Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/534ed2b0-939d-376a-ba5d-53fbade6acdf.roa
File:                     534ed2b0-939d-376a-ba5d-53fbade6acdf.roa (raw, json)
Hash identifier:          whINIhgUL+RRSV+j/lknUf6jZPwAgXmhYpd4HmPQj3s=
Subject key identifier:   F1:4E:B4:C4:C2:3B:E3:9F:CB:07:4D:C0:76:7C:5C:62:39:10:5F:89
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584E7BCA335DB0C209256D6D9E00
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/534ed2b0-939d-376a-ba5d-53fbade6acdf.roa
Signing time:             Mon 13 Jul 2026 09:00:12 +0000
ROA not before:           Mon 13 Jul 2026 09:00:12 +0000
ROA not after:            Sun 11 Oct 2026 09:00:12 +0000
asID:                     396597
IP address blocks:        192.54.112.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 26 Jul 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:7b:ca:33:5d:b0:c2:09:25:6d:6d:9e:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Jul 13 09:00:12 2026 GMT
            Not After : Oct 11 09:00:12 2026 GMT
        Subject: CN=ffa55254-545e-4106-ab7a-9083d5d06c7c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:cf:a4:ee:20:36:90:2c:fe:7c:08:ec:e9:e6:
                    63:85:9e:15:e1:0c:9d:74:c7:8a:10:80:22:4a:74:
                    6b:ea:bc:9a:77:1b:3a:20:ce:ca:52:f6:da:74:65:
                    02:14:33:bc:b6:d6:21:6e:7e:49:a7:bd:95:59:d7:
                    16:5c:34:d8:cc:81:91:d5:47:58:e0:6a:e6:07:58:
                    79:b5:3c:35:2e:53:85:6b:62:6a:a7:a7:cb:8a:48:
                    17:3a:fd:24:8f:03:2c:51:26:05:0a:b7:bb:e1:73:
                    05:a7:97:82:39:2f:ea:c9:c2:9e:34:3b:ad:4f:18:
                    0a:96:b6:04:9c:a8:72:50:ac:35:b8:04:bc:a4:64:
                    ef:5d:9c:ef:6d:45:c6:b8:b3:43:e3:f8:2f:c5:13:
                    b3:1b:d2:3b:2b:7b:73:33:e3:96:0b:9d:9c:b3:b8:
                    25:84:e2:e9:d6:de:90:0d:b7:4f:2e:8b:90:72:72:
                    73:ec:04:8e:d2:ec:c3:86:80:d8:d0:de:f2:a8:bf:
                    e7:31:7e:71:fe:36:fb:77:c8:ad:c7:42:3e:a7:a9:
                    c1:78:72:bd:9f:d0:21:53:b7:ab:55:96:63:ab:7e:
                    f2:b3:41:fc:1b:cc:3a:59:df:ca:1c:1b:1c:af:a0:
                    95:a6:a7:80:7f:40:a9:a6:dd:fc:ee:66:87:72:31:
                    dd:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F1:4E:B4:C4:C2:3B:E3:9F:CB:07:4D:C0:76:7C:5C:62:39:10:5F:89
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/534ed2b0-939d-376a-ba5d-53fbade6acdf.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.54.112.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         35:0b:52:72:2a:de:a7:64:b1:50:0c:57:cc:85:f9:50:5e:e0:
         d9:c5:15:e5:e0:5e:ff:d3:74:5d:6d:33:76:76:c6:0c:bf:20:
         bc:74:ba:4e:09:9d:b8:f3:89:82:1e:47:47:8e:94:63:83:73:
         dc:98:71:23:f9:c3:af:12:03:25:42:fe:9f:31:8e:59:c9:94:
         7a:7c:e5:9a:1d:2d:ba:ce:8a:bc:07:bb:6c:1d:ad:20:22:cc:
         71:0a:de:72:88:a6:47:86:4c:10:e0:8f:6f:a6:9d:41:d6:46:
         28:c9:d2:89:b4:17:f5:4b:52:4a:57:e9:9a:b2:1b:1d:e8:e5:
         1a:a5:41:c8:57:6c:28:d4:1a:c2:b5:aa:38:2a:b4:e3:1f:53:
         f5:8e:80:17:86:80:ca:53:2c:02:2a:ac:a7:c0:e1:f5:aa:7d:
         5b:d4:fa:32:d8:a0:f7:13:27:18:7f:ab:3a:f8:06:e1:7f:3c:
         11:70:40:1e:5b:13:b9:be:96:ab:55:d6:c8:89:05:a3:0a:03:
         ec:eb:8f:16:e1:d9:1a:2b:61:d3:de:5c:cf:ae:6a:1b:33:40:
         d9:f1:8f:7b:aa:10:ee:4e:ed:19:9f:b7:61:27:bb:23:ce:18:
         b0:3a:4c:0d:db:90:22:9f:a5:0c:fa:30:79:57:5c:6e:ff:01:
         68:95:69:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 07:47:45 2026 by rpki-client