Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/7a41e6e0-9d20-33ff-8932-9d45afe7a146.roa
File:                     7a41e6e0-9d20-33ff-8932-9d45afe7a146.roa (raw, json)
Hash identifier:          WWu11nVVWm4gdQqLXYo9lxXskq8fV2tAxA5F/zkubCk=
Subject key identifier:   9E:CD:F6:6C:76:EF:EA:0E:59:B2:25:C2:7D:86:4A:01:D1:2E:3F:C6
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584F4972FAD819F8D7F532995080
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/7a41e6e0-9d20-33ff-8932-9d45afe7a146.roa
Signing time:             Fri 25 Sep 2026 01:00:12 +0000
ROA not before:           Fri 25 Sep 2026 01:00:12 +0000
ROA not after:            Thu 24 Dec 2026 02:00:12 +0000
asID:                     397193
IP address blocks:        192.31.80.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 02 Oct 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:49:72:fa:d8:19:f8:d7:f5:32:99:50:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Sep 25 01:00:12 2026 GMT
            Not After : Dec 24 02:00:12 2026 GMT
        Subject: CN=58530fbf-2d0d-402e-af3c-ee2c061739f2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:55:72:65:71:4a:2d:0a:69:0b:a5:73:51:64:
                    5a:e9:54:f6:55:2e:46:e8:18:42:26:e3:ff:fc:68:
                    c0:2f:12:d1:15:72:8e:cb:55:bd:54:e5:83:c6:45:
                    f2:33:d9:69:92:0f:b1:d5:65:0b:43:45:59:cb:b9:
                    70:69:20:39:57:a7:df:70:6f:16:4a:46:07:d8:c8:
                    2a:3f:f1:69:07:12:b7:2e:d2:25:33:b8:71:44:e5:
                    1a:3c:bc:9f:c8:bf:1d:55:e1:3e:05:46:b5:5d:22:
                    c0:3b:75:b7:c1:a1:90:fd:6a:5d:51:a4:72:05:f5:
                    82:03:35:ae:19:db:66:88:99:5d:bd:bd:c1:00:98:
                    83:56:44:28:0e:df:0b:43:c5:23:26:32:12:f3:fb:
                    dc:a8:f2:e3:b9:59:a3:3d:de:91:16:5b:f4:c4:ff:
                    46:8a:7b:1f:cf:30:89:f4:dd:cb:16:97:6b:6e:57:
                    60:3f:9d:7a:14:d3:10:1a:81:af:c4:a7:e8:c7:51:
                    2e:6e:c4:03:ab:9b:24:3b:f1:52:b1:6f:fc:b8:1e:
                    be:96:56:f6:99:91:25:cc:07:f9:08:b6:1c:82:70:
                    cc:f9:62:12:c5:ab:0e:c8:2c:48:67:02:be:ee:a1:
                    24:b6:02:ca:64:7f:62:28:e3:2c:d7:50:e4:5f:0d:
                    6a:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9E:CD:F6:6C:76:EF:EA:0E:59:B2:25:C2:7D:86:4A:01:D1:2E:3F:C6
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/7a41e6e0-9d20-33ff-8932-9d45afe7a146.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.31.80.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         37:97:c6:8a:37:74:10:49:e1:03:0e:91:d2:99:4a:ed:ac:c8:
         fb:9f:d4:42:41:78:03:09:8c:ec:58:f9:15:16:54:f0:b1:fb:
         07:b2:06:a1:ee:a3:6a:57:25:02:0c:bb:f5:57:f5:11:f9:79:
         e6:ff:50:65:53:bb:94:64:0f:b9:2b:31:43:e9:f4:ae:a9:3c:
         78:25:c0:63:1b:76:f9:f3:2d:ea:64:ad:d5:98:1d:5c:5e:1f:
         24:1c:82:db:1a:4f:01:8d:59:b7:88:91:bb:6e:7f:e2:0d:6a:
         41:8f:c2:99:70:bb:d5:46:9f:7f:5f:58:71:87:80:98:55:66:
         af:d1:93:76:8c:14:4f:d8:15:ec:65:2b:ce:2d:dd:52:33:c5:
         97:c5:88:72:b1:0c:ee:12:70:53:32:c6:60:b7:cc:af:08:73:
         64:34:13:5c:5e:f2:45:68:df:f0:92:ee:aa:aa:41:3e:8d:92:
         22:0b:b3:8f:4d:97:33:ae:1b:14:64:95:20:7b:37:c8:21:45:
         ae:2c:f9:c9:6a:1c:d3:fd:6d:b3:e3:c5:a7:56:85:b3:04:36:
         fd:69:ea:ff:4c:d9:66:64:c9:f0:57:70:4e:81:81:e1:24:84:
         00:cc:68:6a:10:5d:d1:ac:30:25:8c:6a:7d:45:5e:fa:01:db:
         d6:24:d7:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 30 19:43:11 2026 by rpki-client