Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/4a0d2076-5380-3018-9d0c-b5da131a1cc8.roa
File:                     4a0d2076-5380-3018-9d0c-b5da131a1cc8.roa (raw, json)
Hash identifier:          d5R8TtkMleiszmNcEDrwQgovG77lXXAYBL0+zHevbIs=
Subject key identifier:   3C:23:6D:BD:1D:A5:76:28:1B:DA:A6:23:65:66:74:1A:43:F9:5E:65
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584F4972BC7CD4461A4B689EF6C0
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/4a0d2076-5380-3018-9d0c-b5da131a1cc8.roa
Signing time:             Fri 25 Sep 2026 01:00:12 +0000
ROA not before:           Fri 25 Sep 2026 01:00:12 +0000
ROA not after:            Thu 24 Dec 2026 02:00:12 +0000
asID:                     397212
IP address blocks:        192.68.130.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 28 Sep 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:49:72:bc:7c:d4:46:1a:4b:68:9e:f6:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Sep 25 01:00:12 2026 GMT
            Not After : Dec 24 02:00:12 2026 GMT
        Subject: CN=40230bfa-eed3-49bd-bd77-98fa5e90ffa6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8d:8a:f8:48:67:b9:b9:17:86:0b:60:df:13:b2:
                    e1:28:d0:01:2c:dc:70:a4:ed:ca:42:9e:11:fe:68:
                    1b:1f:11:84:2f:80:2a:81:49:24:7d:cf:fe:fd:18:
                    51:a3:7a:2d:6a:28:b8:fa:85:4c:a5:57:16:41:d0:
                    bc:34:b1:de:55:0b:88:1c:63:96:6e:9b:30:de:ce:
                    74:ba:d7:a5:17:ba:85:14:d5:0c:0d:ae:ab:ff:5b:
                    5a:c5:ff:3a:cc:27:fa:5f:21:48:00:d1:78:8a:6b:
                    b4:87:25:94:91:0c:0f:b0:f2:57:4e:11:43:e5:39:
                    61:dd:dc:d7:36:d8:a4:d7:ec:2b:76:40:ae:cf:4f:
                    18:0e:7c:8f:6e:34:98:eb:ca:5f:76:96:6f:6e:b7:
                    4c:47:05:f8:02:4d:17:38:30:5b:66:f5:12:56:a6:
                    f2:06:6e:0a:3a:06:e6:f4:a3:de:22:7a:b7:e8:7c:
                    1b:81:2b:3b:ed:3f:b4:b6:68:d3:b3:ba:2a:a9:04:
                    4c:67:db:11:a6:53:68:b9:eb:65:e1:f4:96:33:61:
                    6e:16:ca:71:0a:c8:2b:e4:90:4b:bf:57:ba:36:bf:
                    c6:f6:76:7b:a5:76:b9:16:97:a7:c0:68:b5:0d:59:
                    d2:9f:03:73:dd:93:ca:15:e7:98:96:de:fd:4d:4f:
                    b2:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3C:23:6D:BD:1D:A5:76:28:1B:DA:A6:23:65:66:74:1A:43:F9:5E:65
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/4a0d2076-5380-3018-9d0c-b5da131a1cc8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.68.130.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3f:a9:56:f3:14:bb:c7:a3:6e:c3:a5:41:7e:56:0e:25:ed:85:
         b3:20:55:f9:47:d0:26:17:12:9d:7b:12:b7:6d:d2:e7:5c:ea:
         0f:10:08:40:16:a3:33:74:b0:4c:ae:83:b2:6f:d0:57:1b:92:
         c5:f3:96:c0:c7:07:a6:1b:81:01:f5:bf:15:e2:32:eb:12:08:
         b3:ad:ea:5a:9d:8f:52:db:0c:eb:f6:88:a5:bc:31:6b:23:94:
         6f:1d:a6:e4:1d:52:ab:8a:53:e5:16:c8:42:03:01:d3:04:31:
         e7:b1:f9:25:51:4f:f1:2d:e4:cd:10:d3:bc:7e:1c:6e:52:83:
         c8:04:b3:2e:ad:70:f0:00:4f:e1:3f:19:db:bf:99:ab:cf:a0:
         3b:75:6b:6a:b4:d7:71:d3:6c:09:61:b5:b5:ef:0a:b8:0b:9c:
         82:c7:f0:0d:00:0f:fe:15:0e:bc:8d:20:5f:84:c5:77:3b:0a:
         be:49:89:7b:02:2d:db:a0:5c:4b:c9:82:0b:09:f8:03:4e:27:
         10:2c:00:8f:26:19:e4:9a:2f:ee:88:57:e9:33:a4:a5:e0:47:
         5a:65:49:ab:db:1b:ab:d4:5e:5d:55:22:53:11:73:5f:19:13:
         7b:94:b4:80:6a:85:f7:47:04:b6:e5:6f:db:5b:28:00:f3:14:
         9f:39:bb:b8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 26 16:56:37 2026 by rpki-client