Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/00a605a5-8c58-300a-b28a-9460f2337bc3.roa
File:                     00a605a5-8c58-300a-b28a-9460f2337bc3.roa (raw, json)
Hash identifier:          T9SAMOond2aUIRdhcZI+VYkY+eNo1G+g8D5z1X/w+hg=
Subject key identifier:   11:3E:83:8F:FA:10:04:9F:75:33:AD:52:5A:1D:6D:53:0D:0D:25:76
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584F498AF02E9E3B1371442A0C60
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/00a605a5-8c58-300a-b28a-9460f2337bc3.roa
Signing time:             Fri 25 Sep 2026 01:00:12 +0000
ROA not before:           Fri 25 Sep 2026 01:00:12 +0000
ROA not after:            Thu 24 Dec 2026 02:00:12 +0000
asID:                     396594
IP address blocks:        192.68.130.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 28 Sep 2026 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:49:8a:f0:2e:9e:3b:13:71:44:2a:0c:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Sep 25 01:00:12 2026 GMT
            Not After : Dec 24 02:00:12 2026 GMT
        Subject: CN=44d7d82c-d3f7-4a57-a11b-b14fbdfa4279
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:64:f0:c5:02:17:3d:98:32:a1:3d:e6:bb:eb:
                    6b:d8:b0:8a:f6:81:b8:4e:f1:84:41:90:25:02:75:
                    4e:a4:c0:f9:e3:6e:3b:cd:88:61:ea:b1:5a:26:ee:
                    23:75:96:5c:35:3b:4c:e8:38:dd:3e:3d:d4:c9:3d:
                    6b:72:e3:52:41:1a:e4:98:e5:72:fe:9e:35:ff:2e:
                    98:d7:ee:91:92:0c:41:75:44:80:1a:d7:4d:44:a9:
                    6c:ec:4d:91:ed:4a:10:a8:1d:77:2a:06:f7:15:e5:
                    7a:4c:b1:9e:16:98:90:6b:46:ef:7f:e8:de:7f:ca:
                    05:6e:f5:79:e8:c5:6f:9d:fe:6f:25:ca:71:d1:74:
                    cc:a6:f6:fb:6e:98:64:45:c7:75:3f:f3:1b:f3:61:
                    e0:4d:2f:f2:70:0d:5a:c1:ca:75:52:d0:cc:6a:6b:
                    eb:e3:52:f7:89:3a:3b:cc:4a:a0:b5:6e:83:ca:ce:
                    1f:e4:90:d8:94:98:b3:d3:09:45:9f:c8:3d:15:36:
                    d4:98:20:bc:44:63:5d:0b:ac:56:d5:ed:ed:fb:67:
                    4e:ba:88:bc:1d:7f:e2:dd:a3:e7:e7:17:3b:e7:91:
                    39:08:b3:d5:08:69:9f:51:07:98:9c:cb:6c:0a:a3:
                    ab:7c:e1:dd:28:1c:f3:6b:e5:40:f3:da:da:ea:40:
                    00:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                11:3E:83:8F:FA:10:04:9F:75:33:AD:52:5A:1D:6D:53:0D:0D:25:76
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/00a605a5-8c58-300a-b28a-9460f2337bc3.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.68.130.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         14:f3:fb:41:83:95:70:35:d7:62:c7:ba:53:46:31:6f:84:b2:
         01:2a:f7:6f:ad:97:ae:9d:15:86:17:f9:65:17:7f:d9:fd:0f:
         56:d6:2d:3c:15:fe:87:a2:1c:91:c4:8c:c2:e7:41:b3:03:38:
         56:77:90:51:cc:0d:42:e2:9e:dd:93:90:08:92:b7:51:5a:26:
         35:ff:6f:90:54:51:ef:2c:97:f7:71:df:74:ca:34:90:7b:3a:
         6e:2b:30:af:68:e7:23:10:0d:aa:0b:26:df:19:3e:ba:f5:a7:
         fd:4a:9d:c7:63:63:9d:fd:91:5e:42:df:3e:98:ca:34:40:7a:
         b7:ad:ab:82:0b:d0:2d:f5:e3:a6:3e:38:c8:47:f9:44:ba:8a:
         5d:25:39:09:f7:8a:35:46:31:9f:f4:1c:26:bd:d7:75:0d:59:
         95:91:38:98:d0:6b:89:c1:a5:73:a1:fe:95:45:65:37:a6:24:
         e4:a5:14:7d:03:39:6a:d0:2e:7a:dd:8b:0c:5a:9a:17:21:b0:
         aa:00:6d:28:ef:9c:03:1b:9a:d5:9a:bd:d5:3f:2a:cb:1c:d4:
         8c:c7:80:bb:a9:34:2c:36:c5:c5:e0:94:c9:fd:64:57:4d:65:
         90:17:c9:79:13:67:99:d6:1b:8b:3f:2e:1d:c9:cb:c8:00:e9:
         67:3f:2a:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 27 06:17:23 2026 by rpki-client