Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/7df60e7b-4b16-397f-afa3-a5eed5771162.roa
File:                     7df60e7b-4b16-397f-afa3-a5eed5771162.roa (raw, json)
Hash identifier:          RLNwbfEhOZmDtXYnTGuxodx3qzITxQqqiSZ1RSEo+8A=
Subject key identifier:   68:CD:52:72:E3:01:E3:3C:4A:15:2B:08:8E:A1:35:E0:AD:6A:C4:55
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584F4F080FC19192E291EC3E9E80
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/7df60e7b-4b16-397f-afa3-a5eed5771162.roa
Signing time:             Sun 27 Sep 2026 01:00:12 +0000
ROA not before:           Sun 27 Sep 2026 01:00:12 +0000
ROA not after:            Sat 26 Dec 2026 02:00:12 +0000
asID:                     396544
IP address blocks:        192.58.128.30/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 10 Oct 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:4f:08:0f:c1:91:92:e2:91:ec:3e:9e:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Sep 27 01:00:12 2026 GMT
            Not After : Dec 26 02:00:12 2026 GMT
        Subject: CN=57de4d66-b026-470c-a395-cc9de8d38269
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:b8:df:67:17:43:f9:ce:64:4d:32:5a:cb:1f:
                    5d:2e:0a:2b:1a:24:81:bd:9a:d2:31:a1:3b:c2:28:
                    27:8a:3e:3f:90:78:d2:12:b6:aa:0b:44:2e:79:86:
                    a5:e8:de:a4:5e:bd:14:55:e8:61:ad:64:56:b3:7b:
                    81:10:91:6b:84:86:74:a9:ee:10:95:b9:de:83:5c:
                    67:f1:ae:0f:96:89:a6:d4:90:4b:d3:60:fa:05:1e:
                    c7:30:b1:fc:c7:fd:51:62:43:18:4b:71:ad:cb:5e:
                    3d:bc:7f:02:ae:33:3d:87:c1:fb:1c:02:fa:b2:80:
                    84:28:68:98:7e:e2:70:5e:4d:59:e1:94:12:09:35:
                    b5:67:d5:7a:da:32:1f:d0:df:de:6d:00:3e:04:aa:
                    73:8b:44:ed:c6:6b:62:89:32:24:6c:be:bf:6e:f0:
                    9d:f8:fb:a5:a2:79:77:a2:b2:9e:4b:ce:53:70:44:
                    f5:f9:6d:6d:3d:fb:32:62:24:00:7b:db:e5:85:90:
                    a8:a4:df:3d:e3:39:18:03:09:ab:08:ca:b3:76:8e:
                    b1:11:9c:72:1d:f3:0f:6d:aa:d7:53:82:ab:59:05:
                    9a:40:dc:90:80:9d:ae:a9:1e:9a:c9:7f:9a:4e:0b:
                    cb:25:90:c5:32:ed:f7:a9:4a:ff:1e:ce:bb:31:c0:
                    58:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                68:CD:52:72:E3:01:E3:3C:4A:15:2B:08:8E:A1:35:E0:AD:6A:C4:55
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/7df60e7b-4b16-397f-afa3-a5eed5771162.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.58.128.30/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         21:e4:31:8a:a1:ce:b5:b0:21:71:3c:ab:da:2f:e5:9f:14:bc:
         65:f9:97:60:a7:60:93:d2:a3:c2:49:a9:26:57:07:fe:bd:67:
         22:86:55:d3:4b:d7:cc:fe:f7:42:c7:cf:6a:b2:09:a0:3f:0c:
         f1:53:7b:0b:f9:1b:f4:e5:36:70:6e:83:15:b0:0f:7e:eb:fd:
         eb:98:78:b8:73:6a:48:9b:75:2c:5f:90:c6:ba:1e:61:f6:5e:
         88:7f:25:ff:be:92:e9:be:e5:30:92:31:75:a7:25:5b:49:0a:
         a2:a2:72:3c:5f:44:70:48:48:22:5a:62:7e:c5:2e:e2:b0:70:
         f6:d5:86:54:7f:7b:cc:9f:08:48:37:0d:45:96:32:0b:38:ec:
         a7:fc:e6:8b:03:b4:d4:75:af:02:0d:a9:2c:68:96:3c:30:6c:
         d2:50:95:6f:46:32:ad:a0:3e:70:50:87:67:f0:f9:3e:27:49:
         e0:8d:67:68:9f:59:44:71:71:96:01:e0:9e:8d:ad:1a:88:bb:
         53:f1:e8:d9:52:34:44:bc:73:c0:07:91:3a:70:b9:b1:82:1c:
         89:26:c5:e4:70:eb:80:c7:b1:4c:a1:4d:11:5c:0c:78:b4:88:
         a3:a8:17:1a:3d:be:34:cf:ca:39:bc:d9:a8:55:d7:cb:1a:36:
         5b:72:ed:ac
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 8 19:53:34 2026 by rpki-client