Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/a8d754f3-a60d-36ef-b6ee-106257c39087.roa
File:                     a8d754f3-a60d-36ef-b6ee-106257c39087.roa (raw, json)
Hash identifier:          SBRtD1IMv5and1q4CAZCWf3ynR2DDV6TbqoOBDCP7m4=
Subject key identifier:   32:E1:1C:1C:88:0B:97:CB:05:BB:CF:7B:30:37:CD:58:60:A5:B1:B4
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584F3E47CEF8372B6341BFE98A80
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/a8d754f3-a60d-36ef-b6ee-106257c39087.roa
Signing time:             Mon 21 Sep 2026 01:00:11 +0000
ROA not before:           Mon 21 Sep 2026 01:00:11 +0000
ROA not after:            Sun 20 Dec 2026 02:00:11 +0000
asID:                     397197
IP address blocks:        192.5.6.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 24 Sep 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:3e:47:ce:f8:37:2b:63:41:bf:e9:8a:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Sep 21 01:00:11 2026 GMT
            Not After : Dec 20 02:00:11 2026 GMT
        Subject: CN=b8a24e1a-46b0-42b9-b358-6d00846396e9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:88:a1:d8:a9:76:a5:53:c9:1e:16:d4:8f:47:3c:
                    d2:bc:ad:61:38:ec:0d:64:a3:d8:4e:9f:1a:78:fd:
                    9e:11:df:46:68:c3:66:b7:53:e5:4c:ec:4e:06:94:
                    c5:b7:bc:ef:e3:a6:01:58:48:c1:2f:d9:e4:cc:39:
                    6f:8a:e6:0b:37:80:63:cc:89:5b:c0:76:55:32:35:
                    a6:c4:17:78:87:89:f2:32:fa:16:3d:a2:de:a7:b6:
                    8e:fd:99:23:a9:02:18:ad:36:4a:f0:ee:b2:32:c7:
                    f3:f6:6c:2e:8f:d9:48:33:ff:e5:03:b4:b0:65:69:
                    e3:cd:c2:6e:f5:51:83:be:bd:5c:a7:66:53:4a:e1:
                    d8:2a:55:ed:21:62:be:a2:c2:f9:42:70:9a:b0:d9:
                    d5:b7:1d:76:39:68:1a:a2:a7:42:d5:45:3c:cd:67:
                    0a:89:0a:78:97:9d:e8:3a:e0:61:81:21:db:0c:ac:
                    6d:b9:f2:b1:0f:ad:38:19:f3:c6:d0:d4:49:0f:2f:
                    e6:26:13:69:e6:b7:4d:ad:d8:ce:9c:f8:42:b5:31:
                    a0:e6:be:24:12:94:08:b3:0a:87:0d:94:c6:a0:2a:
                    ee:ba:5b:0b:5d:6d:a2:b7:43:53:d0:88:43:b0:06:
                    41:7b:8f:7c:51:6f:d0:4a:35:db:21:20:71:e3:fd:
                    c7:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                32:E1:1C:1C:88:0B:97:CB:05:BB:CF:7B:30:37:CD:58:60:A5:B1:B4
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/a8d754f3-a60d-36ef-b6ee-106257c39087.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.5.6.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         55:f4:7f:e8:98:9c:cc:c6:26:4b:21:5f:5a:db:bb:4a:fa:cf:
         16:43:cb:86:56:f8:76:39:f6:47:8a:3a:ed:73:58:4d:0b:c0:
         91:ad:09:02:eb:0c:f4:63:e2:b1:52:14:48:e3:7e:66:7f:80:
         0d:22:00:90:73:0f:32:75:ec:9c:db:9f:22:79:0d:b0:be:2d:
         6e:0b:9d:42:ca:d5:02:1f:11:d6:a2:f2:0b:a1:58:c2:73:51:
         bb:a3:68:d3:46:42:1c:61:56:95:22:be:39:cf:43:45:a6:11:
         0a:81:0c:5c:ee:ae:51:31:ff:3f:11:22:a3:64:5d:24:63:dc:
         da:a1:47:63:ce:78:86:8a:bb:a5:c3:b8:10:12:a8:23:e5:e0:
         61:65:83:a7:d7:78:7b:29:cf:b2:24:ff:40:20:95:28:3b:a5:
         7c:5a:cb:03:28:e7:ba:7c:51:77:52:28:86:7b:d2:35:85:16:
         14:70:35:de:69:31:87:80:9e:8a:e6:94:6f:70:92:38:8e:66:
         a4:dc:2a:cb:83:1f:2b:33:d2:c7:94:f7:ce:a9:5a:93:48:53:
         df:7b:77:83:2e:1a:0b:c4:fc:fa:82:6c:ff:44:89:46:6c:fe:
         e2:29:ec:7e:bd:17:5d:fa:e3:2f:0e:46:05:b6:1e:c9:ba:a8:
         b8:ac:43:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 16:52:07 2026 by rpki-client