Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/adbbfa1b-b92c-37cd-80ee-d44229baa65f.roa
File:                     adbbfa1b-b92c-37cd-80ee-d44229baa65f.roa (raw, json)
Hash identifier:          5xb+pf5ywCbP03uNgOJxna3ZDy9LrqlAO/JDOz/7apI=
Subject key identifier:   2F:23:5B:BC:1B:21:F2:B8:79:B0:CA:F7:1A:03:0B:F7:39:91:D9:66
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584F4988A1F8C5F13A9FB929B400
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/adbbfa1b-b92c-37cd-80ee-d44229baa65f.roa
Signing time:             Fri 25 Sep 2026 01:00:12 +0000
ROA not before:           Fri 25 Sep 2026 01:00:12 +0000
ROA not after:            Thu 24 Dec 2026 02:00:12 +0000
asID:                     396591
IP address blocks:        192.12.94.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 28 Sep 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:49:88:a1:f8:c5:f1:3a:9f:b9:29:b4:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Sep 25 01:00:12 2026 GMT
            Not After : Dec 24 02:00:12 2026 GMT
        Subject: CN=ac83e966-1868-43ce-ac35-b9e0c344bd41
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e8:df:76:54:8a:64:85:ae:3b:bc:0a:5b:38:5c:
                    c7:9a:6d:95:c0:9f:db:d0:1a:94:bc:cb:71:25:88:
                    dc:5a:43:0b:5d:e5:97:9a:f2:71:8a:ab:82:66:f8:
                    24:b5:66:62:3c:94:61:69:a2:5e:e4:79:ed:59:10:
                    42:fe:eb:10:ac:a3:ee:84:6f:96:7a:a9:56:e0:ed:
                    28:d9:e3:c1:32:0d:4b:50:c3:aa:e1:86:2c:42:85:
                    da:8e:95:e8:98:fd:1a:ce:ce:e8:db:11:c9:e9:f1:
                    8c:d4:5a:1d:77:87:e5:8a:d5:ff:6d:c1:f6:1f:cb:
                    bc:91:a8:f4:44:1a:fa:1c:22:ff:a1:e8:b7:3c:fd:
                    84:af:ee:8f:0c:f5:89:5b:77:84:bd:81:f3:8d:69:
                    77:63:4f:65:e1:d7:2a:bd:22:c8:49:e7:3a:df:86:
                    2c:f4:5c:c7:9d:00:2f:10:36:0d:24:a7:57:44:23:
                    f5:38:c7:3d:37:2d:36:2d:5d:53:2e:a6:c2:52:49:
                    6d:5f:31:85:ad:aa:b6:02:d3:ba:10:a9:60:dc:04:
                    1c:e0:30:45:73:f1:a3:79:a0:8c:f7:5f:e1:be:d7:
                    81:e8:9c:76:a6:69:b3:16:70:41:0f:92:45:d5:49:
                    c2:6f:0e:52:dd:be:fb:ac:b0:15:7f:c6:6f:04:62:
                    33:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2F:23:5B:BC:1B:21:F2:B8:79:B0:CA:F7:1A:03:0B:F7:39:91:D9:66
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/adbbfa1b-b92c-37cd-80ee-d44229baa65f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.12.94.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         06:6c:e5:2e:5f:94:47:41:a6:97:c2:9f:61:8f:f9:d7:4a:7d:
         38:9c:83:bd:05:e6:19:b7:ea:a1:ee:fe:0c:02:e9:75:94:a7:
         5e:2b:81:3b:0d:65:aa:b1:0d:52:35:85:02:fd:72:3d:b3:9a:
         f7:49:a2:fd:39:6d:13:75:0a:c6:98:78:62:74:f7:ba:9c:81:
         a1:f3:b9:b4:ff:8c:a4:6a:3a:c1:f3:fb:03:15:01:d6:14:77:
         d6:ce:d1:c2:46:28:3b:74:1e:1e:84:3e:15:68:0a:42:ea:6b:
         93:ec:b9:d5:b3:38:cd:62:5d:aa:37:d6:39:5a:0c:07:9c:13:
         c5:d9:b2:85:1d:7b:47:69:5d:0b:a7:c1:eb:bb:c5:cc:d7:4d:
         48:02:a7:ae:83:e8:a0:69:a6:a5:0f:d4:a2:c3:4d:b2:5d:91:
         2f:4b:23:a3:fa:71:3a:07:51:ac:44:54:38:7d:2b:28:70:be:
         78:6f:0d:c7:9c:8c:df:5a:3a:62:b8:99:54:c1:8f:5e:21:88:
         9b:e5:01:45:0b:b4:ed:4b:93:21:b4:5e:8d:c0:fc:30:b4:e9:
         04:54:e2:74:2c:23:7a:df:35:34:6c:53:b8:05:6b:ea:81:48:
         46:0f:49:5d:ea:eb:d6:db:33:df:17:69:ba:f1:8b:b2:81:c5:
         1b:a1:57:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 26 02:01:07 2026 by rpki-client