Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/52016820-44e1-3081-9c37-a0bc2b535e8e.roa
File:                     52016820-44e1-3081-9c37-a0bc2b535e8e.roa (raw, json)
Hash identifier:          vCIzwqWFCXOOL1svcE09zlicuB/wZ6bU1YOSd/2Ipww=
Subject key identifier:   9C:3E:61:AF:97:51:BF:94:54:27:5E:67:D8:1D:27:29:A4:3E:5A:78
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584F43DD3EA1EFDA46CAE92FA8C0
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/52016820-44e1-3081-9c37-a0bc2b535e8e.roa
Signing time:             Wed 23 Sep 2026 01:00:12 +0000
ROA not before:           Wed 23 Sep 2026 01:00:12 +0000
ROA not after:            Tue 22 Dec 2026 02:00:12 +0000
asID:                     396545
IP address blocks:        192.42.93.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 28 Sep 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:43:dd:3e:a1:ef:da:46:ca:e9:2f:a8:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Sep 23 01:00:12 2026 GMT
            Not After : Dec 22 02:00:12 2026 GMT
        Subject: CN=baa16dc2-ec43-4099-a96c-f168f8fa825b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:80:e9:17:79:45:2d:25:4b:77:52:66:2d:e3:0f:
                    5d:6f:b1:e3:76:3a:34:a3:52:44:d2:73:e7:f4:43:
                    bc:95:02:7d:6f:dc:b4:d1:41:a9:88:89:03:2a:f1:
                    ef:6b:a5:cc:c5:16:9d:3a:96:4e:4f:8c:47:90:7f:
                    45:61:44:ed:b9:38:ac:12:26:61:86:22:a2:e0:d2:
                    80:6e:ef:2a:53:5e:55:f3:33:e0:08:23:5b:0f:3f:
                    59:79:76:46:44:ef:e1:6c:00:de:6f:92:df:f9:22:
                    4d:fc:3b:41:75:dd:9b:15:bc:f9:2f:39:2f:e0:75:
                    d0:f9:d9:8d:86:00:ba:45:7c:02:7d:97:08:e7:5e:
                    79:6c:0a:d3:92:6e:36:1b:be:b1:a2:5a:46:70:13:
                    09:3e:28:4f:f1:5c:95:76:54:2f:2b:b6:8f:b2:e8:
                    ab:ea:34:b3:0c:51:b5:0f:b6:75:1e:21:53:f5:47:
                    1d:30:c1:22:b5:ef:81:7d:ec:e0:72:b0:4f:e5:7a:
                    bf:e3:bc:79:59:ad:b8:d5:bc:6b:ac:27:3d:b7:50:
                    30:1c:b9:5c:b9:83:92:da:10:d2:a8:05:a6:8e:0b:
                    ac:b3:d5:fc:3d:6e:05:be:1a:ed:d6:04:b2:c7:4b:
                    dc:a4:97:de:ad:a7:20:aa:52:b7:b2:fd:ce:4b:13:
                    fe:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9C:3E:61:AF:97:51:BF:94:54:27:5E:67:D8:1D:27:29:A4:3E:5A:78
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/52016820-44e1-3081-9c37-a0bc2b535e8e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.42.93.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         23:73:33:ae:57:90:5d:7d:43:66:db:e1:1f:89:97:5e:f2:13:
         4c:01:cc:5c:b5:1d:01:f0:7a:3f:78:64:2b:97:c2:9b:e6:6c:
         ad:2d:d4:5f:55:ad:e4:47:36:24:0c:d5:3c:dc:d9:d6:85:5e:
         3d:cd:fc:b0:d5:41:bd:24:2f:38:32:55:41:08:1b:01:f5:43:
         8a:7e:a8:74:97:2f:a9:69:eb:11:ad:3e:57:5c:91:71:6c:ec:
         66:3d:93:0c:3a:cc:50:27:a5:1d:87:6a:9d:d2:f9:98:4f:89:
         e5:37:34:1b:01:88:60:c1:90:17:f3:f8:eb:74:a0:77:63:e0:
         3c:4e:31:4d:c6:b4:2e:76:52:05:4b:eb:39:10:1b:ce:fc:7a:
         50:3f:ed:3b:ca:34:a8:3e:42:f8:42:3b:a6:33:e0:69:ef:d1:
         3d:8f:49:7f:82:1e:cd:cd:f6:bb:3d:79:1a:a7:07:7b:b5:9c:
         d6:7d:95:84:87:4a:5a:a2:3e:c5:16:c7:59:2e:8b:26:9e:e4:
         fc:6d:4a:01:6c:bd:a5:4b:74:a9:cf:d8:35:22:0f:f7:66:4d:
         55:35:36:b7:04:60:1d:f9:0b:4b:29:ba:1d:d1:08:62:e6:f7:
         c6:ab:48:87:86:1a:db:b5:7e:8c:96:f8:ba:da:7c:85:73:66:
         5c:db:62:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 26 23:48:59 2026 by rpki-client