Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/f366969b-d907-307d-9e2f-d6db76f32927.roa
File:                     f366969b-d907-307d-9e2f-d6db76f32927.roa (raw, json)
Hash identifier:          dawsKCqYioilPZTH7tGy6ZWn4B5ByJuzzUwrkBSMcjg=
Subject key identifier:   44:AB:B2:69:F1:BA:B2:90:71:00:50:50:49:D4:6B:04:0F:4F:87:48
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584F497D8C3EFE37AF6421D43BD0
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/f366969b-d907-307d-9e2f-d6db76f32927.roa
Signing time:             Fri 25 Sep 2026 01:00:12 +0000
ROA not before:           Fri 25 Sep 2026 01:00:12 +0000
ROA not after:            Thu 24 Dec 2026 02:00:12 +0000
asID:                     36625
IP address blocks:        192.68.126.30/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 08 Oct 2026 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:49:7d:8c:3e:fe:37:af:64:21:d4:3b:d0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Sep 25 01:00:12 2026 GMT
            Not After : Dec 24 02:00:12 2026 GMT
        Subject: CN=2720af49-efb7-415c-8e12-0efc2967cacc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8b:42:1b:15:ad:6b:4d:d4:1d:bf:01:f0:90:e7:
                    8f:e1:40:d6:8f:4d:19:ec:0a:31:d2:a4:8c:79:41:
                    73:4d:d1:7e:10:b7:79:4b:82:51:36:6e:5e:8e:27:
                    23:23:88:b8:ba:ad:35:47:8c:13:00:8f:20:bd:11:
                    11:b1:2d:30:69:65:52:32:f7:79:2f:dc:dd:a9:53:
                    b2:49:43:9c:6c:17:b9:d2:0d:24:e4:96:00:7b:ad:
                    81:de:a7:67:59:d3:a2:fc:ab:a1:20:10:0f:04:29:
                    30:d6:a1:4e:b8:c3:36:d6:de:aa:da:9c:63:7f:35:
                    98:25:1b:1f:fe:bc:e3:38:90:af:31:bd:71:4e:51:
                    79:8f:6a:46:d5:3e:ff:c7:e4:8c:37:b1:f1:9c:1a:
                    7c:d6:00:29:5a:0e:3b:d7:b2:77:2b:91:24:9a:3b:
                    19:b0:8f:fe:bd:f2:43:d5:49:b2:fa:1f:95:d5:05:
                    01:bc:d7:07:1f:88:eb:12:a5:ae:d7:31:92:5d:a9:
                    27:fa:22:d8:2d:bf:dc:cc:7f:85:26:41:98:09:78:
                    0c:83:10:8e:6d:61:5f:0c:c9:d8:9c:36:ed:91:4e:
                    22:80:db:75:06:90:52:5c:86:29:de:97:13:5f:e9:
                    63:5b:11:8e:96:2e:2b:d8:1f:f6:4d:ac:23:73:1e:
                    bf:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                44:AB:B2:69:F1:BA:B2:90:71:00:50:50:49:D4:6B:04:0F:4F:87:48
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/f366969b-d907-307d-9e2f-d6db76f32927.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.68.126.30/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         03:76:f9:57:06:33:fd:57:17:1a:57:cd:71:18:eb:8a:fd:89:
         16:1d:3c:a3:1c:52:a3:5d:6c:d5:a4:2f:87:9a:1a:d0:ef:02:
         cc:57:19:12:6a:59:3d:d2:f8:8a:b2:74:d4:97:99:8c:fb:c6:
         23:22:a5:5d:0b:5c:ca:1a:60:2b:23:5b:de:13:c7:ff:1e:9e:
         df:05:d2:56:f3:a5:72:16:72:f4:6e:3d:76:ee:f4:fe:71:5a:
         ff:9e:9e:ce:c3:ab:c1:58:0b:65:b1:f7:c4:c9:fd:10:d3:9e:
         0e:c4:f2:8f:60:f9:23:9d:0f:69:d5:0d:f5:6c:af:a4:62:5f:
         31:cf:f5:6e:75:af:97:51:d2:1a:83:b5:68:55:e6:d3:2a:cc:
         62:b9:a4:ff:ac:5e:c4:b1:02:d6:2a:9d:b6:4f:5b:6e:ad:1c:
         23:73:94:62:b7:a3:87:3c:98:8b:3b:e5:1f:a9:0b:fe:c1:aa:
         e7:e3:a7:75:98:ec:91:6b:70:24:22:25:74:0a:de:ef:80:25:
         0e:67:a6:41:b7:a5:5c:18:04:ec:72:53:0f:70:38:52:c9:fa:
         51:c4:5c:66:a7:e6:76:7f:95:9e:7d:37:09:77:4e:75:8d:cb:
         48:bd:ad:af:b8:22:89:04:5d:7c:82:f7:25:98:17:85:6a:69:
         38:de:dd:dd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 7 02:35:20 2026 by rpki-client