Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/96097541-f64c-3c53-9658-6d0ff8ed870a.roa
File:                     96097541-f64c-3c53-9658-6d0ff8ed870a.roa (raw, json)
Hash identifier:          bIqG9KcTKoVpZ0YqulBBs1m8R09wewD84erRTHH9zL8=
Subject key identifier:   BD:6F:A5:E6:F5:63:25:55:02:49:5B:C3:F7:B9:52:E2:89:DE:62:31
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584F06728264BA1D251C0EF58200
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/96097541-f64c-3c53-9658-6d0ff8ed870a.roa
Signing time:             Tue 01 Sep 2026 01:00:12 +0000
ROA not before:           Tue 01 Sep 2026 01:00:12 +0000
ROA not after:            Mon 30 Nov 2026 02:00:12 +0000
asID:                     396580
IP address blocks:        192.82.134.30/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 10 Oct 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:06:72:82:64:ba:1d:25:1c:0e:f5:82:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Sep  1 01:00:12 2026 GMT
            Not After : Nov 30 02:00:12 2026 GMT
        Subject: CN=50c76f11-6180-4859-b9fc-65a848f5ac31
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:68:51:8c:f0:0e:17:40:a2:71:2d:34:f3:5c:
                    c9:85:84:b7:37:98:00:26:0f:db:95:48:c2:3c:6d:
                    46:03:3d:54:79:48:ef:c4:f1:79:52:b5:d3:43:e3:
                    bf:36:11:31:ee:c1:59:1e:79:31:f4:1b:6e:e1:61:
                    31:fb:3e:0f:17:ac:5c:dd:d2:e0:2a:79:91:a4:cf:
                    16:e2:ad:0a:87:69:32:49:c7:24:5f:5c:f1:a6:65:
                    53:0b:cc:0b:fb:89:05:51:6e:5a:05:89:a5:99:ac:
                    df:2a:26:95:4a:ed:d7:97:84:f5:62:7c:64:3f:27:
                    0f:b3:e2:30:87:4e:64:ab:3d:e4:50:94:7b:3f:05:
                    f1:eb:dc:19:7c:ea:3d:80:58:94:c9:fd:7f:f9:01:
                    f2:f9:6b:e6:05:05:03:93:dc:13:b7:b8:43:cc:24:
                    db:53:88:79:7f:21:1c:6e:28:34:de:59:cc:d6:32:
                    2d:64:62:71:8e:ff:d4:8d:5f:3e:4b:0c:fb:c8:ff:
                    d3:87:73:9f:e8:33:31:f8:12:6f:0c:ae:27:ef:93:
                    9b:ed:10:4e:03:b1:d1:36:23:e7:37:7f:88:7d:cf:
                    76:b9:aa:0a:42:f9:04:54:9a:52:fa:04:ca:a0:25:
                    22:84:97:56:5f:bb:22:62:b7:7a:5c:9a:57:1b:7e:
                    02:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BD:6F:A5:E6:F5:63:25:55:02:49:5B:C3:F7:B9:52:E2:89:DE:62:31
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/96097541-f64c-3c53-9658-6d0ff8ed870a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.82.134.30/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1d:b5:4d:f5:11:83:96:dd:52:2c:24:72:ee:40:ef:1e:84:4a:
         cb:4a:55:74:d4:3e:b5:70:14:8b:ae:c9:3c:62:db:ee:95:07:
         be:d6:0b:64:04:43:9d:63:e0:25:c8:a3:cd:bf:59:4a:c6:68:
         47:26:34:22:5d:6e:88:88:ef:a8:32:71:96:e9:5e:4d:fe:e4:
         88:f1:b5:da:68:f2:d6:96:44:67:94:74:f7:a0:ad:57:18:69:
         28:52:8d:a3:56:4a:81:15:d6:1a:e9:01:14:3b:8c:3f:54:9f:
         da:bb:5c:46:26:2d:a5:fe:ad:ec:e8:59:0f:f9:09:d9:c3:7e:
         c3:51:a4:c0:cb:12:af:69:05:21:d5:48:95:32:2c:c9:57:a2:
         6f:db:fb:a3:06:0d:52:f2:69:9b:5b:c3:66:5c:32:73:15:40:
         a1:36:c1:96:48:91:61:6c:bf:38:26:5f:12:10:b1:98:f8:30:
         03:c0:1b:3a:5b:87:a1:e1:36:4e:1b:36:6b:63:a3:0a:2e:b0:
         99:96:cc:c8:e4:37:0f:f9:4a:3d:a3:8a:9f:33:7c:13:d4:d4:
         aa:3e:f0:55:b3:47:7b:bf:a6:b5:83:80:c9:81:0e:2b:fd:87:
         55:ca:30:8d:02:38:47:09:6f:50:f0:e9:49:5d:51:68:d0:c7:
         97:ec:c4:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 8 14:32:52 2026 by rpki-client