Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/f5f6d8f4-13d0-3af3-bc64-3c5495206f6a.roa
File:                     f5f6d8f4-13d0-3af3-bc64-3c5495206f6a.roa (raw, json)
Hash identifier:          f7mlW62GSxWULgApv5meVBomGGqKLw2iM2CsYF0ZUnU=
Subject key identifier:   B8:C9:B0:4B:49:22:78:7A:67:3D:F4:20:92:33:D3:A8:E9:ED:C1:25
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584EED51FF9E49A5F5DC17B36BC0
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/f5f6d8f4-13d0-3af3-bc64-3c5495206f6a.roa
Signing time:             Sun 23 Aug 2026 01:00:12 +0000
ROA not before:           Sun 23 Aug 2026 01:00:12 +0000
ROA not after:            Sat 21 Nov 2026 02:00:12 +0000
asID:                     397209
IP address blocks:        192.42.176.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 24 Sep 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:ed:51:ff:9e:49:a5:f5:dc:17:b3:6b:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Aug 23 01:00:12 2026 GMT
            Not After : Nov 21 02:00:12 2026 GMT
        Subject: CN=553ccbbb-d95d-4207-a0ec-7762e1dc5b32
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:1b:eb:60:84:1a:f2:88:c2:e1:05:e8:9f:c1:
                    f3:97:7a:d2:b0:d9:70:33:09:62:21:be:e8:ad:34:
                    bc:37:7d:bc:4b:af:40:5c:a5:80:59:0e:8e:2b:61:
                    10:76:a9:a3:ac:8c:18:a6:b5:23:39:25:f8:84:bb:
                    ce:c2:75:7a:87:eb:2b:3c:f4:43:04:4d:f2:0a:17:
                    01:f9:a1:d7:cb:4b:05:39:ae:6c:52:3f:43:98:74:
                    a8:df:9b:34:e2:ce:e9:05:25:0b:4e:dc:1b:90:ac:
                    7a:6b:9e:d8:ff:2f:67:ef:0f:c0:d9:2e:81:67:4d:
                    2f:86:ec:76:71:3e:46:ea:57:de:80:35:3e:84:9b:
                    b0:7c:84:29:8b:31:db:ec:56:be:fc:51:7d:1b:21:
                    c9:cb:f5:f3:49:ac:f2:41:c4:8b:5b:2f:e3:25:a7:
                    24:40:a9:5e:56:87:23:90:9e:0a:3a:05:1a:b7:58:
                    d0:12:a5:37:11:4b:4f:a3:f2:09:a1:8a:7b:ee:bc:
                    d4:47:16:5d:c5:fd:ed:6d:a9:9a:6b:ab:6a:ff:08:
                    fe:37:1a:55:18:49:a8:69:78:5f:11:2b:3e:ce:99:
                    d4:91:be:d7:ff:49:5b:ee:09:f1:94:b9:a3:a8:33:
                    13:a4:11:b8:b4:f9:e9:00:a3:bd:fd:e8:ac:b7:0f:
                    41:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B8:C9:B0:4B:49:22:78:7A:67:3D:F4:20:92:33:D3:A8:E9:ED:C1:25
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/f5f6d8f4-13d0-3af3-bc64-3c5495206f6a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.42.176.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a3:ef:be:2b:8c:dc:58:5b:c2:44:df:66:b1:2e:cb:cd:c2:8c:
         53:36:60:6c:dc:e9:e5:a6:30:d2:72:62:18:df:f5:35:38:1e:
         53:b2:62:ab:60:1b:07:60:8a:c1:c3:06:41:c2:1c:60:85:eb:
         20:89:ac:76:d9:13:3b:50:e5:17:b3:94:e2:97:8d:76:48:0b:
         eb:d2:22:89:d2:09:99:33:6c:2a:f5:0c:3b:17:29:c1:26:15:
         7e:30:f0:4a:db:0e:08:c1:44:9b:cf:cb:f6:31:ce:01:b7:19:
         f2:a0:44:40:00:e4:af:2f:af:49:24:ae:8c:d8:c1:9d:b9:d6:
         25:dc:61:48:7d:aa:20:91:d4:f6:c9:52:4c:e4:3e:6c:62:d3:
         4f:68:97:cf:ae:5d:a7:3a:dc:51:cd:4b:9b:96:38:08:5a:32:
         ae:d6:3c:49:23:79:49:84:6e:e2:cb:2e:02:61:8b:ad:03:9a:
         ff:f8:5f:ac:8a:40:76:f7:c6:a4:69:b5:d5:30:9c:f7:72:14:
         e3:5a:e2:d9:c8:ff:f9:37:61:88:ff:4d:8d:c5:4c:2b:fa:c9:
         b8:5d:00:15:09:64:d0:56:00:b4:22:d1:2d:fe:3b:12:5d:59:
         59:c6:c9:a2:41:92:e1:e9:ee:ee:e5:93:d4:0f:ed:6f:d2:1a:
         6d:26:f4:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 07:24:10 2026 by rpki-client