Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/37e27fac-0456-3fb1-8bb6-07a6c4a27fd1.roa
File:                     37e27fac-0456-3fb1-8bb6-07a6c4a27fd1.roa (raw, json)
Hash identifier:          dHPwVftD9u+n9+Ux82UPw+LN/CymdVqi+DyRGzBbEPs=
Subject key identifier:   06:7B:F8:C7:5B:4B:9B:88:B0:AF:D4:37:E0:C7:49:60:2F:27:35:C7
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584F4974C06689B42743C811F280
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/37e27fac-0456-3fb1-8bb6-07a6c4a27fd1.roa
Signing time:             Fri 25 Sep 2026 01:00:12 +0000
ROA not before:           Fri 25 Sep 2026 01:00:12 +0000
ROA not after:            Thu 24 Dec 2026 02:00:12 +0000
asID:                     36628
IP address blocks:        192.31.80.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 28 Sep 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:49:74:c0:66:89:b4:27:43:c8:11:f2:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Sep 25 01:00:12 2026 GMT
            Not After : Dec 24 02:00:12 2026 GMT
        Subject: CN=5965829e-1816-4e69-a055-2fce1ba67070
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:6f:db:42:18:75:0e:6e:aa:2b:43:88:95:af:
                    b6:82:05:b5:cd:64:67:fc:76:5e:03:86:67:fc:11:
                    77:0e:89:b6:e3:53:4c:bd:99:02:f7:53:ce:80:bd:
                    0e:b8:f6:db:fb:d9:e3:5d:1f:bf:02:2d:b8:cb:4c:
                    73:4c:ef:d1:06:85:35:68:66:19:43:81:a5:0f:46:
                    db:3f:7b:24:63:cb:c2:1c:fb:42:b0:24:9a:bb:4b:
                    00:5c:64:02:07:50:62:2d:c9:99:65:21:5c:ee:2c:
                    c1:6d:1c:01:2e:0a:9d:d3:dd:b9:94:74:5c:b8:fc:
                    a6:0a:03:c4:e6:71:d3:da:66:de:9f:a6:ee:86:51:
                    fc:83:49:5f:e2:3e:0b:06:fe:6c:ec:22:39:28:4b:
                    86:55:5d:57:67:6b:ca:83:23:58:33:61:d9:4e:54:
                    1c:8d:da:db:85:05:cd:91:42:e5:0e:90:23:76:8f:
                    f3:4c:e8:bb:73:5c:ed:65:8d:c3:33:f4:8e:bc:ad:
                    af:41:8b:f2:4d:75:a3:75:6f:cc:88:e9:0e:94:49:
                    90:bc:87:9e:6a:bf:03:bd:37:59:19:f5:6e:b5:13:
                    76:0e:ad:14:49:96:51:8a:98:ab:8e:5e:bd:e9:46:
                    cf:83:46:a5:5c:d9:de:f4:5c:6e:34:13:32:ee:6f:
                    ec:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                06:7B:F8:C7:5B:4B:9B:88:B0:AF:D4:37:E0:C7:49:60:2F:27:35:C7
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/37e27fac-0456-3fb1-8bb6-07a6c4a27fd1.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.31.80.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         58:6a:19:7d:ac:70:00:72:cb:8c:ca:aa:5d:89:65:1f:fe:50:
         f9:4e:5f:1f:55:bc:94:27:9f:e6:ff:6f:44:90:57:c8:1d:bb:
         e2:79:6d:90:e4:b0:c1:a8:08:00:1e:fe:56:5a:c9:c0:60:f1:
         28:41:3f:43:be:6b:a0:c9:58:54:15:4c:41:00:95:d1:8f:42:
         1c:a4:13:c5:6d:cb:0a:c9:17:66:46:d5:9b:6d:da:fb:4f:7c:
         fb:da:2f:22:4a:83:4c:f3:e8:23:86:92:c1:a3:98:b1:a1:d0:
         64:72:f1:48:c5:f5:74:e7:1e:10:84:ea:0b:f0:2e:e2:47:e5:
         16:a4:60:bf:33:f6:a0:74:8a:bb:f4:c4:b0:cf:0f:65:1f:65:
         e2:e5:e6:1c:4e:fb:39:3f:35:5d:1f:d8:5a:64:aa:25:0c:52:
         0f:29:07:89:86:f6:5c:b4:f1:fd:00:90:a7:31:0b:71:88:3f:
         db:92:86:fb:db:9e:58:78:20:57:52:96:f0:4a:21:ff:c3:52:
         b8:53:7f:8c:31:19:0d:16:8a:ab:22:05:5e:08:38:15:38:7a:
         f0:71:1d:78:0c:e8:21:4f:ab:9b:c1:2f:e2:33:fe:03:c7:d5:
         76:08:87:d9:33:d5:95:8f:a5:d4:96:9b:81:f7:f7:ba:31:08:
         dd:84:fe:20
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 26 05:32:10 2026 by rpki-client