Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/30ce7eb9-b371-33bc-b7f4-3570ae115bd2.roa
File:                     30ce7eb9-b371-33bc-b7f4-3570ae115bd2.roa (raw, json)
Hash identifier:          hICy+0DPegqTSOzCVJV/0SBlvDpCuKwbf81PhELUE8U=
Subject key identifier:   B0:17:54:A3:A3:BA:65:06:9B:97:54:03:D4:EA:FF:3C:E9:CC:2B:AC
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584F6292C3651809CFA2B706AF80
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/30ce7eb9-b371-33bc-b7f4-3570ae115bd2.roa
Signing time:             Sun 04 Oct 2026 01:00:13 +0000
ROA not before:           Sun 04 Oct 2026 01:00:13 +0000
ROA not after:            Sat 02 Jan 2027 02:00:13 +0000
asID:                     396764
IP address blocks:        192.58.128.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 10 Oct 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:62:92:c3:65:18:09:cf:a2:b7:06:af:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Oct  4 01:00:13 2026 GMT
            Not After : Jan  2 02:00:13 2027 GMT
        Subject: CN=5c9e72e1-3a04-4ef5-9a5c-a1567bc901c9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:03:38:ff:54:94:88:2a:cb:aa:6a:36:d3:e8:
                    24:35:04:0c:43:17:a6:5c:62:48:51:ec:61:48:45:
                    30:b5:b8:bc:f4:6d:9f:b6:3e:09:3f:40:98:d9:ef:
                    19:5e:7f:ec:f2:f2:ae:95:f4:d4:81:50:52:97:cb:
                    d9:63:6a:c1:a6:0a:61:d7:ca:82:d8:7e:cd:b8:bf:
                    a9:51:18:a4:62:f3:4e:4d:66:ad:45:c1:1c:ba:a0:
                    5e:de:93:0a:08:d4:f0:58:92:a8:e2:9e:95:ef:1b:
                    c8:d4:3e:f2:e1:45:00:ce:fe:1a:dc:09:25:30:1a:
                    76:22:3c:4a:df:69:08:bc:cb:f6:d2:66:67:b0:cf:
                    2d:66:2f:88:87:ef:8b:dc:b0:81:3c:4f:aa:1d:ad:
                    c0:72:d8:a7:82:e6:83:77:a5:4d:48:2b:1c:aa:85:
                    04:f4:12:a8:07:57:ec:db:66:48:1b:e6:1c:6c:9a:
                    79:d6:0c:21:2d:de:94:44:14:97:bf:26:8c:90:d8:
                    21:eb:38:bc:d5:e8:dc:a2:51:fe:f9:9c:bb:94:65:
                    16:85:b6:49:7f:64:53:76:6e:54:3a:20:f9:b4:40:
                    dd:c2:6d:7a:2c:41:8f:03:ee:42:1f:9e:37:8c:7e:
                    76:43:e1:08:f4:62:b3:18:42:84:ee:dc:18:17:fa:
                    13:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B0:17:54:A3:A3:BA:65:06:9B:97:54:03:D4:EA:FF:3C:E9:CC:2B:AC
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/30ce7eb9-b371-33bc-b7f4-3570ae115bd2.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.58.128.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         9b:d8:ae:81:c2:7b:17:71:0d:42:e0:5a:45:90:f8:98:2a:a8:
         d6:86:57:46:8c:f5:25:dd:fc:5b:37:6c:09:db:85:4a:08:8a:
         ae:40:51:96:cc:27:f7:07:8e:e2:94:d2:d9:95:5c:62:84:3e:
         eb:b8:49:3f:14:06:48:75:ec:70:d9:cc:00:2c:c5:24:d6:07:
         b7:fe:22:d1:6b:26:0d:70:e2:5d:3e:39:e8:02:25:f0:a3:86:
         ae:3d:86:82:26:38:58:6f:50:97:b9:7a:87:a9:60:7d:c2:94:
         81:5d:42:6d:80:39:79:c3:5e:a0:0d:a2:a4:61:a5:9c:b6:cc:
         59:85:30:d8:36:30:85:b6:4d:d3:bc:af:23:52:e2:49:f0:5e:
         c9:ef:7c:61:da:bc:28:91:7f:41:0e:44:e0:b7:25:01:c7:54:
         8d:f2:98:2b:3a:c7:b3:80:39:44:ed:17:f7:2b:07:2e:a4:ac:
         bb:a0:38:b7:3e:db:30:a8:73:49:06:6b:99:e1:8d:1a:8a:2e:
         2e:8f:57:b5:72:84:73:c5:b6:11:66:7e:ef:e4:07:7b:38:ab:
         40:c5:00:80:1b:e0:88:57:5a:35:9c:d5:f4:54:1d:cd:3f:1f:
         1c:73:47:3b:76:b3:81:40:77:1f:72:73:1f:3c:0f:b0:30:12:
         98:f8:c3:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 8 09:17:19 2026 by rpki-client