Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/a13d330f-1fbc-3149-85b8-bb8ab8dc8172.roa
File:                     a13d330f-1fbc-3149-85b8-bb8ab8dc8172.roa (raw, json)
Hash identifier:          IzCcSUXNs2hVlM+qqwgjhvTvVrCf/heqioJxMN7VL8w=
Subject key identifier:   C9:99:35:8C:FF:A9:8B:87:9A:B0:2D:E8:38:5E:74:98:44:C3:D2:29
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584F498C2868293EF600849F4900
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/a13d330f-1fbc-3149-85b8-bb8ab8dc8172.roa
Signing time:             Fri 25 Sep 2026 01:00:12 +0000
ROA not before:           Fri 25 Sep 2026 01:00:12 +0000
ROA not after:            Thu 24 Dec 2026 02:00:12 +0000
asID:                     396611
IP address blocks:        192.12.94.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 28 Sep 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:49:8c:28:68:29:3e:f6:00:84:9f:49:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Sep 25 01:00:12 2026 GMT
            Not After : Dec 24 02:00:12 2026 GMT
        Subject: CN=35d884e3-1083-4700-a519-f8174bed0103
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:5f:bf:14:52:7a:71:03:94:ea:2c:cc:5a:11:
                    11:b2:5a:42:de:45:7a:e6:ba:f0:36:f0:27:3f:a6:
                    ee:eb:7b:6a:89:3f:28:8b:61:5c:28:3c:af:d6:0a:
                    80:ed:1e:22:14:37:99:6c:d2:59:30:c6:4c:8c:50:
                    cb:b0:0b:00:9c:b0:92:1c:c0:2e:b7:54:9b:15:38:
                    5c:50:94:f3:b1:90:61:6c:16:b5:05:37:b3:05:88:
                    35:cd:e8:db:56:08:5d:f0:97:c4:8b:29:16:74:50:
                    bc:3f:f6:b0:4d:ca:7b:89:ce:0a:eb:7e:81:54:53:
                    6e:7e:cf:ff:53:27:ce:4d:9d:bf:17:d8:a4:bb:55:
                    d0:0e:1b:14:61:1e:1a:5b:a1:46:86:17:3a:db:a0:
                    a8:ac:03:15:fc:5c:b3:de:e6:19:b1:97:d3:ca:59:
                    21:0d:c2:12:0e:a5:61:44:c1:02:d5:98:58:45:e5:
                    00:10:bf:cc:bd:7d:b3:6b:e9:2d:5d:ee:65:e0:92:
                    64:78:92:f0:78:54:e6:90:84:55:f4:80:6b:c7:44:
                    8e:3c:08:fa:61:80:a7:d6:1e:9f:f9:26:70:f9:91:
                    88:b7:29:4a:c6:6a:09:6c:db:4b:f9:e6:0d:f2:1e:
                    e6:be:a1:9b:13:61:2a:ab:ef:e4:28:77:e7:fb:07:
                    57:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C9:99:35:8C:FF:A9:8B:87:9A:B0:2D:E8:38:5E:74:98:44:C3:D2:29
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/a13d330f-1fbc-3149-85b8-bb8ab8dc8172.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.12.94.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         79:06:6d:ea:2d:65:47:6c:64:f7:55:aa:e9:35:71:90:cc:eb:
         dd:b6:53:b8:6f:03:28:e6:e4:5d:86:c7:25:76:43:93:16:88:
         f3:37:ee:fe:83:40:7c:5a:83:8d:26:36:cf:a8:af:b3:96:c0:
         19:6d:79:d9:86:dd:0d:a5:4e:3e:26:7f:bb:a4:fa:97:da:d6:
         fc:a0:8f:4a:77:9e:64:99:47:bf:bd:c5:5a:6e:1e:8c:ce:de:
         30:ea:af:06:54:9e:6e:7b:53:be:16:b6:45:6e:c3:d5:b3:64:
         e2:f4:f2:84:f7:2e:f8:e5:73:ea:3b:9c:a9:ff:24:58:d2:63:
         23:f8:dd:c6:a8:e6:70:76:f5:a1:d2:03:9f:98:38:b5:4c:14:
         cf:55:cb:c9:4a:7d:dc:4b:22:73:63:74:e3:f2:72:a4:d1:3c:
         ac:c8:b3:bd:1c:43:87:99:dc:ac:05:3a:50:a1:7b:b0:ba:fe:
         2c:fe:c3:a2:94:e9:67:64:52:9c:dc:d8:13:08:b8:bb:ca:3a:
         04:db:c2:02:e6:26:ca:89:fc:9d:0c:38:9f:9d:b1:d2:e6:5c:
         b7:e2:c5:00:a1:7e:9f:4a:13:28:d8:f9:37:65:f7:ef:7d:58:
         20:25:28:90:cb:54:e9:42:a8:6a:d7:57:44:73:95:df:a8:dc:
         b0:70:4c:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 26 13:11:17 2026 by rpki-client