Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/e8328903-7ca7-3aed-b3ee-92d8f5f434ab.roa
File:                     e8328903-7ca7-3aed-b3ee-92d8f5f434ab.roa (raw, json)
Hash identifier:          tldm3qY66RbZrzhqt1rePnWuJvcXFgjMHxgbdDdvnbw=
Subject key identifier:   81:30:81:8F:44:8C:F8:58:2F:ED:06:D8:D5:EE:F1:0B:A7:5E:60:CA
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584F093CE10212BDF7A000724180
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/e8328903-7ca7-3aed-b3ee-92d8f5f434ab.roa
Signing time:             Wed 02 Sep 2026 01:00:12 +0000
ROA not before:           Wed 02 Sep 2026 01:00:12 +0000
ROA not after:            Tue 01 Dec 2026 02:00:12 +0000
asID:                     40647
IP address blocks:        192.42.173.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 24 Sep 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:09:3c:e1:02:12:bd:f7:a0:00:72:41:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Sep  2 01:00:12 2026 GMT
            Not After : Dec  1 02:00:12 2026 GMT
        Subject: CN=fdea8e67-1da9-46cf-b85c-9003fc864b53
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:b4:11:06:a7:f0:3a:dd:89:a5:e4:79:2f:e3:
                    8a:7c:2f:3b:72:ad:57:7c:37:c8:b4:79:e3:14:06:
                    d0:db:56:b8:1d:e3:db:0a:e9:46:62:81:87:5b:8c:
                    ca:6e:30:41:6c:03:8f:2b:03:2b:88:43:32:c4:84:
                    68:9f:0f:a2:59:a8:4a:2c:6b:f9:4c:dc:80:df:f6:
                    10:ab:66:d2:c1:1a:fd:ec:d4:cc:f6:62:ad:ab:36:
                    d2:e7:80:da:21:d0:08:d7:9f:1a:2e:a5:cf:10:06:
                    38:6c:4d:47:ce:d2:ff:07:96:3b:3d:85:9c:7b:e1:
                    de:25:2a:ab:51:38:ce:0f:fe:e7:aa:8c:b2:4d:66:
                    6e:65:2a:b3:a1:c6:76:6b:b7:c2:4c:47:46:d9:e1:
                    66:77:8e:d9:70:97:06:8e:e9:ef:ea:d3:26:47:a3:
                    bc:12:3e:31:17:28:ec:af:1a:00:2d:d8:80:f2:d2:
                    55:73:23:11:65:ad:d8:eb:6f:c5:6e:3a:04:a1:54:
                    75:72:93:83:bc:2a:e1:83:5c:f9:43:59:13:ca:3e:
                    d9:7b:97:78:5e:5c:ef:22:e6:4c:48:de:48:ae:15:
                    4f:af:c9:53:9d:b0:0d:94:f1:8f:1e:70:b0:70:7f:
                    ae:ae:c8:2a:6e:19:f6:e5:93:f9:e1:f0:b8:db:b1:
                    68:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                81:30:81:8F:44:8C:F8:58:2F:ED:06:D8:D5:EE:F1:0B:A7:5E:60:CA
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/e8328903-7ca7-3aed-b3ee-92d8f5f434ab.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.42.173.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         18:ed:ef:a0:21:86:24:a4:63:d0:0d:1e:45:3a:c4:ff:8a:4a:
         8e:a0:62:5c:89:56:f6:06:06:47:ed:7b:ee:c0:77:83:eb:50:
         07:5b:a9:7a:91:02:69:00:4b:dc:a6:e5:d0:28:ba:48:66:e1:
         22:d6:ff:d5:c1:43:39:9f:44:72:55:27:ba:a9:ba:8e:bb:4a:
         f5:ce:42:27:17:55:62:16:51:7f:8e:43:de:93:4c:50:1f:2a:
         3e:ae:18:00:f0:04:35:e3:14:4a:0d:a9:a6:8c:5a:35:92:a8:
         16:38:7a:04:ec:af:b6:66:74:57:80:f4:5e:b6:af:1b:f7:70:
         14:90:6f:d6:10:69:b0:ca:86:c2:f8:d5:4a:38:fc:21:89:57:
         ca:b1:2d:88:37:05:53:1f:48:c0:00:76:78:e8:1d:7b:1f:d4:
         f4:f5:b1:01:a8:4d:b2:f1:43:60:2c:aa:d5:2b:e0:7d:94:f9:
         88:c0:b3:31:57:31:b5:3a:b6:ca:55:38:c6:94:c4:4b:d0:9c:
         ed:fa:ea:91:b2:9d:aa:8f:a0:82:f3:a0:87:b4:f3:04:dc:09:
         95:a4:79:de:93:e9:ea:01:8a:07:ec:05:02:74:0c:7a:00:50:
         94:8d:47:e8:46:ef:d7:8f:4a:7c:f7:9d:0e:92:bb:39:5e:b4:
         6a:b0:c5:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 16:47:29 2026 by rpki-client