Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/8f1d2c6a-b1af-35ba-b8f2-bc2580e847b5.roa
File:                     8f1d2c6a-b1af-35ba-b8f2-bc2580e847b5.roa (raw, json)
Hash identifier:          lWTGl3WPDli/WHv/Pi28VOdES7c/ZLW8e+tZp9tUtD0=
Subject key identifier:   8F:18:4B:2D:A9:44:2A:DB:2B:BC:65:6C:45:99:0D:16:5B:CB:37:7D
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584F2D87BF36ADC027A2C2AD24C0
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/8f1d2c6a-b1af-35ba-b8f2-bc2580e847b5.roa
Signing time:             Tue 15 Sep 2026 01:00:12 +0000
ROA not before:           Tue 15 Sep 2026 01:00:12 +0000
ROA not after:            Mon 14 Dec 2026 02:00:12 +0000
asID:                     396592
IP address blocks:        192.81.185.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 24 Sep 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:2d:87:bf:36:ad:c0:27:a2:c2:ad:24:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Sep 15 01:00:12 2026 GMT
            Not After : Dec 14 02:00:12 2026 GMT
        Subject: CN=db9011c6-adf4-4b2f-a0c9-6cb98dd94ec9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:88:0d:0d:c8:b0:db:bf:87:c1:30:ab:25:e7:e2:
                    1f:9b:c0:1d:6b:11:80:69:84:02:d6:d2:29:42:fc:
                    63:41:5d:d8:99:ca:59:c9:6e:ef:ad:2a:b4:24:6c:
                    9a:16:91:2f:04:ad:a9:fc:5b:b8:35:91:31:8f:25:
                    e6:dc:58:53:41:5e:fe:60:18:3b:20:3d:49:88:d8:
                    e6:a4:ed:5b:b2:48:4f:d9:94:87:37:fa:e7:ca:77:
                    34:4a:eb:79:b5:49:22:06:8a:39:38:35:e7:b2:20:
                    2b:1e:3b:12:2f:11:46:71:dd:95:9f:17:38:41:15:
                    0c:9a:e3:4e:65:b8:56:8c:f0:1f:b4:74:a6:06:c9:
                    cd:a6:f2:91:3f:00:59:5a:32:af:60:43:91:f6:2b:
                    15:ec:d2:e4:13:dd:29:ec:23:15:fe:f3:6a:2f:61:
                    46:e7:42:1d:eb:0a:2a:c2:85:ca:4b:3b:69:8b:9f:
                    4e:3a:c1:55:9f:6b:2f:d3:b3:aa:5e:35:1b:de:ce:
                    33:33:eb:01:9b:62:70:b4:b4:a4:da:5f:7c:89:c4:
                    0c:51:a0:87:ae:ab:85:f7:0c:0b:f6:bb:95:07:8a:
                    d9:5a:7f:f6:5e:9e:95:a0:63:53:60:3c:16:d8:20:
                    b3:4d:4c:69:b7:0a:83:2b:88:0c:31:f8:f6:00:f1:
                    a3:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8F:18:4B:2D:A9:44:2A:DB:2B:BC:65:6C:45:99:0D:16:5B:CB:37:7D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/8f1d2c6a-b1af-35ba-b8f2-bc2580e847b5.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.81.185.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         57:85:7a:33:0c:34:9b:94:de:8d:8a:85:7a:5d:c8:7c:57:9d:
         86:7f:f3:6c:06:0e:ac:ad:d3:44:46:a9:e5:9d:3f:a4:c2:2a:
         52:d7:26:62:68:80:11:b6:8a:1f:8a:04:48:bc:0d:e1:0a:31:
         80:9e:0f:46:44:88:5b:3e:4d:77:cd:94:4f:37:e4:99:af:0e:
         04:12:04:cd:ee:d5:63:db:f8:bc:69:2e:e0:19:fb:58:e0:80:
         2e:e3:97:99:36:f8:43:c3:f4:14:9b:fc:d3:38:4e:f6:00:6d:
         03:bd:8a:ae:71:a9:b7:11:45:be:24:6f:15:ca:a5:bc:d7:dd:
         b0:c6:ef:1e:6f:0f:cc:6c:18:eb:8f:75:66:d1:5e:d1:d7:6a:
         6a:01:f1:13:c5:cd:b8:d9:ae:7c:7c:df:b7:40:3c:3e:48:4f:
         15:02:af:9f:a8:53:57:7a:fc:bb:93:c8:c3:47:ee:8a:11:62:
         5c:57:c7:b4:98:31:95:40:36:b4:df:7f:8b:96:a4:f1:69:34:
         91:d5:06:08:7b:30:44:14:be:c4:41:43:f6:78:94:c3:b7:17:
         2d:3e:34:38:04:ed:02:12:9d:90:34:38:30:95:3d:a9:31:9e:
         58:80:b3:4c:58:04:96:63:dc:30:33:54:c1:4f:93:ae:b2:63:
         08:3c:db:4a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 19:39:41 2026 by rpki-client