Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/45ca2268-7d24-3ee1-b9da-1d697aeddc1f.roa
File:                     45ca2268-7d24-3ee1-b9da-1d697aeddc1f.roa (raw, json)
Hash identifier:          CJY3IbV8JNGgqxQ9eE3pzZGJZHy9SYFNJmVQ7ouK/70=
Subject key identifier:   0B:A0:1F:29:74:D7:D6:46:15:9E:D5:87:5C:86:3C:18:9E:66:6D:33
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584F1E2CEE518F25EABB7E2CD280
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/45ca2268-7d24-3ee1-b9da-1d697aeddc1f.roa
Signing time:             Wed 09 Sep 2026 13:00:11 +0000
ROA not before:           Wed 09 Sep 2026 13:00:11 +0000
ROA not after:            Tue 08 Dec 2026 14:00:11 +0000
asID:                     36626
IP address blocks:        192.54.112.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 24 Sep 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:1e:2c:ee:51:8f:25:ea:bb:7e:2c:d2:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Sep  9 13:00:11 2026 GMT
            Not After : Dec  8 14:00:11 2026 GMT
        Subject: CN=236ad175-fb50-46f4-a97b-3da1c99b10dd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e5:80:37:ed:2d:91:6d:72:90:ac:95:20:9f:e3:
                    06:f5:46:ab:e8:e7:c3:9d:47:52:f8:c4:c4:ae:9a:
                    7c:03:8f:ec:b3:2a:e7:79:6b:04:64:1d:02:ca:b3:
                    f9:2d:de:2d:8d:41:df:bb:81:8d:cc:1e:9c:f3:13:
                    c1:94:01:67:4a:10:75:94:60:d7:bd:71:63:9f:a1:
                    f8:63:66:12:88:3b:1f:52:d5:c3:c2:5c:f1:f5:bd:
                    b1:75:86:70:d6:b2:45:18:b4:a8:e9:2e:c2:7c:78:
                    02:12:a5:1e:10:6c:23:92:4b:33:9b:91:73:0b:1b:
                    b9:03:20:02:d9:63:d6:3c:b6:b5:4b:43:d8:e7:d2:
                    36:f7:cc:5b:d2:ae:e7:79:2f:00:b9:f5:b5:03:c9:
                    63:18:9e:5c:af:4b:36:31:8b:4b:13:c4:64:a6:d0:
                    91:8a:86:28:36:6f:48:ee:95:8d:43:a6:4e:03:43:
                    e8:db:28:ae:c2:a6:77:95:a2:ed:8e:36:df:54:b9:
                    17:f6:30:6a:bd:5a:ba:d3:3d:fa:48:e8:9e:c4:9a:
                    28:ff:01:f6:3e:5f:e3:82:72:f6:67:06:76:4a:d0:
                    3d:e3:d4:59:bf:1d:ce:c5:2c:4a:46:86:c4:f6:74:
                    d6:c6:07:e6:f9:b7:29:c1:73:c0:2f:e6:d3:8b:46:
                    84:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0B:A0:1F:29:74:D7:D6:46:15:9E:D5:87:5C:86:3C:18:9E:66:6D:33
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/45ca2268-7d24-3ee1-b9da-1d697aeddc1f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.54.112.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         83:73:be:5c:fa:a1:e9:5e:fd:9b:e6:ad:32:85:7d:d9:f0:40:
         9a:90:02:4a:40:32:99:4f:40:ce:06:c5:f7:5d:30:d0:16:3d:
         89:e8:9f:10:ce:e6:43:77:94:c2:c6:7c:34:c8:dd:f1:7a:0f:
         45:af:97:82:3f:f4:19:ea:38:d2:20:a9:ab:5a:44:74:8e:93:
         5b:02:f9:19:bf:56:18:36:98:ce:7d:69:1f:13:74:50:bd:b0:
         84:a6:26:70:6e:44:d7:1b:cf:7c:b6:d3:bf:c0:21:cc:c0:56:
         fc:2b:f9:a1:5a:2b:ea:df:1f:3d:f6:ad:6d:2b:c2:35:f1:e8:
         b2:bd:7f:0e:1b:78:eb:96:e5:cd:03:8a:af:e3:db:1e:ba:19:
         ed:0e:48:af:36:1e:ff:58:8c:4d:d4:d9:09:70:50:b5:5b:cd:
         50:12:71:4f:54:68:9f:f9:c9:1d:a5:f5:32:f0:1b:83:66:5a:
         8a:5f:90:bc:ca:b7:bd:87:d0:ce:6b:c7:44:69:fa:79:4f:42:
         f2:6a:00:5f:1c:d1:9a:f6:65:0c:1b:7c:70:97:18:fa:a1:15:
         10:47:8c:0a:30:50:90:f0:96:58:f1:e4:83:d9:78:b4:e2:b1:
         26:83:04:5d:36:a1:80:a2:88:ff:5e:9a:2c:de:d9:ac:5a:6a:
         1d:69:4a:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 19:02:36 2026 by rpki-client