Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/a70a5658-e92a-335f-b61e-063c0186f714.roa
File:                     a70a5658-e92a-335f-b61e-063c0186f714.roa (raw, json)
Hash identifier:          eAjVL9bz00CJtdRjHljKf85v3qcnNkNDwcZyINiJyS8=
Subject key identifier:   19:C1:46:EA:F2:9E:F2:A5:55:51:79:85:57:90:2F:1D:AF:BB:62:3F
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584F4972E3ECF42249A9DBE23300
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/a70a5658-e92a-335f-b61e-063c0186f714.roa
Signing time:             Fri 25 Sep 2026 01:00:12 +0000
ROA not before:           Fri 25 Sep 2026 01:00:12 +0000
ROA not after:            Thu 24 Dec 2026 02:00:12 +0000
asID:                     396541
IP address blocks:        192.31.80.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 28 Sep 2026 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:49:72:e3:ec:f4:22:49:a9:db:e2:33:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Sep 25 01:00:12 2026 GMT
            Not After : Dec 24 02:00:12 2026 GMT
        Subject: CN=17490974-7e62-4c99-9613-8c22e293045e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:9d:64:b7:d2:ba:9a:32:d0:90:29:95:e8:1c:
                    7b:3a:fe:ef:4f:f1:7e:5a:e3:2c:14:1b:79:a1:96:
                    1e:1f:3e:b4:bb:92:1a:46:0c:44:32:bb:e9:22:c5:
                    d5:64:2b:71:47:20:9d:81:6d:27:57:7e:7a:08:0c:
                    f0:eb:c7:77:f6:1c:47:ef:33:97:2a:e2:89:02:f2:
                    9b:7f:1e:9a:6a:93:82:70:4f:2f:58:11:07:f7:8e:
                    e4:90:8a:21:97:1a:89:6a:2b:24:95:31:81:aa:bd:
                    77:40:79:8a:ff:97:39:dc:11:de:69:5c:2b:17:cb:
                    eb:fe:b4:a7:d4:42:4c:16:b6:be:2d:bb:de:5f:4d:
                    84:8b:37:ad:bd:bc:d0:79:a9:42:0a:97:20:2b:9f:
                    6d:ab:30:f1:97:d4:67:22:b7:86:2e:71:9f:b6:00:
                    57:a7:92:64:68:37:3b:22:cd:69:5d:57:24:ee:d7:
                    02:63:cc:84:1c:1c:ff:dd:ee:db:30:64:1d:f0:5e:
                    e1:cf:68:fb:c0:2d:67:09:35:93:52:f3:89:09:2a:
                    36:d2:32:b9:29:61:31:5f:8b:31:30:b0:b7:08:82:
                    5f:07:11:17:64:d2:b5:34:cc:83:a3:04:19:c1:06:
                    8d:a8:8d:28:56:e2:f1:d8:59:15:28:af:80:35:e1:
                    0b:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                19:C1:46:EA:F2:9E:F2:A5:55:51:79:85:57:90:2F:1D:AF:BB:62:3F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/a70a5658-e92a-335f-b61e-063c0186f714.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.31.80.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         11:b4:81:0f:f9:40:0f:1f:d2:f4:7d:c6:74:3d:5a:ae:3d:59:
         c3:72:74:c1:a1:28:25:03:ab:0f:a4:c4:36:dc:a6:ef:a7:bb:
         b7:ce:f6:c1:04:af:5b:84:53:65:67:67:05:b6:db:1b:4f:2c:
         5b:97:86:84:c1:10:f4:9a:86:ab:92:a1:5f:f5:45:04:5a:0d:
         8a:6e:29:e7:3b:6f:89:41:e3:7c:01:9c:32:c9:de:77:c2:9f:
         71:4f:8e:cc:bf:03:03:7a:32:5f:7c:17:57:31:03:73:28:b3:
         61:49:bd:e1:1f:7c:2f:34:69:a6:3d:97:de:6f:9c:4b:a3:18:
         52:ca:75:82:fe:4f:2c:37:5c:e7:ea:82:e6:11:8c:82:5e:2b:
         32:c7:87:78:7b:7e:d4:33:ea:d9:0b:c9:47:a3:7f:4b:ce:4d:
         ac:23:ad:1c:1b:8f:56:6b:7a:1a:a2:88:66:0b:9a:cd:5c:aa:
         96:0b:b3:8d:09:21:bd:e2:7d:a1:b9:6b:c8:af:04:34:73:60:
         a9:94:f0:b9:99:8c:4f:28:2c:6c:ae:31:a9:49:c6:28:2d:5c:
         07:80:c9:d5:68:c2:ef:58:fd:8f:41:17:d8:f9:3a:eb:dc:b4:
         44:50:9a:22:fc:71:99:ab:ba:52:dc:a7:ef:35:01:ed:d4:c1:
         54:00:e6:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 27 03:44:30 2026 by rpki-client