Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/b1fa1f64-13dd-3ef5-b5eb-65d72414022f.roa
File:                     b1fa1f64-13dd-3ef5-b5eb-65d72414022f.roa (raw, json)
Hash identifier:          MmyhUkqe0/dMPeFnE6NM7HE3TFiB/gNatIbXn0bXpGA=
Subject key identifier:   EC:54:83:D5:44:AA:7C:C7:A3:8D:C2:B4:E5:82:F9:26:43:48:DE:78
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584F1E2CF2308354620CDD43A600
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/b1fa1f64-13dd-3ef5-b5eb-65d72414022f.roa
Signing time:             Wed 09 Sep 2026 13:00:11 +0000
ROA not before:           Wed 09 Sep 2026 13:00:11 +0000
ROA not after:            Tue 08 Dec 2026 14:00:11 +0000
asID:                     396553
IP address blocks:        192.54.112.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 26 Sep 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:1e:2c:f2:30:83:54:62:0c:dd:43:a6:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Sep  9 13:00:11 2026 GMT
            Not After : Dec  8 14:00:11 2026 GMT
        Subject: CN=2cdabb90-ba40-4ddc-b385-e6b6026c8959
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:b2:c3:25:6d:15:72:a5:89:63:76:fd:6d:52:
                    cc:61:ea:84:28:d1:ab:4f:e1:3f:4b:95:8a:f7:bf:
                    e7:9c:33:17:ba:f7:1f:2c:30:cd:25:bf:cb:44:94:
                    94:89:aa:23:c2:aa:04:df:71:eb:88:2e:48:46:32:
                    ec:c6:b2:ad:05:7c:c5:a3:3a:8e:32:28:b5:d1:c4:
                    92:b2:8c:f1:e7:f5:05:f6:af:a9:dd:27:27:a8:0f:
                    40:2d:39:c5:95:8d:98:6a:6c:b5:14:a2:b6:f0:f2:
                    8d:91:01:b0:cd:cc:9c:7c:9f:db:89:d0:82:46:a8:
                    cd:48:f6:ce:41:43:41:f5:09:5f:35:a8:25:2c:eb:
                    84:74:ec:c2:1f:d0:69:9b:41:95:e4:77:c3:63:57:
                    7a:0c:94:38:ac:25:7b:77:eb:3e:ef:49:77:f0:9b:
                    db:cc:3a:c0:2f:c5:f2:b4:83:3a:79:3e:2b:9d:85:
                    fe:a8:24:dd:79:c5:40:54:b7:a5:0a:59:e2:3e:a4:
                    3c:d7:76:6b:0a:10:78:fc:c5:2c:0c:d0:56:30:c4:
                    16:a9:08:70:65:f7:5a:79:c0:7c:24:30:df:a1:a7:
                    c9:0f:71:c2:ed:4e:b2:56:d2:55:fe:7c:46:37:2e:
                    28:4d:93:90:36:f4:ca:cc:2e:b6:a7:18:6c:cd:d1:
                    b5:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EC:54:83:D5:44:AA:7C:C7:A3:8D:C2:B4:E5:82:F9:26:43:48:DE:78
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/b1fa1f64-13dd-3ef5-b5eb-65d72414022f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.54.112.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         15:31:3e:df:73:05:cf:31:4d:e8:18:ae:7b:92:67:5f:e3:58:
         23:2d:6a:ff:b8:49:de:e4:15:78:d9:5b:6c:c3:18:ce:9b:81:
         d4:f4:0f:a8:28:eb:3b:43:1d:24:9b:52:0e:f9:10:50:0f:c7:
         a8:2a:42:36:94:36:c1:78:05:a3:bf:7b:67:23:32:15:0b:c6:
         93:10:e7:ae:ce:a4:4b:c3:1f:64:f5:cd:61:03:d1:74:e8:ca:
         0b:1b:ad:c0:1f:0c:8a:55:59:b8:d5:06:af:2c:66:35:65:8b:
         7f:17:41:fd:28:5b:a0:e3:44:ab:26:44:f0:fd:6a:1a:4a:f4:
         91:1f:cf:c1:aa:ef:f9:67:52:43:b7:9b:79:18:d3:24:da:e7:
         f1:0e:fe:7e:0b:df:fd:d7:75:f7:b2:ac:67:ce:b3:69:e3:b7:
         dd:7e:8c:40:e1:9c:7a:3d:e1:91:a3:12:e6:e4:dd:a6:9e:6e:
         f6:c5:f3:eb:b2:e6:60:f5:65:08:e2:d5:f4:36:c4:91:39:08:
         8f:54:8b:5a:48:65:d8:c7:4c:59:f0:01:2e:15:4a:40:7e:0d:
         ee:cc:2a:ae:b5:bb:61:15:00:04:aa:3b:b6:84:3f:2d:1f:0b:
         34:4e:cc:2f:9b:f1:69:49:56:b1:2a:60:98:99:ce:a2:ff:83:
         1a:f0:81:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 23 23:57:50 2026 by rpki-client