Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/88a546a2-6911-3e07-8492-f432afea9c39.roa
File:                     88a546a2-6911-3e07-8492-f432afea9c39.roa (raw, json)
Hash identifier:          cB6Tu2yLC+2zhd3AN0FtebevdhlxowXjfOISMR5oSww=
Subject key identifier:   BE:2D:C2:13:D4:E5:67:6E:4F:6C:08:76:71:7A:61:D5:1E:E6:57:38
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584F6C5822685D1195B5AA7C3B80
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/88a546a2-6911-3e07-8492-f432afea9c39.roa
Signing time:             Wed 07 Oct 2026 13:00:13 +0000
ROA not before:           Wed 07 Oct 2026 13:00:13 +0000
ROA not after:            Tue 05 Jan 2027 14:00:13 +0000
asID:                     396540
IP address blocks:        192.35.51.30/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 10 Oct 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:6c:58:22:68:5d:11:95:b5:aa:7c:3b:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Oct  7 13:00:13 2026 GMT
            Not After : Jan  5 14:00:13 2027 GMT
        Subject: CN=d77a5ad0-a916-4758-9563-50c95f7b86fc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:fc:14:d6:bc:47:9f:e2:63:23:cb:26:e0:5f:
                    84:29:61:da:7d:48:8a:5d:1d:a9:52:5d:09:12:68:
                    1e:08:18:8a:ac:46:6f:a7:25:77:79:8a:71:13:00:
                    68:31:53:46:a0:36:b6:cf:96:f2:4b:ce:35:e0:66:
                    29:5b:39:d1:37:05:d8:cc:93:ea:3e:16:4b:ae:53:
                    af:7f:9f:32:c3:88:c9:46:48:ce:88:80:8b:bb:6f:
                    7a:d2:4c:37:48:8c:dd:04:34:84:d6:cc:5f:5b:b4:
                    8f:6e:0d:6d:b5:5a:63:b1:dc:42:5d:dd:41:97:5e:
                    6a:a6:fb:f7:1b:71:96:4c:98:3b:80:3d:ed:bb:6a:
                    1f:64:4c:1a:8b:95:cb:a0:5a:00:20:4a:05:68:4f:
                    da:47:d7:48:d4:dc:1d:ee:3a:07:2f:32:2d:43:88:
                    21:1e:91:76:de:b7:b7:96:e5:25:48:31:3f:d1:86:
                    f6:40:20:aa:95:a8:63:5f:07:fa:3f:d3:7e:09:20:
                    16:1a:19:8d:bd:bf:7c:88:0a:94:44:5c:e6:5f:29:
                    c3:db:ff:79:48:51:75:27:50:10:ee:0b:22:1a:cf:
                    5d:ae:c3:32:5d:e6:29:3b:3f:2d:5c:13:cd:09:29:
                    83:0d:8a:16:e7:3b:02:78:7e:f4:44:73:80:18:a2:
                    58:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BE:2D:C2:13:D4:E5:67:6E:4F:6C:08:76:71:7A:61:D5:1E:E6:57:38
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/88a546a2-6911-3e07-8492-f432afea9c39.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.35.51.30/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         51:bb:60:71:10:e7:15:97:6c:f2:a7:f2:9f:fc:e2:0b:1d:0d:
         4b:78:3c:6d:b0:f9:e1:d4:61:9b:77:0e:99:b0:db:ce:88:60:
         9e:b3:06:0d:4c:72:b3:1e:0a:7e:2c:34:11:9f:e3:ac:f6:b4:
         53:1c:74:83:2c:35:44:32:66:c8:61:e7:b8:33:96:2d:e2:98:
         87:6f:1d:de:33:34:01:47:5e:0a:6b:b6:94:21:13:d3:17:48:
         86:8c:cb:31:ad:9b:b0:94:a1:18:69:57:df:5c:67:30:ff:c6:
         ed:79:88:49:f3:51:dc:ef:f0:61:75:23:e6:96:0e:e0:a7:48:
         2b:df:a9:f8:3c:54:97:b2:3e:1e:16:de:44:6c:92:9f:a9:c1:
         27:58:7e:07:d3:5a:5f:28:3d:8e:b2:7c:a5:a1:39:b0:f7:c7:
         a3:d9:9e:3a:30:91:e4:0b:d3:ba:3f:69:18:36:71:32:df:df:
         8f:03:27:62:de:53:1a:27:68:70:4b:8b:c1:80:bf:62:ed:ac:
         8d:e1:cf:12:b7:f1:77:70:db:5c:e2:02:25:bf:11:60:d7:6b:
         9f:08:41:33:f7:1d:97:c4:c2:81:37:e4:49:bd:95:f1:fa:64:
         14:b3:12:d0:58:22:99:23:6a:d4:62:0d:00:92:9a:06:e7:c7:
         fc:cd:77:42
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 8 16:37:59 2026 by rpki-client