Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/9acda143-0ea5-379d-b100-696968ca74e8.roa
File:                     9acda143-0ea5-379d-b100-696968ca74e8.roa (raw, json)
Hash identifier:          V4YD6yavfa4mWUGCUucXD4WKTAmHWxKVLJPrQUMb6c0=
Subject key identifier:   55:CA:20:AC:0A:43:62:63:99:5C:4D:FE:A4:8B:96:BB:8C:20:46:1A
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584E7BCA29CF35B76A940D0F7400
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/9acda143-0ea5-379d-b100-696968ca74e8.roa
Signing time:             Mon 13 Jul 2026 09:00:12 +0000
ROA not before:           Mon 13 Jul 2026 09:00:12 +0000
ROA not after:            Sun 11 Oct 2026 09:00:12 +0000
asID:                     397208
IP address blocks:        192.54.112.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 26 Jul 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:7b:ca:29:cf:35:b7:6a:94:0d:0f:74:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Jul 13 09:00:12 2026 GMT
            Not After : Oct 11 09:00:12 2026 GMT
        Subject: CN=285214bc-f8a8-471f-9805-5e35fab67862
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:ef:6b:5b:3e:00:8f:b6:f3:eb:ce:da:42:c5:
                    d2:60:cf:09:8f:67:b4:4f:0d:36:5f:eb:be:3b:8b:
                    23:4e:a8:2c:d4:1c:bd:6c:f0:8e:76:8d:07:bd:a1:
                    6b:fb:9a:4e:7a:84:6e:53:b1:39:ec:a2:cf:3f:49:
                    9d:f1:dd:e5:2a:af:da:99:b4:89:7a:41:59:b1:be:
                    a3:16:70:de:20:c7:6c:f8:99:e0:6c:61:30:83:9b:
                    3a:87:3b:75:48:d9:b1:f9:c9:30:5c:73:f6:04:02:
                    d5:1f:3c:95:b8:f8:03:85:5e:14:f9:3c:7f:bc:ca:
                    aa:53:a5:63:12:5e:79:69:13:e5:98:ac:a7:88:04:
                    21:a1:85:f0:21:d5:0d:fd:8d:7e:4d:9a:ad:9d:7e:
                    bd:7e:dc:87:87:89:73:31:8a:be:f3:86:c6:59:68:
                    34:a1:21:83:79:3b:33:38:f8:7b:ae:38:e6:c0:d3:
                    5b:11:a2:e4:76:21:39:f1:96:9f:78:10:d6:3e:42:
                    e5:c1:16:18:d7:96:9d:48:99:50:32:2a:92:2f:66:
                    de:cc:17:0b:8f:58:07:ed:3f:20:b6:58:09:7a:5c:
                    66:56:59:de:5f:96:03:a9:6d:85:ea:38:f1:b9:ab:
                    0c:53:5b:e5:7b:73:4d:80:47:a5:6a:01:67:19:16:
                    6f:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                55:CA:20:AC:0A:43:62:63:99:5C:4D:FE:A4:8B:96:BB:8C:20:46:1A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/9acda143-0ea5-379d-b100-696968ca74e8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.54.112.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         80:a4:10:66:54:23:43:da:3d:96:51:80:c3:87:c6:1a:85:0a:
         a7:49:3d:4b:33:66:c4:dc:07:a2:51:0e:57:7a:1d:ca:85:02:
         de:45:59:bb:8b:73:d7:2b:0d:4d:89:45:8b:38:c0:fe:e5:0f:
         be:69:c8:d8:0e:a0:a8:6d:ec:a9:7d:d6:1d:69:ef:d4:c2:1d:
         e3:d4:6f:ea:03:ab:bf:ad:89:05:f4:87:d7:56:4d:e0:4d:4c:
         86:73:f0:d2:90:07:46:26:d4:e1:6a:75:6b:32:84:ae:5d:c5:
         56:ec:dc:e0:87:0f:e0:c0:66:9b:79:24:2d:07:68:e8:cb:84:
         ae:86:0d:75:b0:7a:4e:d9:a1:0e:65:a4:82:51:22:57:6d:f7:
         27:9a:ee:da:ae:08:0e:1a:f9:43:af:88:ed:2e:1f:81:db:33:
         94:0d:de:00:ff:d4:d2:ea:0d:b3:e4:34:ff:2a:b3:7e:75:28:
         e7:89:53:b0:85:c6:09:b5:7b:42:ec:0f:e3:10:d9:20:97:de:
         50:f7:79:02:6a:cb:26:62:a7:99:3e:58:87:ae:e5:8f:da:63:
         fd:88:ba:06:6e:31:45:03:1a:ad:60:bb:84:68:0a:b3:39:c9:
         34:21:0e:36:b2:5c:09:d8:bc:6d:0c:d3:25:54:b2:f4:df:04:
         84:66:be:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 18:40:56 2026 by rpki-client