Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/9cc81b56-33c0-3eb5-a2fb-b0a2802ec9df.roa
File:                     9cc81b56-33c0-3eb5-a2fb-b0a2802ec9df.roa (raw, json)
Hash identifier:          VnT/VItyxp++RNr3R98mzIPSFnzVnExYuHX6MTKZveo=
Subject key identifier:   3C:70:67:83:36:82:C3:54:DE:F1:AB:C8:99:33:51:42:DF:25:85:3F
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584F23C2879BE7BA24BC9822CB40
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/9cc81b56-33c0-3eb5-a2fb-b0a2802ec9df.roa
Signing time:             Fri 11 Sep 2026 13:00:12 +0000
ROA not before:           Fri 11 Sep 2026 13:00:12 +0000
ROA not after:            Thu 10 Dec 2026 14:00:12 +0000
asID:                     397195
IP address blocks:        192.48.79.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 24 Sep 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:23:c2:87:9b:e7:ba:24:bc:98:22:cb:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Sep 11 13:00:12 2026 GMT
            Not After : Dec 10 14:00:12 2026 GMT
        Subject: CN=7c162c88-e986-4a3c-b85f-a3c4bab62289
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8c:ed:b7:64:80:53:0f:39:7f:a2:13:d9:87:b3:
                    90:7a:b2:7e:70:b0:54:b4:5c:e4:5d:24:38:29:6e:
                    f1:ae:23:95:e2:46:98:d5:63:3e:1c:e3:e8:0e:16:
                    cf:31:8b:90:a0:f7:18:06:b6:62:d6:08:48:0e:c8:
                    7e:aa:8b:a3:c2:e3:8f:2f:97:c4:e2:c4:95:f1:25:
                    06:5a:45:ad:ea:7b:05:1b:6b:e3:3f:92:c6:39:29:
                    5f:10:5c:c4:0d:a6:f6:08:1e:f4:50:65:ed:23:6b:
                    da:1d:21:ea:45:da:5b:cc:78:01:94:0c:47:d7:65:
                    a2:fd:f9:58:f3:3b:94:49:87:e6:6d:7c:c3:99:09:
                    9a:29:57:34:db:2c:58:05:7e:9b:22:d0:74:dd:1c:
                    9b:62:a8:73:87:b1:0b:b2:6d:48:b9:b7:97:b1:ad:
                    d0:f1:9f:43:f4:ac:6b:cf:7a:65:67:94:67:ec:2a:
                    f5:9c:ef:57:4d:f7:58:42:9d:92:57:4c:9a:ac:80:
                    d4:ac:8b:c1:95:f8:71:04:03:ae:68:67:60:b3:01:
                    92:a8:77:6b:42:bf:fc:a1:d6:33:b4:52:fc:19:b5:
                    1a:37:1f:50:17:b3:0b:98:b1:2d:b0:80:eb:69:30:
                    ce:77:75:51:4d:01:0e:3f:e0:7a:5e:0d:e8:a4:b2:
                    70:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3C:70:67:83:36:82:C3:54:DE:F1:AB:C8:99:33:51:42:DF:25:85:3F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/9cc81b56-33c0-3eb5-a2fb-b0a2802ec9df.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.48.79.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         80:22:34:28:f6:28:d5:ba:31:d3:08:1a:d4:9d:0d:a0:eb:dd:
         b8:0c:7a:cc:02:27:57:8d:5e:63:7f:80:7f:9e:28:f0:96:aa:
         3c:e6:c8:5c:e1:88:e3:22:cf:c0:fe:7b:a7:1d:46:e6:1e:8c:
         49:47:16:ff:6f:47:4a:ea:60:48:18:c0:a4:5f:09:48:53:f3:
         50:e5:46:52:14:2f:d7:9f:0c:b6:fe:09:7f:dc:e4:9c:f5:93:
         2f:b1:cf:f5:85:d5:69:5d:15:13:6e:18:88:67:a2:00:c0:76:
         b7:a4:6a:2d:b8:40:23:ce:9f:cc:2c:81:48:e7:aa:1f:08:80:
         20:c5:4b:2c:08:54:9b:cd:8c:c6:26:da:cf:97:da:5a:f9:4a:
         00:f4:c2:0b:33:59:50:da:e9:71:15:c2:5c:a6:a1:d1:b5:16:
         8a:0e:78:f3:21:bb:74:65:f8:76:d4:a0:2c:96:0b:f8:e0:fc:
         f5:01:e0:8f:cd:1b:27:41:d3:e0:e0:aa:ab:a2:dd:eb:de:62:
         94:38:f3:c0:ad:24:77:0c:fa:47:03:44:80:1a:67:71:0a:ad:
         a8:23:98:0b:fa:18:42:53:a4:1f:40:c2:ad:00:01:c4:b9:45:
         66:ab:75:f0:b6:c4:cd:b0:7f:e2:93:81:20:74:6f:22:7f:09:
         46:67:2c:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 03:28:40 2026 by rpki-client