Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/cf2163cd-b2f5-33c8-909b-1d9810e4d68c.roa
File:                     cf2163cd-b2f5-33c8-909b-1d9810e4d68c.roa (raw, json)
Hash identifier:          puYM5cjBtXAm/rHFIkyiBHTOWQEVZ8dG6gL013ODhKk=
Subject key identifier:   DC:EF:13:16:33:DD:70:CF:5F:94:53:B1:10:77:BD:9C:7A:3C:ED:D8
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584F4972FA2538E64DA94DD6B100
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/cf2163cd-b2f5-33c8-909b-1d9810e4d68c.roa
Signing time:             Fri 25 Sep 2026 01:00:12 +0000
ROA not before:           Fri 25 Sep 2026 01:00:12 +0000
ROA not after:            Thu 24 Dec 2026 02:00:12 +0000
asID:                     396599
IP address blocks:        192.43.172.30/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 08 Oct 2026 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:49:72:fa:25:38:e6:4d:a9:4d:d6:b1:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Sep 25 01:00:12 2026 GMT
            Not After : Dec 24 02:00:12 2026 GMT
        Subject: CN=4c20895b-4dc8-4595-8771-253177245fb7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:43:18:75:cb:ee:f9:e4:76:75:71:2f:0b:c1:
                    bd:36:c7:5f:b5:d3:6f:23:95:cc:12:6b:d2:a8:23:
                    45:e2:86:c3:e4:14:61:0b:c3:28:89:b6:ca:42:0a:
                    c5:4f:20:5d:ad:4d:04:e2:c3:5f:e6:69:1c:3f:eb:
                    49:5a:7a:09:1a:76:b8:d2:e5:a0:86:af:bd:15:63:
                    3f:db:c8:78:d8:14:8d:86:d3:62:62:9b:c3:05:d7:
                    b6:ea:f3:49:da:2c:bd:3b:cc:82:12:44:55:a7:d9:
                    67:18:d4:1c:7c:bb:3c:79:f3:4c:56:20:32:1c:4d:
                    8f:c0:fd:96:41:99:32:81:b2:22:54:9a:ca:37:e4:
                    a5:9d:2c:a7:c0:56:e0:48:95:cd:e1:3c:c0:8d:df:
                    ae:af:74:ba:ca:28:ff:e8:be:a5:4c:bf:bc:99:5f:
                    6b:4b:48:e6:69:d1:cc:93:d1:96:23:15:6a:9b:14:
                    94:7a:d2:4b:8e:7e:f2:69:3f:48:58:7b:04:a1:0f:
                    47:e5:63:3c:5d:63:76:86:3d:9d:9a:d2:77:9e:6f:
                    3f:c7:08:74:8a:6c:1f:07:bc:60:eb:17:04:b1:47:
                    e5:da:62:f9:31:5a:f4:c3:35:8e:3c:d8:54:3b:52:
                    c4:97:f5:73:72:43:64:02:cf:6e:19:cb:70:99:71:
                    d8:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DC:EF:13:16:33:DD:70:CF:5F:94:53:B1:10:77:BD:9C:7A:3C:ED:D8
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/cf2163cd-b2f5-33c8-909b-1d9810e4d68c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.43.172.30/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5b:c2:a0:54:4b:24:47:8a:0d:5d:45:1d:f7:c8:52:99:d3:2e:
         05:81:9f:e7:65:a0:47:90:06:cc:ed:1e:77:83:74:be:43:88:
         40:5a:6b:8e:b6:dd:d8:9a:6d:b1:2d:72:ab:d3:25:f5:78:57:
         b3:5e:e4:9b:9b:1f:70:5b:37:08:56:b0:e0:07:62:8b:1d:31:
         60:1f:3c:ae:ff:87:65:67:e9:57:9d:48:3e:1e:3c:f2:88:37:
         79:d3:fa:94:f1:55:e7:99:35:c7:f1:1f:47:85:4d:93:39:6f:
         28:c5:5c:b6:71:58:cb:ee:85:a4:f9:dc:17:fc:4f:1b:06:c7:
         88:d7:9e:15:bc:4f:09:08:9d:11:73:1b:fe:51:bb:8c:74:1d:
         07:d2:28:d3:fb:be:8a:d0:12:b2:c5:35:39:01:c5:e0:a9:b5:
         65:1a:6a:26:bc:1a:15:0c:22:02:0e:ce:d8:67:d2:1b:19:ee:
         39:7c:bf:10:31:87:6f:8c:0c:9a:fa:c7:1e:69:87:2a:2f:35:
         27:68:bc:48:91:54:ef:9a:68:96:b7:91:db:d4:8c:1d:5d:8a:
         22:f8:e3:69:b2:98:7b:02:0d:60:b5:46:b5:d8:d8:6b:bb:c6:
         9c:2f:94:6b:5e:38:0b:5d:b6:64:d4:71:ca:53:9f:15:bb:ea:
         99:2f:02:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 7 04:29:12 2026 by rpki-client