Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/deee08f5-0286-3b56-9c50-ec358a38a0cf.roa
File:                     deee08f5-0286-3b56-9c50-ec358a38a0cf.roa (raw, json)
Hash identifier:          FakC5gSyoszEfBSMZn1KA8tcBburpsQ2MmRj6Rf1C+U=
Subject key identifier:   8E:97:55:38:9A:98:58:F7:31:AC:C4:25:3B:56:3C:F7:F5:E9:45:E7
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584EA78F38A760E10067B55CD180
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/deee08f5-0286-3b56-9c50-ec358a38a0cf.roa
Signing time:             Wed 29 Jul 2026 01:00:12 +0000
ROA not before:           Wed 29 Jul 2026 01:00:12 +0000
ROA not after:            Tue 27 Oct 2026 01:00:12 +0000
asID:                     397199
IP address blocks:        192.43.172.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 30 Jul 2026 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:a7:8f:38:a7:60:e1:00:67:b5:5c:d1:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Jul 29 01:00:12 2026 GMT
            Not After : Oct 27 01:00:12 2026 GMT
        Subject: CN=2b89e4c3-fdd7-46fb-8106-249b66759577
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:df:b6:da:22:5a:83:dc:ec:15:32:5b:02:65:5d:
                    f3:a3:c1:cf:cc:92:fd:9c:19:24:6d:e3:7d:e3:0d:
                    22:20:af:04:c7:96:4a:23:7b:1c:f3:b3:fa:16:9d:
                    ac:a6:56:f5:86:41:4a:dc:3f:d6:e1:11:5c:9f:fe:
                    03:5c:6e:ca:7f:2e:06:c2:34:16:fd:c6:ae:e0:d1:
                    f9:e8:6c:fe:9e:ce:f8:96:18:24:01:d9:a3:44:40:
                    6e:c4:a9:19:9c:42:33:d9:65:09:a0:99:b3:51:f3:
                    da:7a:90:13:57:bb:fb:14:d5:0d:8e:0d:82:96:9d:
                    71:a7:4a:67:19:d5:94:99:98:e2:0b:85:fa:3a:08:
                    7e:a3:1e:6d:6b:6c:9c:28:92:8c:96:d0:5c:c5:e5:
                    c4:87:f4:77:8e:a5:a1:ab:62:56:12:12:81:a4:9c:
                    1a:88:32:78:af:cd:cd:80:04:b3:1a:e3:3a:17:14:
                    8a:e0:2e:83:01:07:6b:1c:36:6d:7d:31:27:3c:f4:
                    e6:71:4c:90:9d:d3:bc:84:51:df:69:a5:3b:16:20:
                    66:02:12:24:8f:b0:4c:db:21:9f:51:25:8c:0c:a2:
                    76:a5:cf:4c:5f:5a:ba:c6:f5:a8:00:28:aa:fa:5a:
                    d4:21:95:52:3f:4f:2d:0d:11:9e:63:82:13:03:93:
                    a8:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8E:97:55:38:9A:98:58:F7:31:AC:C4:25:3B:56:3C:F7:F5:E9:45:E7
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/deee08f5-0286-3b56-9c50-ec358a38a0cf.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.43.172.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         72:9f:5f:c2:82:ed:06:71:da:02:0e:e4:68:a6:02:14:3d:bb:
         af:5e:46:0e:35:0c:9e:71:67:e5:00:0a:2f:cb:b3:b0:9b:0f:
         de:b5:2a:e9:c2:b0:ae:95:08:a0:ac:1a:53:27:c8:7a:08:81:
         b2:51:ea:37:1c:cb:c6:4b:dc:88:d2:74:0f:bc:43:5b:12:3e:
         2b:09:76:22:81:81:1c:c1:44:10:4f:72:e7:06:8a:04:74:cd:
         ad:cc:73:17:da:66:38:6d:17:e9:f2:39:a2:e3:a6:26:42:65:
         eb:f2:cf:5d:fc:53:68:3c:7e:c7:09:d4:8c:7c:c4:22:63:34:
         36:bf:79:2e:2a:57:69:bf:a5:e1:2f:00:77:f7:df:97:5e:48:
         43:1b:bc:41:f4:de:88:c1:dd:c9:ca:7e:5d:93:8e:f4:29:08:
         6e:12:cd:2c:95:68:20:98:bf:47:1f:1d:5c:ae:03:82:32:6e:
         17:68:e9:bd:70:b0:2f:85:cf:90:9b:c7:28:98:7b:8f:2d:0e:
         1d:96:78:f3:9f:04:d1:fe:f6:9d:a0:86:21:fb:41:33:58:3a:
         6f:bf:70:cc:83:03:49:a7:fe:03:17:42:b3:95:45:1f:94:b6:
         4f:b9:53:96:cf:bc:e8:71:12:fc:ee:55:3c:53:63:6f:31:74:
         5a:62:ca:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 07:57:36 2026 by rpki-client