Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/79c490fd-00d5-33ad-8c90-5118660ca2d4.roa
File:                     79c490fd-00d5-33ad-8c90-5118660ca2d4.roa (raw, json)
Hash identifier:          u/POrhB0opVisKkHLW/zbrwd90jwJDThbK5sNNVjVww=
Subject key identifier:   D1:EC:AA:F1:4C:FD:C9:A6:AE:09:FC:EF:24:DB:48:8B:BC:8A:A2:CD
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584F497376953EF1BA5CDDA79C00
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/79c490fd-00d5-33ad-8c90-5118660ca2d4.roa
Signing time:             Fri 25 Sep 2026 01:00:12 +0000
ROA not before:           Fri 25 Sep 2026 01:00:12 +0000
ROA not after:            Thu 24 Dec 2026 02:00:12 +0000
asID:                     396580
IP address blocks:        192.68.130.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 28 Sep 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:49:73:76:95:3e:f1:ba:5c:dd:a7:9c:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Sep 25 01:00:12 2026 GMT
            Not After : Dec 24 02:00:12 2026 GMT
        Subject: CN=e2314ebd-5fa3-4d58-a294-6f49905909f4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:7b:87:27:b6:b2:99:cb:72:a5:11:cb:ba:64:
                    6d:8d:df:b8:aa:8a:76:f8:f3:17:44:f4:c6:d0:90:
                    ac:fd:fd:3c:19:0f:4a:da:1b:1d:83:6d:a9:3c:28:
                    7d:42:35:a3:be:f4:40:56:21:35:30:7d:41:b6:37:
                    00:45:4b:cf:55:cb:7f:28:30:ae:7d:fd:46:fb:18:
                    11:18:59:55:7e:87:21:33:61:42:cd:a6:ff:93:49:
                    8c:9b:47:76:85:f0:f8:49:15:83:27:22:10:73:06:
                    64:72:4e:49:1b:4a:b8:1d:4a:cc:dd:49:42:7d:fe:
                    94:67:dc:3b:82:d1:2a:a9:53:f5:dc:fa:c8:fa:23:
                    37:39:51:84:ce:69:e1:1b:a5:15:12:c2:90:26:df:
                    34:9f:2d:ba:2f:dd:d8:13:ab:b7:17:9c:07:ed:fa:
                    57:19:94:6d:81:97:1e:14:2d:ca:f3:03:72:7d:2d:
                    54:f6:00:32:3f:cd:cd:27:31:18:96:28:b2:a1:46:
                    17:13:02:3f:e4:8b:64:62:03:44:0b:d7:91:99:4b:
                    8c:6f:2b:75:50:28:b8:6b:cb:01:7a:dd:69:96:94:
                    ff:84:3a:e8:36:51:a3:81:1f:0e:03:ee:97:d2:b2:
                    5d:b0:46:07:74:2f:fc:ee:8c:ea:16:80:0b:6a:24:
                    80:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D1:EC:AA:F1:4C:FD:C9:A6:AE:09:FC:EF:24:DB:48:8B:BC:8A:A2:CD
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/79c490fd-00d5-33ad-8c90-5118660ca2d4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.68.130.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         06:92:3d:4c:c4:10:e7:66:7c:5a:de:8e:1c:26:f6:1e:99:ad:
         2a:fc:cb:ff:e4:e0:66:09:aa:a3:1f:cb:30:9a:a1:19:2f:d2:
         50:9b:b9:83:ed:67:06:0c:c2:6b:24:1c:c5:da:9c:dd:c4:0d:
         38:ca:a1:02:bf:a9:41:f6:82:1f:d0:7d:be:5e:5a:bf:b3:1d:
         24:f6:a9:70:62:bd:ae:39:25:0c:c1:bc:cc:28:1c:00:4c:7b:
         ee:bd:89:06:01:f6:d1:12:29:6f:22:ef:c9:43:93:e3:6c:9f:
         e4:27:90:fd:2e:65:fb:41:a6:72:be:fd:54:43:3a:4d:23:6a:
         10:da:99:a7:d9:88:f4:8b:5e:b8:3c:6b:9c:7c:73:0a:fb:ef:
         03:80:f1:d6:d5:17:1d:a8:58:4b:b9:66:d4:17:9d:ab:6b:8e:
         f7:30:6a:05:b7:8c:ea:ef:47:82:72:22:7f:02:99:7e:8f:ee:
         12:e4:9f:ff:0e:35:14:05:0e:18:94:d5:49:b7:bb:74:3a:a5:
         c9:52:26:ed:95:e8:b8:c0:b1:84:9b:57:e4:8e:84:ff:e5:11:
         f7:70:76:fb:18:d9:a5:90:e9:ee:60:48:17:31:83:cf:01:20:
         77:94:66:7a:f3:8d:89:63:b3:d0:b6:85:83:4c:05:66:46:9c:
         d5:04:f9:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 26 11:24:59 2026 by rpki-client