c:0a:a7:98:3f:a7:9d:60:88:
                    fe:c6:a8:a6:9b:8d:b3:2f:80:6f:da:79:13:c6:8d:
                    af:90:bb:7b:81:99:cf:11:e1:83:49:85:04:b9:f3:
                    0e:06:be:3d:be:9c:e1:ad:d4:d4:76:63:69:83:ad:
                    08:84:d6:88:58:fa:cc:2f:dc:59:f4:24:40:32:a1:
                    09:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                85:69:B2:3E:72:32:06:0D:A0:77:61:4A:9F:1A:76:53:E2:F6:F8:24
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/e8e19aa0-c95c-3ac5-9848-a5493dbbbaa0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.82.133.30/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6a:84:eb:1e:d6:48:7a:a7:6a:01:da:9e:ce:48:89:6d:dd:23:
         68:3e:2b:f8:6b:05:62:ab:f7:84:01:db:ca:22:4a:80:5d:aa:
         6d:5c:7e:fb:42:4c:f4:fe:b1:67:1f:53:25:0a:7e:e6:28:f6:
         97:83:2a:4e:95:2f:cf:a7:b5:0d:37:78:b7:86:d4:81:a6:80:
         31:56:4f:29:11:9e:76:17:ee:9c:2c:1d:18:64:09:a6:11:e6:
         ee:4d:cd:24:16:d0:93:b7:2f:03:77:34:19:2c:da:80:66:a3:
         1f:6a:26:f0:ce:66:29:ab:03:e2:d1:21:54:f4:fc:bc:ca:10:
         00:7a:65:04:2b:67:e5:0f:7f:d7:13:68:03:9d:f4:82:4c:47:
         01:0b:72:e1:e9:43:9a:fb:3d:50:0d:5d:8f:e6:95:01:ff:e5:
         c8:7f:e2:dd:69:3b:e1:13:d5:12:33:ff:37:fe:38:da:a7:ef:
         91:cc:a9:25:30:0d:71:b2:4f:67:5c:db:37:2e:32:06:75:cc:
         e9:cc:48:e1:83:23:23:aa:6b:2a:51:b1:6c:5f:5f:4c:65:dc:
         ea:85:b9:2b:d2:82:d2:90:f8:5d:49:b0:be:16:be:76:13:78:
         a3:5e:9d:33:cf:cb:16:64:fc:79:a1:6d:74:c7:c1:9a:a9:45:
         f0:69:78:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 23 02:33:40 2026 by rpki-client