Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/0ac3ef4c-3306-35e5-87e2-db06c7341fa5.roa
File:                     0ac3ef4c-3306-35e5-87e2-db06c7341fa5.roa (raw, json)
Hash identifier:          Dg3M67ixDY13eVhiydY1H7hvH6V0bwH8cu27i7aYz9g=
Subject key identifier:   B1:14:A7:C2:E0:72:0E:50:3D:2E:63:56:B6:4B:D2:1F:A6:3F:E8:CD
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584F1CC7A25392CC41663616BB40
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/0ac3ef4c-3306-35e5-87e2-db06c7341fa5.roa
Signing time:             Wed 09 Sep 2026 01:00:11 +0000
ROA not before:           Wed 09 Sep 2026 01:00:11 +0000
ROA not after:            Tue 08 Dec 2026 02:00:11 +0000
asID:                     396573
IP address blocks:        192.42.177.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 24 Sep 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:1c:c7:a2:53:92:cc:41:66:36:16:bb:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Sep  9 01:00:11 2026 GMT
            Not After : Dec  8 02:00:11 2026 GMT
        Subject: CN=34ead793-2d4b-49d1-91bc-f780f659fc8f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:7b:30:66:40:5c:a5:18:8b:49:56:4c:b7:86:
                    15:13:8c:04:2f:92:53:38:ee:47:c4:27:81:b2:22:
                    c0:4f:4c:58:ee:79:df:d6:c4:51:3f:13:83:ba:61:
                    07:dc:e1:67:3b:0a:a7:5a:6b:f7:e0:fb:61:7b:75:
                    3e:f7:8f:83:c5:57:df:b1:73:d6:75:ee:dc:6a:a6:
                    30:93:86:38:3d:08:8e:e3:6c:74:fe:45:35:38:d7:
                    e3:8a:11:88:fa:8b:07:0a:ea:49:9c:ee:cc:fa:2a:
                    1f:b2:5a:5f:35:a5:bb:a8:57:30:82:dc:14:26:e1:
                    bf:79:91:ef:1c:dc:61:d8:ee:6d:9d:c4:19:88:78:
                    c5:d6:65:3b:eb:09:17:20:e9:06:ce:96:54:0c:bd:
                    c8:32:21:9f:12:d2:7e:b8:66:14:21:2d:dd:a9:87:
                    37:7b:46:3e:33:f3:cd:66:40:01:47:61:dc:be:eb:
                    a7:69:f9:50:1d:5b:8c:18:37:da:d0:bb:b3:a1:df:
                    3f:ee:d6:fb:82:1b:3b:ef:d8:7f:76:4a:5c:3b:f8:
                    6c:43:fa:eb:79:43:ad:3b:58:8a:f3:43:ee:b1:28:
                    86:08:fc:f8:b5:80:54:e0:17:06:70:81:12:63:a1:
                    e6:da:d6:36:d4:ae:53:80:11:f0:7e:c5:db:47:85:
                    33:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B1:14:A7:C2:E0:72:0E:50:3D:2E:63:56:B6:4B:D2:1F:A6:3F:E8:CD
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/0ac3ef4c-3306-35e5-87e2-db06c7341fa5.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.42.177.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         04:6b:62:7c:6e:c5:47:b4:8d:e2:42:5d:52:99:00:05:a4:59:
         97:a2:43:b4:8c:73:c9:fc:63:de:0e:62:bb:3e:b4:4a:80:a2:
         72:85:86:3f:fa:e5:df:e4:35:d3:64:b0:8e:55:87:1e:a2:16:
         8f:f3:22:f6:2a:a5:06:df:a8:ad:60:9f:74:57:a0:77:4a:3d:
         02:9e:4d:fa:a8:f1:45:a2:cc:84:3d:50:f5:a9:9f:a2:6e:1c:
         f1:fe:3c:c5:08:90:f4:f2:7b:35:c2:98:6c:3e:db:fd:8c:f8:
         73:c2:93:f9:b5:81:2f:2a:10:01:e8:38:11:98:10:44:ac:75:
         5b:a3:3e:50:e1:8a:c2:3b:71:98:a5:30:55:78:6d:7a:ea:d8:
         9d:37:d0:d5:37:a6:14:99:75:9f:d2:db:a5:b8:37:4e:4f:3d:
         66:65:b5:99:74:78:a2:69:0d:dc:30:51:72:88:21:dd:ef:3f:
         78:0f:37:41:91:ec:d0:e7:b8:eb:47:14:7f:f2:9d:50:34:58:
         80:97:b8:bd:34:73:6e:28:bf:d3:db:44:44:6e:42:9b:1b:70:
         3f:84:e2:70:38:e3:9c:56:14:8e:6d:0d:49:62:c7:2a:36:fd:
         e0:eb:22:9b:e2:b6:ba:5b:ee:f5:32:ac:58:68:d5:a9:bb:5c:
         3d:b1:c1:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 18:18:38 2026 by rpki-client