Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/21ddc14e-026a-3ebb-afef-e597087e57a9.roa
File:                     21ddc14e-026a-3ebb-afef-e597087e57a9.roa (raw, json)
Hash identifier:          p+1WVg9k0w7ARgNVnUessHJqbZvt4B3RC2C54DkMHXM=
Subject key identifier:   84:22:1E:76:10:6C:4B:66:09:F0:45:B8:FB:E9:DA:47:D1:38:CA:E8
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584F43DD2DBD14284B9646D42E00
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/21ddc14e-026a-3ebb-afef-e597087e57a9.roa
Signing time:             Wed 23 Sep 2026 01:00:12 +0000
ROA not before:           Wed 23 Sep 2026 01:00:12 +0000
ROA not after:            Tue 22 Dec 2026 02:00:12 +0000
asID:                     211369
IP address blocks:        192.42.93.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 26 Sep 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:43:dd:2d:bd:14:28:4b:96:46:d4:2e:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Sep 23 01:00:12 2026 GMT
            Not After : Dec 22 02:00:12 2026 GMT
        Subject: CN=ddd1c0a3-27c0-48ec-94b3-9e1f65fe6cb1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:81:3c:1e:30:83:c4:ed:99:a7:e5:62:66:a8:
                    db:b9:00:91:04:9d:b6:69:e1:42:fb:ec:a1:ac:d8:
                    4c:7c:43:2f:a7:21:78:56:34:1b:fd:c3:4d:7b:5a:
                    10:00:1f:15:3f:74:a0:ce:c7:f5:4c:73:16:f1:33:
                    41:4e:1f:ff:c7:cc:59:f5:a1:f7:2c:56:86:5d:84:
                    a3:15:d8:f9:de:ae:2a:b8:b3:41:96:2c:48:98:18:
                    33:47:e0:dd:a1:ca:36:81:55:d2:f3:db:0d:a1:f9:
                    88:46:cc:2f:ba:a0:4e:b1:bf:8f:74:6e:72:ba:d2:
                    86:81:54:81:bf:54:14:11:5e:31:a7:0f:a8:8c:35:
                    e0:ac:0c:d3:f2:b7:81:7f:3b:79:bf:f3:8c:66:9b:
                    46:b9:a5:b3:84:bc:01:e1:10:12:6e:7c:38:51:c0:
                    46:74:f9:9d:80:b7:ed:e2:05:26:00:e6:50:d7:91:
                    54:4a:38:0a:9c:af:15:44:ba:dc:12:17:57:39:cc:
                    7f:69:79:42:41:c5:56:19:27:72:17:01:ba:22:69:
                    dd:73:4a:b9:22:ba:f8:5b:e2:15:88:7d:b1:89:48:
                    f9:55:49:54:e4:79:21:6e:12:dd:92:d9:6d:98:dc:
                    a1:4c:f4:51:0c:29:a0:ed:3c:ba:2e:c7:cc:82:4d:
                    a4:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                84:22:1E:76:10:6C:4B:66:09:F0:45:B8:FB:E9:DA:47:D1:38:CA:E8
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/21ddc14e-026a-3ebb-afef-e597087e57a9.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.42.93.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5e:f9:45:e6:ac:eb:04:71:c9:04:32:95:3d:3f:57:d5:f5:2d:
         32:85:46:40:25:08:17:33:9f:32:7b:c6:ca:9c:e4:64:c1:aa:
         bb:a5:86:d4:57:19:1d:3f:17:a6:f5:74:d8:6b:33:6e:6e:ff:
         a6:82:e4:37:54:24:ca:6a:d9:be:c7:6b:f8:fd:7c:fb:81:25:
         23:eb:e5:e1:6d:f0:75:eb:e7:5e:fb:3c:18:17:d0:69:3a:4e:
         89:dd:fe:28:bd:22:db:87:63:78:93:fa:66:05:2d:9f:14:45:
         c4:39:55:da:ea:3b:2c:64:91:c5:46:ab:1d:01:b0:c4:d1:52:
         15:15:3f:3f:03:6f:50:27:50:03:1f:6f:09:a9:e9:bc:fc:f7:
         ba:ae:c4:a9:5c:5b:5c:5a:b9:d8:c1:a4:32:94:11:ac:0d:4c:
         37:70:14:c3:16:aa:a7:11:12:3a:6e:c0:1c:fb:e7:24:30:78:
         e8:01:9a:ab:00:1d:91:c2:89:9d:a2:b4:b4:a3:b1:53:a9:e8:
         be:63:64:43:c5:0e:97:c0:e5:13:e2:aa:e8:5d:fe:4e:e8:6e:
         0c:7d:db:ce:b0:c0:bd:43:60:a8:af:41:f4:69:0a:98:90:8c:
         08:14:03:4d:ca:41:b6:f8:a2:e8:ef:2d:2a:83:99:94:1f:e0:
         d1:5e:1f:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 21:44:06 2026 by rpki-client