Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/25659463-2c37-32fc-8eb1-e485426edec8.roa
File:                     25659463-2c37-32fc-8eb1-e485426edec8.roa (raw, json)
Hash identifier:          HjLdvwcLc0UZ3cWhzM/qVXJFOatjnbPq5iw/pLknMqk=
Subject key identifier:   F2:5C:E4:56:00:21:62:3C:11:5F:2B:24:76:A2:1A:01:05:DB:05:8C
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584F6292C08C848E35F96BC6C380
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/25659463-2c37-32fc-8eb1-e485426edec8.roa
Signing time:             Sun 04 Oct 2026 01:00:13 +0000
ROA not before:           Sun 04 Oct 2026 01:00:13 +0000
ROA not after:            Sat 02 Jan 2027 02:00:13 +0000
asID:                     397199
IP address blocks:        192.58.128.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 06 Oct 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:62:92:c0:8c:84:8e:35:f9:6b:c6:c3:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Oct  4 01:00:13 2026 GMT
            Not After : Jan  2 02:00:13 2027 GMT
        Subject: CN=2353a900-e9a5-46fc-bb85-07dc715d910d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:86:80:34:f8:46:e4:e3:ce:47:a4:26:67:c9:42:
                    c3:67:ab:66:51:b9:09:58:a5:50:49:d4:c5:d6:05:
                    21:42:2a:69:47:7e:01:eb:45:d5:b2:e7:f9:7f:8a:
                    7b:21:6c:64:af:10:a9:b3:27:01:18:e3:a8:c6:5b:
                    9a:bc:60:a3:77:58:7e:ae:f4:ef:7f:eb:90:0d:aa:
                    11:bc:be:f6:c4:07:39:00:23:f5:af:a3:ed:a2:ba:
                    c7:b5:f6:f4:74:62:c3:12:c2:33:db:2e:c1:d0:58:
                    77:5d:89:d4:a2:c5:08:55:c2:7d:eb:f1:ed:8a:18:
                    72:80:90:9c:f8:87:57:ea:ee:2f:95:ef:36:e8:e7:
                    01:00:1e:2f:3b:21:a3:15:3f:ce:02:11:f5:70:4a:
                    ea:4f:d1:2c:c8:29:f9:f1:f4:39:81:5d:e7:cf:53:
                    eb:0b:54:92:f6:cd:50:70:bf:13:03:63:25:d6:45:
                    94:65:77:98:82:cd:20:2c:9b:98:e6:54:5c:b5:5e:
                    ba:d2:b0:1e:ad:d9:88:d1:da:00:58:db:3a:08:e5:
                    ce:c4:73:8f:85:8d:21:b3:4c:76:3c:80:72:3d:d9:
                    bd:1d:2a:ce:28:12:6e:7f:5c:12:b7:44:4c:6e:67:
                    23:80:af:69:18:ee:a9:49:5f:5d:31:6c:41:94:20:
                    5e:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F2:5C:E4:56:00:21:62:3C:11:5F:2B:24:76:A2:1A:01:05:DB:05:8C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/25659463-2c37-32fc-8eb1-e485426edec8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.58.128.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7a:34:c9:64:e6:1e:c2:09:fa:72:80:d1:4d:69:a8:74:09:38:
         a3:a2:35:a4:eb:f8:a7:fb:c1:9e:dc:29:e8:d9:f2:fb:ba:34:
         e2:b3:41:c4:6d:72:96:80:e5:cc:be:20:ab:3e:42:23:40:54:
         7c:f2:b8:15:a4:40:47:0c:ee:18:11:01:53:41:7a:b3:ab:86:
         cc:47:69:9f:57:7f:f5:ff:b3:90:fd:c5:ec:bc:c5:4d:ca:1a:
         ce:65:c7:af:da:1a:18:f5:f7:59:58:ca:41:b7:c1:3c:97:4b:
         84:fe:dc:da:66:42:7b:cc:67:d5:29:33:8b:4a:b3:56:80:71:
         c2:ac:99:59:dd:e5:e0:2e:4c:61:2b:86:58:e1:c3:1d:d6:5c:
         81:08:27:92:39:4f:a0:f2:26:50:b8:05:0d:b1:4e:4c:02:2a:
         3d:81:51:f2:b7:2d:fa:ee:f7:ab:a1:45:99:cd:55:4a:28:8a:
         6a:a8:a0:00:40:ba:10:8e:eb:64:cd:9f:9c:cf:07:0d:48:98:
         aa:1b:8b:88:c5:8e:7c:de:67:3b:21:ae:2b:6d:fe:d4:a0:4c:
         b7:9a:8d:dd:a4:71:2c:aa:64:3c:e6:60:6f:be:a8:47:dd:c3:
         4b:bf:c6:98:bf:1c:15:08:f1:8d:1b:9c:2b:61:cb:2c:91:a2:
         e5:4c:a8:bd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 4 15:23:41 2026 by rpki-client