Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/e78b2b6a-459d-383b-aa50-7117a30af55a.roa
File:                     e78b2b6a-459d-383b-aa50-7117a30af55a.roa (raw, json)
Hash identifier:          IoFfWe87bfLBt8mpFJUpyciL9FQvCk6vypfAQLW0ZmM=
Subject key identifier:   AE:96:78:B3:3D:4C:1C:4A:F0:6E:C1:4B:40:3E:9A:37:0B:DB:77:DC
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584F1CC793EFFB506FD936C48030
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/e78b2b6a-459d-383b-aa50-7117a30af55a.roa
Signing time:             Wed 09 Sep 2026 01:00:11 +0000
ROA not before:           Wed 09 Sep 2026 01:00:11 +0000
ROA not after:            Tue 08 Dec 2026 02:00:11 +0000
asID:                     396594
IP address blocks:        192.42.177.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 24 Sep 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:1c:c7:93:ef:fb:50:6f:d9:36:c4:80:30
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Sep  9 01:00:11 2026 GMT
            Not After : Dec  8 02:00:11 2026 GMT
        Subject: CN=31a1ef7c-ae1e-4fde-9823-1f785d8d2169
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8a:56:2d:fc:62:9e:ae:45:29:65:e8:8d:13:c6:
                    1f:c9:1b:0b:fd:d6:a8:09:6f:61:f7:a0:8b:c6:cc:
                    fb:56:af:47:9b:05:e4:df:70:ba:32:2e:56:81:4f:
                    a5:3a:6c:36:18:2b:73:1d:17:96:d8:ac:19:d8:46:
                    5c:c5:78:cb:8e:ce:25:15:ff:61:18:3e:3c:14:5b:
                    93:e8:d4:78:10:28:4e:6e:a7:e4:ae:31:35:9a:66:
                    be:7f:0d:a4:24:c9:21:d7:ab:f1:57:60:a9:d0:f0:
                    5b:c2:42:fa:65:35:b2:0a:9a:bf:f0:7f:e1:46:3c:
                    2e:af:9e:a6:72:d5:f1:c8:00:12:df:71:9c:83:c4:
                    97:5c:dc:74:88:39:1e:6b:5c:e7:36:6f:bc:78:98:
                    32:59:8a:41:58:14:11:70:dd:ab:ed:0a:cb:8a:22:
                    ee:39:6b:67:70:27:84:38:1b:91:1f:6b:b6:13:46:
                    a6:af:5f:70:8f:bb:b2:ea:0f:21:16:f0:3c:87:fd:
                    be:cf:73:a8:ab:8e:61:74:32:f2:e8:d0:e1:6a:48:
                    2b:54:bd:c4:1f:c1:ca:03:84:46:7c:6e:47:bc:a4:
                    82:23:04:0c:c1:97:be:49:8a:64:47:39:53:e0:62:
                    0c:f9:fe:59:c1:60:55:ed:18:7a:c9:b8:81:04:40:
                    89:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AE:96:78:B3:3D:4C:1C:4A:F0:6E:C1:4B:40:3E:9A:37:0B:DB:77:DC
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/e78b2b6a-459d-383b-aa50-7117a30af55a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.42.177.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1a:f2:1a:42:9d:e5:6e:4b:b8:be:c2:89:e5:16:a2:5d:e5:2f:
         f5:f0:51:1b:6e:14:3f:8f:6f:e1:c5:98:6b:24:ef:1d:eb:36:
         c9:05:a9:4c:8f:1a:75:2b:a9:2d:23:fc:03:ae:41:30:7d:48:
         e9:35:61:e6:15:92:33:75:43:1d:58:13:fc:18:95:42:ba:f5:
         95:a6:01:42:be:ce:c6:e4:f0:43:5a:d5:92:d6:22:27:fa:51:
         02:cc:b0:0d:de:c9:5b:e0:3a:64:b7:89:e0:c6:3e:61:c8:95:
         5d:08:1f:3b:5a:22:59:0a:91:90:86:1b:a6:b7:7a:fe:2c:a1:
         b8:0d:15:c5:b4:c0:82:51:75:58:c5:e4:eb:09:33:1f:e6:6f:
         95:c8:03:3d:df:7d:ff:37:bd:44:56:73:e3:18:55:8e:bb:ef:
         f2:16:94:fe:b7:13:6a:65:9b:f7:f7:0d:1f:bd:40:17:7d:5d:
         83:91:78:b1:74:bc:cd:07:af:d1:12:7d:0c:85:17:d1:a1:3b:
         fc:30:0e:64:73:50:85:5e:f7:57:26:04:e0:ab:4b:95:33:37:
         ba:fe:f5:50:bf:31:0c:72:12:1c:bf:5a:37:59:6a:d9:c1:c6:
         a2:80:5a:7f:0a:66:15:db:03:1b:da:36:57:88:f1:6b:dd:52:
         c0:6c:1d:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 21 19:26:47 2026 by rpki-client