Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/bf3e7838-7192-3739-9eca-ebd44eb612e3.roa
File:                     bf3e7838-7192-3739-9eca-ebd44eb612e3.roa (raw, json)
Hash identifier:          jKY5GjZR72lSdtEl+TwQjHYMawSQga2Q+a++3Sg2acs=
Subject key identifier:   7C:07:86:A1:0F:83:AC:DD:3D:58:88:E4:31:41:09:5A:FB:54:E3:1A
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584EA78F4C82A91E1771747A1C80
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/bf3e7838-7192-3739-9eca-ebd44eb612e3.roa
Signing time:             Wed 29 Jul 2026 01:00:12 +0000
ROA not before:           Wed 29 Jul 2026 01:00:12 +0000
ROA not after:            Tue 27 Oct 2026 01:00:12 +0000
asID:                     396595
IP address blocks:        192.43.172.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 30 Jul 2026 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:a7:8f:4c:82:a9:1e:17:71:74:7a:1c:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Jul 29 01:00:12 2026 GMT
            Not After : Oct 27 01:00:12 2026 GMT
        Subject: CN=1481e55b-d647-4948-bca4-893bec77d5fe
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:ea:25:42:c1:78:7d:50:eb:23:3f:9a:9a:cf:
                    d4:21:e2:f8:1a:44:72:f3:01:ea:c4:e4:24:84:6d:
                    aa:c7:0f:f6:2a:4a:61:1c:e8:47:e3:18:0d:32:e9:
                    7f:66:0a:59:02:f9:68:3d:19:37:ba:2f:a6:b0:28:
                    f4:22:38:ed:e8:76:4f:a0:ba:18:fd:21:13:ee:bc:
                    5e:49:e5:f9:23:e4:fc:d4:20:de:01:53:a9:4d:68:
                    fd:53:ee:0c:b4:b6:81:2a:4a:3c:fc:81:c4:14:62:
                    5f:e7:1c:26:ad:64:6c:82:96:b2:2a:80:5e:d2:9c:
                    a2:87:6d:c7:ee:63:0f:bb:8f:a4:57:28:7c:91:2c:
                    92:7e:9c:a8:1d:3b:14:ec:fa:83:73:64:73:0e:c0:
                    d4:01:dd:9b:79:c9:45:73:39:e2:95:4c:f3:41:b8:
                    97:79:8a:5d:29:36:56:d8:fe:e0:43:d3:fa:d9:2e:
                    02:bd:a9:72:57:4a:b8:d6:66:9f:d8:2f:17:7c:91:
                    32:48:2a:23:c7:a8:09:96:ca:04:6f:69:06:5d:bc:
                    8a:ea:40:d3:17:c3:b2:f5:43:33:77:99:d2:f8:7c:
                    67:b1:ec:0e:30:bf:a7:2d:bd:e9:87:ea:26:97:1e:
                    e6:96:be:41:16:9b:67:b7:37:f2:d6:23:bb:57:6e:
                    8d:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7C:07:86:A1:0F:83:AC:DD:3D:58:88:E4:31:41:09:5A:FB:54:E3:1A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/bf3e7838-7192-3739-9eca-ebd44eb612e3.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.43.172.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         aa:01:0a:60:aa:87:b9:d0:06:d3:da:ca:fe:d0:59:e4:33:0e:
         69:dd:c7:14:a7:48:fb:71:e6:ba:db:da:e4:f0:d7:37:ab:c0:
         07:e1:d3:52:aa:7f:37:c8:ac:b5:ae:3d:66:16:67:83:df:cc:
         fb:7c:b7:0e:0c:59:e9:0d:04:b6:8b:51:01:d5:70:04:19:6e:
         40:9a:be:41:a3:eb:df:62:a7:f9:69:6c:b1:9e:31:31:85:ce:
         dd:b2:2a:4a:0d:3d:d6:5b:40:43:e8:1e:2c:b5:10:cb:39:b4:
         96:91:7f:30:6a:66:2d:18:15:45:c0:4d:42:63:65:04:da:d1:
         0a:57:04:ba:db:7d:5c:a1:7f:2e:86:4f:62:ff:f9:df:91:2f:
         36:06:d2:9b:28:fe:cd:d0:c6:2d:83:0a:71:db:9b:f5:74:bb:
         fb:d7:d0:32:48:ad:08:0b:52:6f:e5:af:4d:3b:6c:01:1f:e3:
         99:f1:28:57:9a:f3:04:a1:54:1b:f6:fc:80:ab:39:dd:c1:48:
         65:1e:bb:00:5f:b8:ab:86:a3:28:91:13:fc:e8:08:9f:be:da:
         a9:8f:28:07:43:2b:c9:07:08:27:f5:48:ed:b4:5b:9e:cd:6b:
         37:49:53:bb:1e:f0:13:bd:ec:78:16:c2:8f:7d:89:c8:b3:bd:
         28:8d:e4:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 08:17:10 2026 by rpki-client