Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/7488a149-b581-31b5-9810-d2af5c92b047.roa
File:                     7488a149-b581-31b5-9810-d2af5c92b047.roa (raw, json)
Hash identifier:          /NibMmcT1joUNqEeURZnQZmm97s1SW8YGGkoOrhUNhs=
Subject key identifier:   7E:59:53:B7:8E:04:70:DC:27:6F:4A:26:60:4E:B9:EF:D4:7F:AA:D1
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584F43DD37CB79D35FBF12F2BE60
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/7488a149-b581-31b5-9810-d2af5c92b047.roa
Signing time:             Wed 23 Sep 2026 01:00:12 +0000
ROA not before:           Wed 23 Sep 2026 01:00:12 +0000
ROA not after:            Tue 22 Dec 2026 02:00:12 +0000
asID:                     397209
IP address blocks:        192.42.93.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 30 Sep 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:43:dd:37:cb:79:d3:5f:bf:12:f2:be:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Sep 23 01:00:12 2026 GMT
            Not After : Dec 22 02:00:12 2026 GMT
        Subject: CN=14e7ecc7-d08b-49d0-ba13-a88c8947fd13
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:f3:93:02:4d:3f:dd:3a:e7:95:5c:f1:74:80:
                    2a:ac:11:dc:76:c8:1d:1b:4e:cf:19:c8:cd:00:84:
                    24:e2:c5:5f:a7:4c:44:70:4a:af:3b:eb:9f:90:48:
                    ab:e7:e5:2b:38:27:55:be:c9:72:cb:50:14:f8:18:
                    b6:74:f6:c9:98:a7:0c:fe:75:0e:86:6f:27:c0:da:
                    77:29:58:98:88:a8:17:9e:bb:aa:83:f6:65:79:d4:
                    c4:52:89:20:32:f0:97:04:08:f2:22:da:93:b6:e0:
                    1a:a3:f9:ca:61:06:33:ce:d6:19:e6:99:57:be:5e:
                    86:7c:f3:ec:90:6b:75:c8:90:7c:af:3d:1d:1f:f5:
                    c5:19:83:1d:3d:d1:17:21:79:da:7e:f5:39:0c:a9:
                    da:fb:69:2c:f8:7d:5c:78:13:15:93:fb:78:fc:58:
                    ac:99:c6:5d:63:98:d5:7d:ee:4b:ba:ff:96:1c:5d:
                    0a:85:9a:2e:4f:b6:f1:2c:47:0a:26:c5:b0:f2:be:
                    14:27:f6:e6:d9:c4:21:bc:79:d0:8f:4d:22:24:a8:
                    18:f1:b3:ff:49:12:e9:5a:b1:7d:43:e2:e2:14:e4:
                    f0:b3:9d:4a:c1:08:fc:53:ff:1f:e3:7c:6d:73:c3:
                    1b:0f:58:29:e4:21:1a:1a:65:7b:e2:1b:b5:fd:a9:
                    d4:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7E:59:53:B7:8E:04:70:DC:27:6F:4A:26:60:4E:B9:EF:D4:7F:AA:D1
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/7488a149-b581-31b5-9810-d2af5c92b047.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.42.93.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         75:56:20:8d:d1:2f:00:74:e1:ac:69:83:d0:b9:7a:be:31:3f:
         7a:a4:f7:58:04:5e:bf:da:6c:5d:48:56:71:88:53:ba:91:45:
         93:cc:42:27:9b:87:e4:93:67:d3:c8:52:7e:ed:1d:4d:4f:12:
         7f:98:bd:18:33:80:b7:ea:08:f4:f0:1c:1c:ed:62:83:bc:9e:
         d8:42:32:09:6d:86:a4:77:e7:55:cd:df:a2:4c:1e:d3:2b:6b:
         86:c1:04:f9:1a:49:84:3b:0e:e7:14:33:ec:9a:3f:7e:93:5d:
         41:37:ae:0f:c6:04:93:a2:6d:30:13:14:08:b2:71:c0:4b:eb:
         3b:3e:34:25:f2:85:6c:15:9f:df:ea:d8:4f:37:c7:69:65:20:
         37:6f:1b:ab:69:a5:56:83:5f:33:ec:4c:e4:d8:66:cb:ff:ba:
         be:c1:47:2a:02:42:35:21:89:cf:84:c5:a5:ba:05:e2:fa:3e:
         a5:68:22:da:2a:18:64:85:eb:09:be:55:af:2a:48:76:38:c4:
         ab:06:65:61:74:29:55:69:36:99:7b:b4:96:50:35:00:7a:af:
         d1:1b:ad:a8:e6:75:f8:52:eb:21:84:2a:7e:bc:61:0a:27:b7:
         16:9b:e9:a4:20:93:88:a0:87:95:80:32:b0:8f:9b:4a:aa:63:
         a0:a7:7f:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 28 21:12:37 2026 by rpki-client