Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/aac887f3-59a1-3f76-886a-e767bd11435b.roa
File:                     aac887f3-59a1-3f76-886a-e767bd11435b.roa (raw, json)
Hash identifier:          2t2gZcj3jdrsrqPx0ZlQhpLWUHkqE6UyJ0a1LPAM1+s=
Subject key identifier:   31:A3:75:05:86:EF:E2:4F:1E:1C:C7:E9:A5:20:02:56:BC:6E:4D:13
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584F23C28830FD7245A7DAD279C0
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/aac887f3-59a1-3f76-886a-e767bd11435b.roa
Signing time:             Fri 11 Sep 2026 13:00:12 +0000
ROA not before:           Fri 11 Sep 2026 13:00:12 +0000
ROA not after:            Thu 10 Dec 2026 14:00:12 +0000
asID:                     397212
IP address blocks:        192.48.79.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 28 Sep 2026 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:23:c2:88:30:fd:72:45:a7:da:d2:79:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Sep 11 13:00:12 2026 GMT
            Not After : Dec 10 14:00:12 2026 GMT
        Subject: CN=2c9421a3-efa1-4d20-985b-240608d9a2d9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:29:8f:07:93:31:30:20:c0:f7:6b:2d:98:f9:
                    96:ce:05:7a:fc:c5:df:ff:fc:99:66:41:ef:98:ad:
                    bc:22:a2:5d:51:72:7c:7c:0d:e8:89:4e:c7:d3:1f:
                    3b:ca:91:06:40:e4:c5:29:15:b0:72:dc:18:fe:9d:
                    7f:5c:5a:99:c1:90:15:9b:6c:3d:ba:43:69:d0:ad:
                    74:a1:08:51:58:75:52:6f:2b:a2:85:44:85:a8:fd:
                    9e:39:ef:e6:e8:30:9b:3d:9b:78:76:f4:40:c5:52:
                    dd:c4:b6:f1:65:46:b3:73:11:b9:fc:33:2a:3f:31:
                    38:24:8d:be:6e:1d:f2:12:e8:c3:08:45:32:6e:3c:
                    d5:69:fd:0c:12:9f:7b:19:3e:53:35:e3:99:14:b8:
                    df:27:65:ff:55:99:34:7d:a5:5b:ab:48:c4:0f:80:
                    4f:de:c7:d8:2e:b4:a3:9b:6f:c3:3e:d3:7f:c8:55:
                    22:45:56:97:5d:1f:b6:b6:0c:98:06:f0:6d:ea:45:
                    54:1e:c9:de:33:31:fa:eb:41:0b:a7:d6:7c:5e:fb:
                    64:7a:84:31:ed:17:25:d2:a9:f3:41:1d:79:d0:2e:
                    c4:2a:0e:2c:fc:62:1b:43:85:c5:0d:9c:4e:48:ef:
                    34:e4:5f:4e:f6:4b:8b:a8:17:17:7f:59:9f:db:ce:
                    86:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                31:A3:75:05:86:EF:E2:4F:1E:1C:C7:E9:A5:20:02:56:BC:6E:4D:13
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/aac887f3-59a1-3f76-886a-e767bd11435b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.48.79.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2c:b0:62:e0:61:dc:36:c6:da:4c:79:f2:9f:83:09:af:0d:ac:
         46:32:91:80:fa:2c:8b:fb:23:6b:ad:b9:4f:ab:e7:e4:27:01:
         10:77:0e:54:65:67:12:a0:53:fd:8c:c6:d1:5b:73:ce:33:9f:
         7d:15:1f:c6:9b:1b:88:72:18:9f:d7:ef:9f:f0:43:57:08:23:
         08:66:cd:35:ba:8f:be:66:54:63:94:90:e5:18:22:38:ac:54:
         55:31:f1:13:70:d5:59:33:54:e2:bc:03:a1:82:57:db:7e:86:
         30:dd:c9:37:73:10:4d:8a:4d:44:38:25:d4:b7:ac:11:91:6f:
         c8:69:63:fe:65:1c:8f:59:7a:c2:80:33:29:f3:98:ab:e0:55:
         b9:09:2c:38:bc:32:01:9f:0d:ea:ec:e5:1a:68:a8:49:91:3d:
         9c:f6:9b:29:bb:ba:fe:4f:95:b0:87:69:0f:e5:84:6c:40:c2:
         df:e8:b7:80:3a:d2:81:ec:3a:74:a1:70:f1:a5:39:02:83:c9:
         15:9a:7f:dc:e1:28:34:38:96:d4:31:f9:a7:b8:78:c4:32:75:
         a7:58:65:e8:0c:50:11:bb:74:a5:bf:ce:19:40:0f:c8:14:53:
         f0:56:13:ff:39:e0:1f:ca:f9:85:0d:87:be:fe:da:9e:06:05:
         73:75:dd:b0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 27 02:16:23 2026 by rpki-client