Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/8cc22c29-b6b1-32cd-9e8e-2e7d7b3115bf.roa
File:                     8cc22c29-b6b1-32cd-9e8e-2e7d7b3115bf.roa (raw, json)
Hash identifier:          MHYtemshoIR6KY0mskfg1nsuUe4ZvCwowZuQQgy2Qr8=
Subject key identifier:   F1:BB:4B:BD:93:78:84:46:17:7A:3D:79:A4:46:2A:C4:F2:6B:B7:95
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584EA791E798FD13546B02CFEF80
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/8cc22c29-b6b1-32cd-9e8e-2e7d7b3115bf.roa
Signing time:             Wed 29 Jul 2026 01:00:12 +0000
ROA not before:           Wed 29 Jul 2026 01:00:12 +0000
ROA not after:            Tue 27 Oct 2026 01:00:12 +0000
asID:                     396541
IP address blocks:        192.68.126.30/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 21 Aug 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:a7:91:e7:98:fd:13:54:6b:02:cf:ef:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Jul 29 01:00:12 2026 GMT
            Not After : Oct 27 01:00:12 2026 GMT
        Subject: CN=ec747526-6a59-49be-8483-97d437237b93
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8e:0a:e8:9a:17:b4:66:b6:e8:67:af:3d:e8:d1:
                    c8:08:14:7c:2e:67:7b:e2:06:09:bb:db:3a:c5:e2:
                    36:03:60:30:8d:20:6d:f3:8f:78:68:1f:da:9d:4e:
                    3e:9c:54:20:34:f7:c3:82:9f:c7:5a:7d:ef:ba:a2:
                    ca:e3:72:ed:26:a5:71:99:47:18:ce:78:f8:4b:c9:
                    0f:87:ce:b6:cc:df:07:39:c5:85:03:e2:b7:f2:08:
                    05:62:59:7d:65:6c:85:f7:4e:45:55:49:16:55:44:
                    d5:28:d7:7f:70:51:39:a6:ed:ae:5d:e1:a6:9d:51:
                    0d:4a:3c:46:1f:ef:bd:34:cb:7e:8c:54:63:01:fd:
                    81:5f:02:16:a4:0b:0c:47:65:1f:6a:fe:d0:f3:d9:
                    e9:e2:73:fc:f7:3c:4f:34:44:50:4e:c1:3c:4c:0e:
                    c4:5b:f0:b6:6e:0f:4d:42:ff:3b:66:e8:78:a2:db:
                    00:4f:f4:60:af:3c:b0:92:44:1c:28:02:6b:26:36:
                    1c:94:91:5e:f9:b9:25:6d:d2:70:e5:97:b6:cb:bc:
                    a8:ef:e3:40:d6:84:5c:47:42:07:ed:9c:32:d1:29:
                    f6:6e:22:b5:02:d6:3a:43:b9:19:49:18:e4:19:22:
                    16:ae:0a:41:5c:e4:63:c1:73:b7:a7:5c:58:a2:1d:
                    57:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F1:BB:4B:BD:93:78:84:46:17:7A:3D:79:A4:46:2A:C4:F2:6B:B7:95
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/8cc22c29-b6b1-32cd-9e8e-2e7d7b3115bf.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.68.126.30/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a4:1c:1c:75:52:f2:40:86:54:01:7c:20:a9:e1:23:1f:33:1f:
         5e:98:f7:46:e6:a4:21:01:fb:ca:a1:a2:ca:55:42:26:74:7d:
         b3:eb:42:db:56:57:7d:e2:e3:4c:be:f8:79:00:a3:b6:d1:a8:
         05:88:9b:15:c1:ca:97:b7:11:68:5a:c7:01:69:97:ac:49:0f:
         76:36:ed:b7:ee:a1:55:7f:b5:01:fe:ad:4b:31:84:9d:21:d1:
         99:67:3e:e7:b6:26:bd:b9:7d:72:99:93:d6:f2:bb:1e:a2:8d:
         62:95:0b:3e:8a:73:4a:fe:d8:6d:d1:0c:b3:b2:cc:da:28:60:
         b5:ce:2d:bd:73:fc:e4:db:c5:2e:3a:1c:c4:39:f7:45:15:1f:
         c4:79:8f:09:c7:bb:4e:b3:12:6b:fe:34:af:7d:19:26:fd:3d:
         22:8a:e6:78:99:8c:a3:aa:f4:6a:58:9d:6f:c6:50:dd:9d:b4:
         0b:c7:f7:4e:08:52:e6:25:2b:d1:ea:c6:7d:83:54:f5:f5:3d:
         0c:d7:1a:d2:4e:91:91:be:20:46:29:fa:24:1b:8d:b7:82:e5:
         aa:09:ec:81:c7:47:7d:4f:0b:90:f4:5c:80:89:71:7e:4c:c2:
         3f:b2:94:f1:6d:fb:83:3b:b9:4c:1a:ee:ea:88:5c:ef:52:21:
         a7:16:ad:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 19 19:30:51 2026 by rpki-client