Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/15060b39-b1f1-3bae-9525-ba59b3cd3dbe.roa
File:                     15060b39-b1f1-3bae-9525-ba59b3cd3dbe.roa (raw, json)
Hash identifier:          Q1Jk0nHnQIsN8u54JA8RhuLDs0xXU36quuuJvdKSywc=
Subject key identifier:   3F:45:62:30:E2:3A:50:9D:9F:A8:FF:D1:2C:D6:0F:E3:26:F7:CA:17
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584F49742A6057F68E07B7DEAE00
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/15060b39-b1f1-3bae-9525-ba59b3cd3dbe.roa
Signing time:             Fri 25 Sep 2026 01:00:12 +0000
ROA not before:           Fri 25 Sep 2026 01:00:12 +0000
ROA not after:            Thu 24 Dec 2026 02:00:12 +0000
asID:                     396543
IP address blocks:        192.31.80.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 28 Sep 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:49:74:2a:60:57:f6:8e:07:b7:de:ae:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Sep 25 01:00:12 2026 GMT
            Not After : Dec 24 02:00:12 2026 GMT
        Subject: CN=8958e06a-3ec0-46e8-983b-ba8f44a95c52
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:90:6b:ce:e0:05:8e:95:eb:7c:eb:fb:ba:c1:59:
                    77:6a:84:b9:c9:1c:3e:39:fe:ac:f8:b5:bd:6f:f6:
                    2f:ae:a8:1f:e8:12:39:5f:21:dd:d5:8b:4b:55:76:
                    fb:9d:03:63:c7:72:2d:03:0e:dd:bf:3e:a3:76:4a:
                    bf:38:47:5d:f2:00:50:0d:eb:af:55:d4:1f:f8:4f:
                    f2:b6:cc:38:cf:96:2c:1e:10:59:47:4d:e9:0f:63:
                    e8:69:c6:51:4f:8c:81:72:e8:66:98:6c:b9:45:ba:
                    78:f6:d5:6c:db:9e:63:72:95:86:50:b1:57:16:41:
                    f2:6a:6f:a2:13:75:c4:73:e5:70:db:c1:d1:93:45:
                    28:8c:53:82:3e:cf:01:8e:08:e4:9f:79:46:d0:92:
                    0d:77:9b:55:7c:8f:4d:35:6c:e0:01:3d:1a:09:9c:
                    38:e3:17:c1:b3:3a:91:81:1b:a3:f5:7e:99:88:7b:
                    a5:0b:f0:fb:aa:7d:5d:b1:52:df:22:f7:a8:f1:a4:
                    9a:99:af:de:32:28:20:df:45:74:88:1b:9d:d4:db:
                    7f:00:a2:f8:5d:59:9a:d0:2a:b9:d8:07:02:ab:c7:
                    32:c4:e5:ae:ba:28:b3:1d:06:55:64:12:8e:db:dd:
                    ac:41:12:45:57:e8:cd:2d:9f:56:fe:f6:ce:12:c3:
                    8b:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3F:45:62:30:E2:3A:50:9D:9F:A8:FF:D1:2C:D6:0F:E3:26:F7:CA:17
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/15060b39-b1f1-3bae-9525-ba59b3cd3dbe.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.31.80.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a1:f9:a0:5f:bf:19:2c:c1:86:0f:fb:4b:b3:85:40:1e:76:99:
         95:10:d7:89:32:71:7c:3f:7f:fa:75:05:56:2c:fc:f9:2a:84:
         47:65:96:f8:b5:96:57:28:8a:47:29:41:13:70:09:7d:62:ed:
         49:00:07:49:16:af:12:4a:7d:93:6c:a3:34:48:9b:b7:4e:06:
         0d:0d:07:78:82:4e:7b:05:1c:66:16:d0:44:4e:c0:42:07:ce:
         95:9c:01:e0:13:91:ae:83:f8:3f:43:4a:54:4b:2c:01:75:ee:
         07:38:e0:c7:82:bf:79:1e:c3:f9:d8:57:e8:83:59:f4:00:82:
         32:51:92:93:d1:37:46:dc:67:05:dc:54:4b:bd:e1:ea:e2:0a:
         22:8c:67:1f:2b:0c:da:d7:5b:a0:ce:de:4f:3f:b2:88:38:af:
         bc:eb:a4:88:94:52:00:cc:38:70:52:da:c8:53:85:c8:38:58:
         3f:1f:b9:2b:75:c4:d6:2a:96:e0:df:0d:61:ec:b7:4d:eb:b9:
         53:74:c7:bd:27:9a:da:f9:af:48:3d:a4:43:65:ce:b7:3e:61:
         26:ba:e7:f8:fe:4b:00:6d:94:6e:b5:21:7c:90:fe:1b:0c:0e:
         fb:0d:e2:35:b3:4f:6a:ec:25:8b:bc:4e:51:b2:69:23:3b:a3:
         7c:fa:a3:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 25 15:36:55 2026 by rpki-client