Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c9ac1efb-6528-3a14-9b1d-6dd8a43a5d43.roa
File:                     c9ac1efb-6528-3a14-9b1d-6dd8a43a5d43.roa (raw, json)
Hash identifier:          KneFRhYwWC7S7l4AfjzAu5V+qy3GaISspcKnQ88S+/0=
Subject key identifier:   EE:E6:B7:AA:3B:26:B6:90:F4:A2:71:38:41:F2:65:6C:FF:B6:71:60
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584F6C5824F739B2C700DCC37980
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c9ac1efb-6528-3a14-9b1d-6dd8a43a5d43.roa
Signing time:             Wed 07 Oct 2026 13:00:13 +0000
ROA not before:           Wed 07 Oct 2026 13:00:13 +0000
ROA not after:            Tue 05 Jan 2027 14:00:13 +0000
asID:                     397204
IP address blocks:        192.35.51.30/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 10 Oct 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:6c:58:24:f7:39:b2:c7:00:dc:c3:79:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Oct  7 13:00:13 2026 GMT
            Not After : Jan  5 14:00:13 2027 GMT
        Subject: CN=b62400ca-5605-4e85-b2fc-614fa9ec6876
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:7c:77:f5:fe:c0:5d:5d:0d:3c:f1:b7:ca:89:
                    e8:c2:20:a7:74:78:9f:e0:46:71:4b:bd:88:6d:c6:
                    41:26:11:35:15:cc:23:8d:21:7b:8d:d6:e0:ac:cb:
                    19:9f:9a:75:9f:8a:97:1f:59:1a:21:c4:66:22:29:
                    14:b2:f1:95:b4:7a:6d:b3:93:c3:06:b5:83:9f:a4:
                    5d:7b:3b:2f:1a:91:0b:dd:45:26:f2:f2:ad:b9:27:
                    97:3a:3a:27:77:53:67:70:4d:3d:d5:66:51:40:03:
                    8b:9a:f5:1a:e4:88:da:c1:57:14:3a:66:b7:f5:39:
                    7a:74:8a:f9:83:a1:06:c1:17:1f:ad:40:3e:d8:2c:
                    41:2f:45:64:cd:07:1e:f9:03:e8:37:93:af:7c:2a:
                    6c:f4:e3:33:2f:bf:9e:2b:01:83:69:35:6e:e3:04:
                    09:71:ac:de:14:36:24:d0:e6:56:86:63:b9:9e:57:
                    ce:d7:f4:f6:27:82:ec:5e:5b:c0:fe:70:65:97:e8:
                    7a:89:e9:8d:24:46:3a:4b:1b:6c:49:a5:0e:a2:82:
                    b8:1e:1f:2a:76:b9:2c:31:df:35:6a:12:a3:05:dd:
                    a2:5b:f3:0e:04:6d:56:e1:80:0e:50:bf:fc:98:0d:
                    3f:a7:76:03:06:50:4a:55:6f:5b:a6:37:c3:83:13:
                    49:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EE:E6:B7:AA:3B:26:B6:90:F4:A2:71:38:41:F2:65:6C:FF:B6:71:60
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c9ac1efb-6528-3a14-9b1d-6dd8a43a5d43.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.35.51.30/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a1:af:75:2d:da:68:e9:89:da:a2:47:05:99:0a:e6:db:23:13:
         65:4f:98:28:fd:0c:cc:fa:10:40:93:00:11:61:00:0e:f0:3a:
         c3:74:c6:89:2b:29:fe:07:94:e0:6d:d2:6d:5f:f2:ee:e3:dd:
         5c:3d:33:ef:7c:13:b7:5f:fb:a4:58:e6:c0:eb:16:1a:14:39:
         9f:61:4b:07:9a:22:b1:b2:80:54:4d:9b:c4:2b:d5:16:0b:ec:
         87:e4:e4:d8:6f:e8:68:8e:ee:ec:49:c5:bb:f8:35:ab:8e:a2:
         10:e7:8b:c3:04:01:1f:f3:97:fe:4a:86:65:c4:a2:57:de:6b:
         c7:79:d3:c9:67:48:cd:e0:ef:26:24:36:e3:2f:a0:5a:ed:17:
         2f:bd:3d:a7:c2:2e:b1:15:d2:16:f7:a8:2f:10:f9:c4:c4:65:
         81:a0:0e:f1:74:5c:aa:75:a5:11:ff:10:e9:3e:1a:ac:d2:cf:
         cd:d2:c6:c0:12:06:1f:e4:3f:ed:02:29:1e:82:60:6b:ea:59:
         c6:2f:1e:fc:90:63:6c:4e:fd:7a:a1:51:53:8d:fc:c5:28:46:
         6b:3d:3d:ed:42:21:9e:5a:49:e0:f2:5a:43:7c:4a:31:54:49:
         ad:ed:88:7c:9f:14:f9:da:d1:2c:66:14:9f:ad:e0:44:3f:3b:
         58:ee:36:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 7 23:04:45 2026 by rpki-client