Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/227f3ddb-6fa7-3d7e-86de-a89a88743e19.roa
File:                     227f3ddb-6fa7-3d7e-86de-a89a88743e19.roa (raw, json)
Hash identifier:          mdBY4LCprGoN7lhlejto2bVvfnIIsSS8hooOVxITAUs=
Subject key identifier:   A3:4E:A9:E9:C1:6D:6A:68:2B:A6:EB:D8:DD:EE:EE:BE:1C:87:F3:A1
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584F498819CE99FFB9528A19E980
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/227f3ddb-6fa7-3d7e-86de-a89a88743e19.roa
Signing time:             Fri 25 Sep 2026 01:00:12 +0000
ROA not before:           Fri 25 Sep 2026 01:00:12 +0000
ROA not after:            Thu 24 Dec 2026 02:00:12 +0000
asID:                     36629
IP address blocks:        192.43.172.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 26 Sep 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:49:88:19:ce:99:ff:b9:52:8a:19:e9:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Sep 25 01:00:12 2026 GMT
            Not After : Dec 24 02:00:12 2026 GMT
        Subject: CN=7d702b2b-0a0b-48c1-ab36-1d65503f0b03
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8c:20:f4:45:dc:eb:da:45:3f:b0:fa:57:44:5a:
                    9c:0c:8c:f6:8d:3d:00:24:12:d8:15:13:b0:1f:4c:
                    3c:39:94:f4:fb:bb:88:c2:c8:82:64:a0:05:0f:62:
                    3a:e3:81:dc:c3:c2:1f:60:67:3a:6c:a9:7f:e4:81:
                    15:d8:de:0d:7d:f0:2f:b2:31:0c:4d:af:36:a1:a9:
                    4d:03:dd:6d:9e:3c:10:13:96:ef:42:63:0c:3f:e9:
                    99:0a:fb:4b:d2:df:2b:26:8c:76:0e:a1:7a:22:3e:
                    da:7d:8b:51:41:2f:39:d1:3f:7f:f0:eb:a2:82:63:
                    f1:1c:f0:df:9f:2c:19:41:fb:90:c7:78:7f:3a:88:
                    c3:fa:f9:cf:21:77:44:98:e1:0a:4e:2f:1e:ba:ea:
                    48:a6:a8:c4:97:a6:30:7f:38:78:56:b3:e7:6d:99:
                    b6:07:a5:5a:7a:16:21:d9:22:43:35:47:c6:ef:5c:
                    79:90:6e:a2:dc:c8:7f:9b:b7:70:38:7b:bd:f3:11:
                    4f:17:66:a1:e7:f5:7c:61:28:0b:fc:58:7e:fb:de:
                    ad:93:72:86:47:b1:52:fb:ae:d5:47:fc:55:ac:be:
                    c3:cd:34:08:ee:c1:80:30:d4:c1:8c:35:2e:73:76:
                    e2:cc:0a:37:3e:a3:0a:36:5f:32:62:b7:8a:10:29:
                    8d:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A3:4E:A9:E9:C1:6D:6A:68:2B:A6:EB:D8:DD:EE:EE:BE:1C:87:F3:A1
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/227f3ddb-6fa7-3d7e-86de-a89a88743e19.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.43.172.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6e:0d:03:07:78:ae:62:fd:6e:f4:2c:ec:9e:fe:2a:c2:69:a7:
         70:fa:d8:cf:09:42:56:a4:c4:17:df:aa:46:82:65:3c:28:20:
         c7:ed:ec:5f:b0:9c:a8:af:50:18:a4:8d:d2:38:a8:d0:48:12:
         6d:85:a6:d5:cb:aa:d4:8b:6f:63:da:c6:e4:c1:df:0b:c7:99:
         3c:03:34:56:56:56:23:73:4a:50:a4:48:ad:0a:5e:fb:8d:df:
         30:ef:2c:a5:b1:f3:74:13:e4:b9:6f:2c:7d:b5:f0:cd:e4:24:
         83:46:29:18:c2:d2:b8:f4:23:f7:bb:2b:c9:41:f3:24:8f:e9:
         7b:c7:18:48:ab:f2:58:b4:ee:26:31:8d:dc:de:c3:b0:44:16:
         b7:72:b9:32:52:11:13:9d:6e:b8:c2:f8:68:c8:75:67:75:f0:
         cf:18:be:e9:9c:2f:b8:ad:11:75:f6:ae:af:aa:90:26:c0:1f:
         0d:bb:1c:35:c3:bf:f6:10:6e:28:76:5b:c1:3f:bc:bd:36:81:
         f5:70:88:e7:6a:a9:b1:60:ab:64:2b:15:cf:04:72:95:6f:c6:
         0d:65:e1:26:ab:cf:a5:6f:85:d5:67:d5:86:b1:57:94:ef:37:
         76:a5:8b:93:05:89:da:39:26:bc:ad:f3:ce:c3:50:f7:32:69:
         0b:c1:82:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 25 16:22:50 2026 by rpki-client