Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/1d61a4aa-794c-3aad-8ae1-fe453bd1b6dc.roa
File:                     1d61a4aa-794c-3aad-8ae1-fe453bd1b6dc.roa (raw, json)
Hash identifier:          ibnSWK28VK7VFRXCwt0sFKopRk6gugcEDjlGolpv+qc=
Subject key identifier:   70:AD:21:8C:8A:76:2D:46:B9:AD:3E:CF:CD:6F:F2:7E:40:EC:B8:78
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584EA787557F29F373514B10DB00
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/1d61a4aa-794c-3aad-8ae1-fe453bd1b6dc.roa
Signing time:             Wed 29 Jul 2026 01:00:12 +0000
ROA not before:           Wed 29 Jul 2026 01:00:12 +0000
ROA not after:            Tue 27 Oct 2026 01:00:12 +0000
asID:                     397194
IP address blocks:        192.12.94.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 30 Jul 2026 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:a7:87:55:7f:29:f3:73:51:4b:10:db:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Jul 29 01:00:12 2026 GMT
            Not After : Oct 27 01:00:12 2026 GMT
        Subject: CN=ef7dff5c-ea65-40dd-878f-acb994ada06b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:83:44:e1:24:09:a2:b4:a4:c2:93:fa:d3:0e:48:
                    bf:d3:aa:6f:5d:1d:d7:ae:4c:f9:b1:65:d9:16:05:
                    7b:23:32:bb:ba:c7:46:93:94:2e:96:60:e8:ef:b3:
                    01:51:fb:82:38:27:19:db:b3:67:36:6e:bb:41:e0:
                    6c:03:dd:0a:44:71:25:5b:59:81:aa:96:25:a6:38:
                    6f:38:d8:21:03:f9:4f:f9:ab:c4:32:87:21:58:78:
                    20:e8:05:e0:5f:29:b9:5f:c4:b3:99:ab:71:43:b4:
                    94:89:60:bb:98:7a:3b:db:2b:08:13:2f:7c:f1:bf:
                    fc:48:c9:57:19:77:0a:2b:09:f7:bb:d4:ff:ae:e0:
                    a6:d0:d5:b7:a3:a9:cd:9d:68:96:e7:ed:ed:b2:5d:
                    76:50:b4:20:99:0b:b3:53:99:84:56:3a:6a:2b:28:
                    77:e8:ec:f9:eb:f9:a6:57:43:fc:11:5d:96:2c:a6:
                    60:5f:de:17:a7:54:52:30:7c:17:b1:ef:4d:aa:40:
                    98:69:c7:d4:1f:f0:b6:87:6d:ae:cf:5e:5d:84:23:
                    26:79:be:c8:5d:06:d8:d6:4f:bc:2b:ec:12:8e:6c:
                    a9:ab:72:54:c3:7e:c2:a0:23:d9:09:e6:cb:35:8c:
                    03:eb:d0:f7:6c:f2:97:af:6a:5e:f6:c3:f2:fa:14:
                    2c:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                70:AD:21:8C:8A:76:2D:46:B9:AD:3E:CF:CD:6F:F2:7E:40:EC:B8:78
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/1d61a4aa-794c-3aad-8ae1-fe453bd1b6dc.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.12.94.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5e:25:64:a0:97:a4:d0:45:9d:3f:5b:c4:13:57:65:16:cf:0c:
         1f:87:29:59:3d:51:1d:28:b1:eb:a1:69:ed:cb:8d:d6:b3:55:
         97:67:0f:fd:51:ef:83:85:5f:44:d7:a9:50:2b:78:9d:be:d6:
         05:45:6c:10:e6:a8:6c:93:c2:ea:e7:c5:2a:c2:dd:72:d0:bc:
         2c:02:f2:2c:4c:9e:e9:9e:16:5a:85:7d:e3:14:76:a8:78:fc:
         e9:bb:fd:48:e9:0f:08:a8:eb:6c:a9:43:b5:e9:e6:29:fe:69:
         32:6f:ca:34:41:3a:d7:6f:4c:c9:33:5d:56:bb:bb:02:bb:17:
         c2:1a:a2:cf:08:77:03:41:56:d5:47:ae:85:f2:b7:4b:cc:9c:
         b3:f9:24:e9:87:bc:f8:a1:e0:98:de:da:bf:f3:e9:f7:4c:8b:
         f5:ec:a4:76:87:d6:c0:e7:37:ed:07:56:04:f5:a5:6f:44:96:
         78:f9:26:ed:a2:c8:88:17:c3:4b:ed:cd:71:18:55:86:10:02:
         9e:cd:19:6f:ea:55:a1:cb:5e:37:06:27:23:a7:a5:65:d2:a0:
         73:ee:67:0f:8f:09:d6:65:e2:c5:30:cf:0d:03:8a:b9:3e:41:
         f5:dd:b0:33:ab:6a:c1:d2:5e:b8:2c:c3:22:8f:88:5e:5e:59:
         be:5f:fa:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 04:47:46 2026 by rpki-client