Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/12a55357-250d-3a38-b221-4d9649319751.roa
File:                     12a55357-250d-3a38-b221-4d9649319751.roa (raw, json)
Hash identifier:          qJJEubtnETvVybCpqVQqFDagBnEzd8BNTzSgUS34juk=
Subject key identifier:   E3:91:BC:C7:10:89:F8:FA:B2:F4:0C:EB:C2:62:02:08:40:7C:CB:43
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584F49739E4436F3BB5C0356DD00
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/12a55357-250d-3a38-b221-4d9649319751.roa
Signing time:             Fri 25 Sep 2026 01:00:12 +0000
ROA not before:           Fri 25 Sep 2026 01:00:12 +0000
ROA not after:            Thu 24 Dec 2026 02:00:12 +0000
asID:                     396576
IP address blocks:        192.68.130.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 30 Sep 2026 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:49:73:9e:44:36:f3:bb:5c:03:56:dd:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Sep 25 01:00:12 2026 GMT
            Not After : Dec 24 02:00:12 2026 GMT
        Subject: CN=a191d15e-59a6-40fe-855e-7e8b4a56d1d7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:11:af:66:84:5c:12:77:6d:20:d1:5f:06:5e:
                    a1:7b:f4:c6:df:05:09:7a:49:ad:40:ac:e9:29:a3:
                    43:6d:a7:35:fe:4e:1c:ec:f5:57:db:2a:2f:4e:d2:
                    8d:fd:17:fc:18:d9:c2:77:9f:ac:78:b9:21:e8:1f:
                    6e:27:e7:88:fa:09:7d:99:37:2b:db:c3:37:6d:85:
                    43:cc:5a:60:e1:0e:c2:b6:7f:0a:e9:73:68:55:be:
                    54:df:3c:43:2d:e6:9a:d3:a4:ec:18:f5:b3:77:0d:
                    99:74:1e:d2:40:a3:27:44:52:dc:93:29:e2:89:5e:
                    74:cc:cf:ef:ae:d9:1c:b2:b0:25:63:46:81:c0:24:
                    7b:0a:41:d9:42:61:54:72:3d:4a:52:a1:b1:53:8e:
                    e3:e7:85:7d:fe:2f:74:76:cd:07:bb:76:a9:7e:d0:
                    53:76:eb:3e:0b:ab:23:5b:23:28:6c:9d:a4:88:be:
                    2c:8a:18:d5:61:31:2b:cd:09:13:1e:33:70:f2:f4:
                    7c:6f:f5:93:33:f7:11:3a:99:22:0c:f0:3a:67:3d:
                    2e:06:07:02:d1:12:76:bb:d0:eb:c7:57:6f:15:ae:
                    93:cf:87:1b:c7:f8:da:44:7a:c0:47:04:02:d4:92:
                    21:40:8c:33:08:6c:3e:93:7d:79:90:f6:9b:9a:41:
                    cd:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E3:91:BC:C7:10:89:F8:FA:B2:F4:0C:EB:C2:62:02:08:40:7C:CB:43
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/12a55357-250d-3a38-b221-4d9649319751.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.68.130.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         98:ff:90:68:9d:70:99:bd:15:fb:22:ee:96:93:b1:5c:f9:63:
         03:17:14:55:83:3f:01:e0:05:d6:12:91:a1:d7:41:a7:f1:15:
         da:4a:13:0c:18:e7:f7:cf:76:1e:08:0a:42:ec:05:53:99:44:
         bc:df:24:5a:21:d9:4c:04:50:66:01:0d:f5:23:45:db:c4:6e:
         c2:f2:51:05:bb:d2:bb:be:be:ed:bf:e9:5f:72:54:01:a6:29:
         c4:25:6e:7f:31:d0:ec:f3:7e:f3:1c:a1:a5:04:0a:55:b8:40:
         90:72:eb:af:b5:63:26:3a:47:20:ab:b9:09:41:6e:06:97:bc:
         58:a0:f3:ff:9b:0e:8c:d5:c1:0c:69:71:49:9c:a0:d3:9d:c8:
         7f:84:65:2e:71:55:90:a9:0f:25:0d:57:50:6e:45:53:3f:8a:
         4b:b9:ec:1b:fe:fd:2c:f5:f6:0e:fb:1c:53:82:11:68:50:ce:
         c6:51:fb:fd:36:15:90:ec:66:b5:aa:0c:40:89:b0:01:1d:af:
         e4:a6:1e:1b:3a:7f:ec:3b:45:67:7d:b2:86:79:b0:23:b5:d9:
         58:b5:23:7a:01:f3:12:dc:35:f1:33:73:02:16:bd:8d:d0:4d:
         a3:a6:ab:33:1c:32:75:1e:0c:2c:f0:88:7d:14:e2:c1:9f:64:
         89:09:78:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 29 13:12:19 2026 by rpki-client