Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/a4ca85be-3b4e-39a6-b78a-57561cd358d9.roa
File:                     a4ca85be-3b4e-39a6-b78a-57561cd358d9.roa (raw, json)
Hash identifier:          GmXgEIOdETLhdA2+oiAvJ3FlTHLokgYkdHU6gjizlW4=
Subject key identifier:   5B:F4:D1:76:DD:5C:62:74:B4:87:DA:5C:BA:9A:F3:E0:C5:C8:2F:E2
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584F4F082AC1D97C400696799C24
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/a4ca85be-3b4e-39a6-b78a-57561cd358d9.roa
Signing time:             Sun 27 Sep 2026 01:00:12 +0000
ROA not before:           Sun 27 Sep 2026 01:00:12 +0000
ROA not after:            Sat 26 Dec 2026 02:00:12 +0000
asID:                     396573
IP address blocks:        192.58.128.30/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 10 Oct 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:4f:08:2a:c1:d9:7c:40:06:96:79:9c:24
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Sep 27 01:00:12 2026 GMT
            Not After : Dec 26 02:00:12 2026 GMT
        Subject: CN=852b4c91-29fb-4adb-abba-112c75bec98f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:eb:a6:25:90:ad:3c:1d:31:72:33:db:ea:5d:c6:
                    df:57:3b:bd:9f:c1:2f:19:73:15:dc:63:10:78:76:
                    1d:d3:e6:06:9e:8a:87:aa:9f:0e:4a:44:cb:33:3b:
                    d7:ac:cb:9d:fa:7f:f6:09:c2:bd:db:6f:7a:63:dc:
                    2d:57:78:9d:55:10:79:91:d0:1c:a2:bf:0b:0c:4a:
                    cb:aa:ab:7b:f2:e1:6a:38:2e:ab:d1:7f:81:c7:d2:
                    f1:b3:8d:0a:ec:5b:9a:e0:4f:37:f6:f2:f4:f1:c6:
                    28:82:b6:38:44:0c:ff:49:ce:9b:47:87:cd:43:c4:
                    bb:2d:2b:27:88:0c:fb:82:70:19:7e:59:73:ed:fe:
                    81:88:7b:e7:d3:43:f1:6e:44:36:d2:a0:81:a7:6b:
                    ba:fa:d0:c6:70:33:d3:7e:35:c0:fc:c6:1b:b8:02:
                    68:d9:5a:ff:00:29:1a:14:fe:ac:49:a9:ba:a6:87:
                    25:20:6c:0c:73:de:68:ba:06:84:28:4d:d7:64:68:
                    15:c3:e4:0f:5a:f9:8c:fd:f3:65:c5:f2:2f:51:3f:
                    2c:6b:db:87:f8:e6:c2:25:e9:fa:a9:04:98:62:bc:
                    d4:d7:18:61:b0:88:b8:57:27:12:4d:06:5c:13:52:
                    aa:ef:3b:e5:52:c9:e6:0e:37:c1:a8:e8:28:ab:75:
                    6c:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5B:F4:D1:76:DD:5C:62:74:B4:87:DA:5C:BA:9A:F3:E0:C5:C8:2F:E2
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/a4ca85be-3b4e-39a6-b78a-57561cd358d9.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.58.128.30/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         b0:02:cd:5d:3a:8e:7a:ef:46:73:ec:ed:12:b8:65:e7:11:e5:
         7a:71:f7:89:84:de:ff:56:2a:2d:b3:50:40:93:7f:1e:44:e0:
         5c:3c:15:2c:0d:5e:05:c4:8a:f1:0c:5f:fc:7f:3a:9d:9a:bd:
         8f:74:46:8d:d4:4c:b2:d7:b5:bb:40:08:2e:fc:2a:eb:d9:16:
         e6:4a:0a:dd:d2:28:48:10:ba:a5:53:6f:6d:da:4b:09:e5:30:
         b0:91:9d:fe:62:ff:6b:17:68:32:c6:d7:6e:11:64:29:39:4a:
         ed:e3:fc:97:9e:9e:11:7e:41:07:ab:51:f9:78:41:85:9d:a0:
         08:50:65:51:25:b1:1e:80:60:80:b6:37:a7:ac:ee:b3:c2:eb:
         0b:81:ae:aa:00:fc:9b:70:5e:e6:36:15:fb:0c:ad:3f:e1:6f:
         14:d4:39:b7:86:ee:e4:bd:54:25:6f:e3:17:44:c8:0f:40:09:
         d6:d8:1b:c6:aa:9f:fe:40:a8:0d:e9:da:30:02:26:4e:ed:6b:
         73:25:f7:ea:a6:b8:72:e0:3e:27:20:fd:eb:76:d4:08:66:75:
         e9:ff:a9:a5:a8:f4:08:8f:88:3c:cc:d2:5d:9d:da:0e:3b:3f:
         c8:d3:5f:1f:c9:e7:3f:1e:fb:43:b8:f9:4d:fd:aa:76:45:d0:
         cb:ed:0a:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 7 23:03:10 2026 by rpki-client