Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/4b0834bd-e97b-394f-8fe5-a400995dbdd9.roa
File:                     4b0834bd-e97b-394f-8fe5-a400995dbdd9.roa (raw, json)
Hash identifier:          Ku16s0qRMsEhPb5/x22f5RzSEhqeG/1IIfLb6u2WGxE=
Subject key identifier:   81:C1:4A:2D:C5:FD:5B:70:28:B4:C4:E6:EF:51:7D:DF:68:2B:9C:23
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584F4972DC5609264C4B6A915C40
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/4b0834bd-e97b-394f-8fe5-a400995dbdd9.roa
Signing time:             Fri 25 Sep 2026 01:00:12 +0000
ROA not before:           Fri 25 Sep 2026 01:00:12 +0000
ROA not after:            Thu 24 Dec 2026 02:00:12 +0000
asID:                     396584
IP address blocks:        192.30.45.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 28 Sep 2026 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:49:72:dc:56:09:26:4c:4b:6a:91:5c:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Sep 25 01:00:12 2026 GMT
            Not After : Dec 24 02:00:12 2026 GMT
        Subject: CN=3caeef87-1ae2-4031-8859-6d18cdb9bbb7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:7c:b9:bf:0b:29:1d:7d:4c:ce:f9:ad:37:c1:
                    1c:c4:68:b9:5f:0e:fe:b9:3d:d3:26:c5:c6:be:0d:
                    b9:ba:f0:80:a5:0a:15:e4:7c:fa:5a:af:a6:16:02:
                    0b:cd:64:18:15:f2:f5:7e:f3:0e:40:a7:81:64:7d:
                    41:6a:f2:8c:b9:de:75:f4:54:4d:84:b1:18:ca:ed:
                    52:6b:8b:df:a1:5a:22:91:2d:19:91:da:64:64:71:
                    3e:8b:bc:27:87:31:7a:62:6a:e5:c1:58:c9:f1:3c:
                    c1:bf:45:f0:ec:0e:27:ce:87:56:ff:55:78:44:26:
                    f0:c2:6b:23:e9:0a:61:ce:41:ed:36:70:5d:97:0a:
                    e2:bb:f2:1e:31:15:5b:84:72:aa:4b:69:22:f2:6d:
                    27:27:af:81:aa:1d:22:5e:f9:01:70:ca:cc:56:d2:
                    33:7e:37:2c:09:4b:fc:c1:02:4c:63:bc:ed:47:52:
                    7a:95:e3:f1:36:32:63:e2:d8:00:9f:b2:f3:88:4c:
                    27:3f:5f:f8:9a:50:ba:33:e2:5c:7b:b2:f8:05:e0:
                    fc:fa:86:46:b2:a2:6a:e6:a4:92:6d:15:cd:46:1b:
                    b2:3b:b7:6c:4c:45:f2:ad:f4:a8:bf:a9:a5:64:d2:
                    19:68:16:dd:c2:55:c4:57:b6:b9:46:c2:08:fb:31:
                    24:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                81:C1:4A:2D:C5:FD:5B:70:28:B4:C4:E6:EF:51:7D:DF:68:2B:9C:23
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/4b0834bd-e97b-394f-8fe5-a400995dbdd9.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.30.45.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         16:5e:e2:5a:75:b0:15:2e:e3:63:d7:20:ba:30:c3:ef:cb:33:
         18:29:f4:fc:0b:fc:6e:fb:8c:90:fc:c0:23:48:dd:09:9d:a6:
         51:d8:fa:be:46:1f:a1:d3:e9:ed:2a:5a:b3:f8:8a:b2:91:11:
         e9:22:1a:54:15:26:04:ac:40:66:25:fb:c7:e8:a8:2f:0a:7f:
         00:c4:25:41:cc:81:fd:56:1a:ad:95:4e:81:25:a5:fc:27:ea:
         ab:4c:39:93:82:e3:f6:57:b4:01:21:fa:ba:42:fa:b9:df:5a:
         25:24:39:90:96:f3:c4:f4:d0:95:1c:9e:97:1c:f0:82:87:59:
         7f:02:0d:72:6b:5d:bb:04:37:43:af:20:56:bf:cf:1f:49:a4:
         7b:43:d4:ee:81:4f:e9:9f:c3:b7:b2:04:5f:61:81:a1:79:ee:
         25:39:73:5f:28:a8:49:68:6a:07:eb:41:d4:7c:2e:97:a1:fb:
         62:da:f0:fe:62:86:4e:c0:a7:c0:48:6e:b4:b5:ad:53:70:e7:
         a9:fc:e3:51:11:11:9e:0b:25:d3:f6:2b:ee:23:f0:0b:8d:42:
         0e:4c:99:19:95:9f:af:e7:9a:e7:e9:d8:d9:c7:d2:99:43:df:
         d8:bf:4b:2c:e9:b0:c9:2a:80:cd:ae:d2:4d:cd:f9:2f:d8:96:
         ae:a7:f3:8a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 27 09:53:15 2026 by rpki-client