Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/6a865732-0251-3edf-afc1-c21f238ba788.roa
File:                     6a865732-0251-3edf-afc1-c21f238ba788.roa (raw, json)
Hash identifier:          0svmnKD1xNaAqahkiCkKa0QX1Fo3OWd0M0s45tt0SNI=
Subject key identifier:   9E:64:5C:56:C6:E1:22:80:3C:E7:B0:00:9E:96:14:23:54:37:9F:5E
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584EF2E764B3AB1E08FE328BDD78
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/6a865732-0251-3edf-afc1-c21f238ba788.roa
Signing time:             Tue 25 Aug 2026 01:00:12 +0000
ROA not before:           Tue 25 Aug 2026 01:00:12 +0000
ROA not after:            Mon 23 Nov 2026 02:00:12 +0000
asID:                     397212
IP address blocks:        192.42.175.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 24 Sep 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:f2:e7:64:b3:ab:1e:08:fe:32:8b:dd:78
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Aug 25 01:00:12 2026 GMT
            Not After : Nov 23 02:00:12 2026 GMT
        Subject: CN=6c7969a6-d680-478f-82ba-1e0c4fca7843
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:82:15:f2:be:e8:c9:88:36:f6:04:72:ee:c8:e4:
                    aa:47:a9:db:0e:cb:86:95:6b:6d:9b:69:1a:1d:be:
                    e3:86:8d:bc:5b:49:7c:0a:5a:79:49:67:00:71:d0:
                    b2:c7:69:15:e6:95:6c:3f:dc:71:cf:da:89:6a:85:
                    5d:4f:45:dc:e8:19:3c:82:20:b8:1f:28:2f:6b:29:
                    fa:44:9c:1c:a8:58:82:df:45:65:1e:de:d6:b6:4a:
                    98:fd:64:43:45:d9:66:83:f7:1f:33:0a:46:58:ce:
                    c1:5f:af:7d:3a:90:94:68:9e:40:96:58:12:e5:8e:
                    34:a9:33:0b:fc:2f:24:99:a2:95:52:d1:c3:90:19:
                    71:fe:b4:26:cb:89:49:08:9d:5f:36:52:c8:b5:93:
                    8e:57:c8:2b:a8:e6:1f:14:14:f4:a6:39:ed:42:9c:
                    0c:d6:9d:75:3f:cf:a0:79:64:89:e6:05:85:dc:b0:
                    f8:37:84:e1:46:0c:8a:37:09:3d:6f:5a:2e:07:1e:
                    c9:f7:84:e4:a3:52:a6:80:c3:38:69:6c:1e:31:17:
                    ac:6f:65:ab:71:85:6f:0b:fd:b9:93:03:5a:41:e1:
                    b2:5a:ed:83:41:c8:b5:52:c8:a3:80:82:45:e1:2d:
                    c6:c9:93:c4:89:26:80:64:0e:b6:51:8c:f9:1b:74:
                    61:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9E:64:5C:56:C6:E1:22:80:3C:E7:B0:00:9E:96:14:23:54:37:9F:5E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/6a865732-0251-3edf-afc1-c21f238ba788.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.42.175.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2d:ca:c5:fa:0a:fc:13:b4:d2:d1:e4:f4:03:55:be:b8:31:5c:
         04:72:2d:0b:b7:3e:55:04:ef:47:79:5c:ce:01:c2:3e:fe:bb:
         54:84:0e:3b:02:4e:ef:54:f5:57:1f:cf:2b:ea:24:56:7b:1a:
         5a:19:0f:48:03:49:99:9e:06:5c:5b:a3:68:99:ca:2b:af:20:
         c3:aa:73:1d:2e:5a:44:0c:32:36:e5:7c:bb:69:b3:18:70:40:
         3e:df:2f:9b:8b:d1:aa:37:ce:e9:35:4a:c5:68:41:3f:af:69:
         ac:5d:ba:4e:6c:b6:97:10:fa:6e:21:14:73:6e:2b:b3:e4:52:
         54:b0:78:f7:d9:72:b1:41:17:02:4a:ea:bf:6f:8c:a8:16:76:
         db:30:28:72:16:3f:74:46:10:f9:62:c3:35:a9:80:4c:58:e2:
         d8:ea:65:a9:6b:af:f9:0e:40:60:9b:89:21:87:5c:2a:00:42:
         da:96:fb:20:43:62:8d:ce:2c:19:a3:86:d5:75:9b:3b:dd:33:
         dd:fe:f9:ca:fe:f6:88:2b:ec:21:3e:77:cb:bb:90:6c:20:7b:
         ec:dc:e5:16:62:ed:86:91:31:5e:15:46:f4:28:4d:48:29:df:
         7b:d2:89:49:55:e4:13:cb:e7:1c:3a:48:36:91:ce:d5:88:57:
         6e:97:43:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 00:40:24 2026 by rpki-client