Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/ebc78df9-60e4-3115-986d-09323d166bd5.roa
File:                     ebc78df9-60e4-3115-986d-09323d166bd5.roa (raw, json)
Hash identifier:          Ckt5CyjED9eZy/6uT6HjOacLb1nGXxtvj+8N7gL35vI=
Subject key identifier:   66:62:BE:57:C5:4E:8B:92:27:24:64:BF:62:F4:51:1C:76:39:01:95
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584F067281BB96E8312FFDAC11C0
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/ebc78df9-60e4-3115-986d-09323d166bd5.roa
Signing time:             Tue 01 Sep 2026 01:00:12 +0000
ROA not before:           Tue 01 Sep 2026 01:00:12 +0000
ROA not after:            Mon 30 Nov 2026 02:00:12 +0000
asID:                     396552
IP address blocks:        192.82.134.30/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 24 Sep 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:06:72:81:bb:96:e8:31:2f:fd:ac:11:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Sep  1 01:00:12 2026 GMT
            Not After : Nov 30 02:00:12 2026 GMT
        Subject: CN=7d68a47c-f324-4b1c-b035-f2e72ca7f654
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:b1:14:ce:9b:dc:66:5a:a0:d0:7e:2f:b8:94:
                    72:e7:72:86:19:3a:5c:b8:4e:b5:ff:cd:b0:c2:4a:
                    c4:bd:50:24:12:bd:56:83:32:7a:9a:86:1c:b0:bf:
                    2c:df:10:71:a2:1d:0d:de:e5:13:33:5c:fc:56:0f:
                    e9:24:ed:4e:fa:38:19:2b:37:36:bf:f4:71:69:a9:
                    5a:2b:1e:cd:5c:b9:26:a8:1b:f3:9f:87:ff:92:0d:
                    13:20:b1:87:74:82:1f:b5:25:17:9e:58:5e:b7:90:
                    a9:92:85:82:7d:9a:5b:03:64:92:78:8c:44:23:25:
                    62:f7:34:c9:01:ee:af:3e:4d:d7:62:10:31:d6:c4:
                    69:b3:73:28:84:89:b1:c2:1b:0f:45:75:de:12:9a:
                    64:f4:13:99:1b:02:45:57:b5:0e:3d:d2:1e:4a:7e:
                    f1:71:d6:4b:af:3c:40:0a:03:2e:45:dd:a5:e4:1b:
                    35:2a:0a:9b:f3:77:78:f6:3a:68:32:2f:7b:6e:c3:
                    ce:6c:3c:6d:f1:df:67:49:f7:99:c5:fe:ea:b0:86:
                    6b:81:5e:be:da:9e:3f:e9:74:67:55:9b:5e:52:7b:
                    86:85:33:5b:82:a3:d3:1b:65:55:05:23:0d:f5:e9:
                    bc:5b:14:bf:ff:03:19:4a:26:8a:b4:42:43:4b:8f:
                    dc:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                66:62:BE:57:C5:4E:8B:92:27:24:64:BF:62:F4:51:1C:76:39:01:95
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/ebc78df9-60e4-3115-986d-09323d166bd5.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.82.134.30/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         b5:55:fa:28:b1:23:50:86:27:fd:85:4f:9d:75:90:d0:86:b3:
         8c:9e:57:31:0a:ba:63:47:52:59:f4:5f:0a:74:84:b3:42:7f:
         45:d8:64:4c:ca:3f:aa:74:48:45:d7:37:18:b5:c5:12:4a:b1:
         14:7f:c6:03:0e:18:8c:74:f3:59:bd:a6:06:2d:3c:99:43:f9:
         20:31:4a:60:91:2e:53:b6:9e:8e:af:35:c7:1d:27:c3:45:1d:
         e0:d7:8a:9a:e1:e5:bc:2a:ac:3c:b7:aa:1a:86:5c:3d:88:5b:
         96:55:e2:37:24:db:92:70:62:73:da:01:c0:8b:0b:09:44:9a:
         53:f2:85:e8:fd:9a:43:4e:53:74:f7:ef:10:6d:ce:56:78:34:
         5c:d9:2f:29:c1:9d:81:cf:99:a7:74:2c:8d:25:9f:dd:6a:5e:
         c1:90:00:ea:2e:45:b3:5e:32:87:b5:b3:f3:0e:71:8a:9c:3f:
         56:bf:03:ab:d1:9c:87:0c:72:89:66:21:a3:a2:64:0d:bf:09:
         77:b9:15:e4:1c:14:c6:72:3c:11:e9:dc:f5:23:80:2c:ce:74:
         4d:92:01:d5:57:be:7d:db:1f:64:16:7b:f1:74:2c:17:ac:b2:
         1f:c5:5e:c0:e7:0c:f6:26:8d:4c:e0:85:46:a3:c3:21:4e:07:
         18:39:d4:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 21 19:21:43 2026 by rpki-client