Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/9f467e9e-6ad7-3308-80db-4f1172c08158.roa
File:                     9f467e9e-6ad7-3308-80db-4f1172c08158.roa (raw, json)
Hash identifier:          DBUesjELH/6SHewtcWbz4JAlXzVuJbvGxo1DqdphIWw=
Subject key identifier:   15:1F:46:7E:62:B3:11:AF:FB:11:CE:D2:D8:98:29:84:05:D5:B3:CB
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584F3E4803D30A7787957FA76A80
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/9f467e9e-6ad7-3308-80db-4f1172c08158.roa
Signing time:             Mon 21 Sep 2026 01:00:11 +0000
ROA not before:           Mon 21 Sep 2026 01:00:11 +0000
ROA not after:            Sun 20 Dec 2026 02:00:11 +0000
asID:                     396603
IP address blocks:        192.5.6.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 10 Oct 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:3e:48:03:d3:0a:77:87:95:7f:a7:6a:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Sep 21 01:00:11 2026 GMT
            Not After : Dec 20 02:00:11 2026 GMT
        Subject: CN=3dfe821d-5f54-48cf-bf9d-c4b48d340a81
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:49:0a:84:dd:e4:9b:56:49:9d:b9:91:dc:8d:
                    04:72:8c:f3:76:6d:68:64:30:10:dc:46:12:21:40:
                    bb:c1:55:9a:a9:69:84:f1:b4:8d:34:b8:51:b3:27:
                    a3:82:6f:89:0e:c8:f3:f7:af:f9:1e:7f:03:35:ce:
                    a0:a3:81:dc:69:a8:3a:cb:1c:b4:9c:c8:d2:c4:0c:
                    dc:30:8b:a5:d6:27:70:ae:30:51:63:2d:34:4f:f0:
                    a2:f3:c6:e5:a1:b3:f0:b9:8c:75:32:6e:2c:1b:73:
                    65:e9:cf:93:4d:6a:db:e2:9f:d1:72:5d:9b:f9:08:
                    57:ee:e0:3f:79:95:db:f8:2c:6d:1a:f1:3c:cd:fc:
                    ab:a3:09:73:e4:b6:87:5d:c1:c4:54:96:ad:b1:5f:
                    81:92:af:ce:d9:3c:f5:ae:37:62:c8:74:0b:6f:ab:
                    4f:5e:2c:93:3e:26:f4:ff:8a:73:9b:0e:8a:76:96:
                    59:fe:cf:55:65:8e:bb:fa:66:7d:00:dd:b5:89:23:
                    bc:ee:cc:22:39:29:07:82:69:34:b3:54:ac:8f:ff:
                    4e:96:29:f7:2f:1f:af:c3:79:b3:62:f2:27:75:01:
                    d2:36:24:fd:5c:d0:99:44:38:7c:76:c0:67:e7:3f:
                    05:a4:86:9a:f7:40:b6:24:85:53:e7:38:80:1c:63:
                    08:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                15:1F:46:7E:62:B3:11:AF:FB:11:CE:D2:D8:98:29:84:05:D5:B3:CB
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/9f467e9e-6ad7-3308-80db-4f1172c08158.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.5.6.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         74:5a:fd:a7:d6:49:b7:a4:02:e5:33:b8:ca:6a:50:58:2c:dc:
         bd:73:94:68:a2:e5:fc:22:d3:42:41:b0:47:28:37:72:b5:e6:
         64:a8:02:80:31:d8:42:71:1d:d3:b6:fe:0c:aa:68:2f:f5:f0:
         93:7c:34:d5:92:c9:25:23:21:2a:d2:a4:e7:d1:91:f1:72:46:
         c8:25:70:a0:23:8a:b9:e9:c0:da:4a:f1:10:59:17:34:38:02:
         d4:51:3a:88:2b:06:e3:d6:99:a4:c8:a9:6d:d1:47:9f:5d:ac:
         4b:4a:e3:ef:02:f5:76:f5:e5:52:b5:01:25:53:cb:ed:cd:47:
         63:93:e4:46:b3:a2:91:14:36:9f:8c:7d:67:32:e0:84:2e:76:
         8f:4c:e5:c5:02:e2:0f:0f:e7:9e:1a:33:c6:93:cf:8c:31:03:
         b9:e7:c3:c8:97:f1:e7:30:5f:5e:8d:3c:f8:7b:c7:cf:8c:26:
         f6:98:4e:0c:45:f0:cc:43:44:4a:f6:e8:3b:c2:0e:99:f7:c2:
         80:ed:98:8e:2f:11:10:f4:4a:67:37:fb:e3:8f:49:5b:0e:43:
         d2:3e:cc:e7:34:57:65:6a:c3:e9:14:22:0f:19:90:5b:c7:85:
         56:1e:96:05:28:82:b0:1f:28:8c:39:be:cc:83:3f:cb:ca:87:
         36:7f:cd:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 8 13:13:21 2026 by rpki-client