Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/ba58bf92-d187-39b9-b5b4-bedfa46eb034.roa
File:                     ba58bf92-d187-39b9-b5b4-bedfa46eb034.roa (raw, json)
Hash identifier:          t7cngRJQJF98zsw8+xNdQPy/qbhrqZaAxgVB2xWPKG8=
Subject key identifier:   49:79:76:69:6B:F9:11:78:EF:CD:9D:44:02:3D:54:77:FF:3A:5A:F5
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584F497F514ADA07C11517139100
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/ba58bf92-d187-39b9-b5b4-bedfa46eb034.roa
Signing time:             Fri 25 Sep 2026 01:00:12 +0000
ROA not before:           Fri 25 Sep 2026 01:00:12 +0000
ROA not after:            Thu 24 Dec 2026 02:00:12 +0000
asID:                     36621
IP address blocks:        192.68.130.30/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 12 Oct 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:49:7f:51:4a:da:07:c1:15:17:13:91:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Sep 25 01:00:12 2026 GMT
            Not After : Dec 24 02:00:12 2026 GMT
        Subject: CN=1ce35406-1a36-4572-951c-b3d5c50dd696
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:62:62:5b:c3:c2:4d:8d:57:4b:65:d7:4d:8a:
                    61:f8:65:b6:f9:f7:03:ac:e3:33:9b:a9:10:86:ce:
                    7a:00:e9:08:61:70:ee:a3:57:1b:3c:04:96:4f:a9:
                    6c:23:41:ec:cb:a7:72:a1:ee:d2:57:3d:3f:9a:97:
                    18:e6:11:85:61:ca:b1:dd:41:f8:3d:60:34:92:11:
                    70:09:19:5c:47:92:47:f5:e3:e4:e0:0e:cc:75:bf:
                    3c:ea:1a:99:77:9e:15:29:93:4f:96:7a:cc:32:7e:
                    2f:ed:30:d6:dd:df:24:5d:04:ba:b7:12:f5:41:39:
                    bd:0c:70:6d:b1:e1:3e:4d:8f:3b:c4:b7:50:9b:d1:
                    34:74:d6:00:67:69:79:07:1b:95:ed:c1:53:e4:e6:
                    e6:dc:72:df:c5:a0:59:ff:e8:8c:78:29:06:44:f8:
                    f4:3e:92:4b:9f:96:22:6c:5c:91:5e:f3:55:60:e0:
                    b6:e8:de:54:26:f8:1c:1f:3e:9a:f8:27:53:fd:19:
                    b7:c3:dd:d2:23:71:4f:1a:6d:a9:75:ec:5a:2b:0f:
                    6f:3d:a9:e6:8f:67:c8:3d:86:60:3b:aa:43:63:9f:
                    21:a8:0a:77:48:61:a6:1a:70:85:e9:8f:49:c3:4b:
                    5a:70:34:62:bf:bb:9d:f5:ae:71:41:be:5a:37:8f:
                    2f:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                49:79:76:69:6B:F9:11:78:EF:CD:9D:44:02:3D:54:77:FF:3A:5A:F5
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/ba58bf92-d187-39b9-b5b4-bedfa46eb034.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.68.130.30/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         56:38:c5:33:3e:f8:a0:7b:65:55:b4:90:34:7c:fe:22:83:1c:
         d2:0f:31:1c:38:3c:ed:90:a3:14:8b:cb:3c:26:67:ca:78:32:
         80:8a:1a:10:59:80:71:77:4f:fd:77:04:fc:06:a0:7f:28:37:
         ae:14:96:3e:f8:e4:aa:08:4e:44:14:9e:ef:30:53:aa:25:ea:
         76:45:65:71:9e:ae:0b:cb:f8:be:64:8a:ce:0c:74:97:9f:4a:
         60:2c:89:57:f1:6f:78:16:b2:0c:70:52:e4:c8:e9:eb:fb:61:
         08:a1:9b:8f:55:37:96:89:73:fd:56:7c:18:3f:81:c5:9e:17:
         01:df:78:be:39:f5:60:74:d6:1e:f7:90:d5:bb:b0:6e:79:fd:
         82:39:b9:ea:3f:c1:3e:db:cb:37:33:0b:82:d2:5c:f9:ec:22:
         db:46:8d:ff:a2:92:0a:db:ce:90:ae:4a:96:97:9b:1f:f9:c8:
         43:86:7e:92:6a:ca:68:92:94:1e:01:73:fe:e7:d9:a7:b5:10:
         bb:d8:c3:3f:b9:a7:39:44:d0:da:65:70:b3:d1:29:0b:26:a4:
         c1:4a:4e:78:b8:1f:cc:b2:16:43:62:f1:41:c7:6f:13:98:d7:
         7a:13:17:bc:f3:19:0f:41:83:d2:7f:d4:d5:41:cf:b3:ab:fb:
         e1:17:1e:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 9 17:39:55 2026 by rpki-client