Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/ee60ad49-d4dc-3c77-bfa1-2e501af8c732.roa
File:                     ee60ad49-d4dc-3c77-bfa1-2e501af8c732.roa (raw, json)
Hash identifier:          gYeBV0tSL9kKJxaXXAtZcnSg36ikWpUMX8ffuPJ1PW4=
Subject key identifier:   B4:2F:08:DE:82:3E:B1:E7:74:64:97:2E:C6:FD:2B:1D:20:3D:C7:53
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584F093D11CE3A30C811FF656F50
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/ee60ad49-d4dc-3c77-bfa1-2e501af8c732.roa
Signing time:             Wed 02 Sep 2026 01:00:12 +0000
ROA not before:           Wed 02 Sep 2026 01:00:12 +0000
ROA not after:            Tue 01 Dec 2026 02:00:12 +0000
asID:                     396613
IP address blocks:        192.42.93.30/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 22 Sep 2026 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:09:3d:11:ce:3a:30:c8:11:ff:65:6f:50
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Sep  2 01:00:12 2026 GMT
            Not After : Dec  1 02:00:12 2026 GMT
        Subject: CN=5f2de28d-4ff4-49d6-9a7e-a0bbd87d4597
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:90:29:bf:d0:dd:e8:98:38:6b:31:5c:d2:a2:32:
                    26:08:85:71:b9:31:a1:61:9d:7b:99:0e:4d:52:62:
                    ce:78:39:3d:5f:07:6e:85:ce:05:a9:eb:a2:00:2f:
                    52:fb:f2:b4:7f:75:07:e4:b9:8c:80:23:e1:26:ae:
                    5d:2b:1e:b7:7f:61:37:90:f2:d3:41:60:05:8f:0f:
                    5d:98:86:d1:69:49:c7:6e:c4:96:56:94:18:e7:0b:
                    ce:59:94:8f:39:6a:69:24:fb:b5:f2:b5:2c:cf:35:
                    e8:aa:9a:7f:20:2a:a0:5a:d3:a3:9c:38:b4:1c:28:
                    84:59:2e:94:93:93:b4:ff:51:36:06:4a:da:4e:26:
                    45:c6:0f:51:8e:6c:30:de:2d:5c:7a:54:72:e9:5e:
                    46:0c:8e:f5:07:a5:81:81:cf:1c:47:4d:52:f8:47:
                    ed:39:dd:36:9a:58:02:d7:b4:1f:6d:9b:26:b1:9e:
                    ee:87:8c:6e:f6:7b:71:1c:30:c3:6e:a7:4a:64:b0:
                    f5:0b:9a:e6:83:c5:4e:8d:d1:21:c2:c9:dc:1d:34:
                    2b:73:f9:88:53:53:f8:54:42:86:d9:0a:29:e3:57:
                    a1:cf:d1:d2:5e:6c:c1:fe:19:95:6a:a5:64:47:5b:
                    fe:16:8d:a8:71:77:70:f0:82:1a:97:90:18:89:60:
                    d4:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B4:2F:08:DE:82:3E:B1:E7:74:64:97:2E:C6:FD:2B:1D:20:3D:C7:53
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/ee60ad49-d4dc-3c77-bfa1-2e501af8c732.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.42.93.30/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         9a:df:6a:47:88:98:c9:91:8c:f5:05:c4:7a:3e:21:5d:72:9f:
         4f:43:e3:eb:96:7f:a0:79:83:7d:c1:67:4a:af:49:6b:65:03:
         cd:bd:8b:f8:88:78:51:25:d9:5d:e5:56:c9:8f:43:86:b1:03:
         1e:1e:ea:d9:65:bb:25:c7:b8:e4:79:7f:c6:86:16:7d:a3:ae:
         5d:59:30:40:cf:ff:ac:60:91:56:d3:4c:c8:13:55:50:a0:96:
         9c:6a:5b:9c:50:45:99:bf:b9:4a:84:b1:e4:6f:ae:17:32:8c:
         ae:87:45:90:09:51:91:8a:a7:a7:cf:f1:9a:cd:1b:e1:a8:31:
         81:4b:eb:5e:a9:1b:97:ac:1a:ba:5e:f1:0c:30:0c:f4:8d:a0:
         2c:c2:f3:03:5b:02:f5:60:2c:7a:2b:d7:af:dd:ad:f7:ff:26:
         8a:b6:9f:f3:5c:60:cc:94:34:42:41:bb:c1:af:80:44:a8:5d:
         9c:fa:e2:22:71:12:1f:29:7c:41:bb:65:ed:fd:8d:aa:7f:11:
         96:2c:69:9a:35:fa:97:fb:3b:f5:04:87:46:bc:39:2e:70:24:
         3d:4d:14:ee:ec:b9:c0:e8:5e:10:57:aa:ea:7e:7e:6a:26:fb:
         d8:3a:1a:63:f0:5c:05:08:3b:a7:30:e8:77:eb:86:08:e2:c7:
         1c:3e:aa:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 21 14:16:12 2026 by rpki-client