Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/ba0c846e-9835-3f0c-9f26-b399213d18c8.roa
File:                     ba0c846e-9835-3f0c-9f26-b399213d18c8.roa (raw, json)
Hash identifier:          193mpw5Dqk8YkHqGfFJZOyl5A96B7NZePVvHMNXcaVU=
Subject key identifier:   CC:F6:2A:DA:95:35:84:84:40:02:65:A9:EE:18:00:51:7C:74:E4:58
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584F1E2CF275E4B1D8004E883240
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/ba0c846e-9835-3f0c-9f26-b399213d18c8.roa
Signing time:             Wed 09 Sep 2026 13:00:11 +0000
ROA not before:           Wed 09 Sep 2026 13:00:11 +0000
ROA not after:            Tue 08 Dec 2026 14:00:11 +0000
asID:                     10515
IP address blocks:        192.54.112.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 26 Sep 2026 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:1e:2c:f2:75:e4:b1:d8:00:4e:88:32:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Sep  9 13:00:11 2026 GMT
            Not After : Dec  8 14:00:11 2026 GMT
        Subject: CN=14223dca-f1a6-4de7-9451-5e9454226d03
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:86:d3:cd:93:67:ea:ca:4c:98:ee:da:47:01:c0:
                    2e:9c:f4:3f:96:0b:c2:36:fb:cc:0d:a8:6e:f7:da:
                    55:7a:f3:ad:8e:17:a6:e8:5e:95:b6:b7:96:5e:bb:
                    3a:45:e9:a7:16:ae:7f:64:f1:a7:0a:4f:52:89:c2:
                    c7:1c:82:2f:64:4d:ee:98:d9:eb:94:ad:79:d6:82:
                    e0:2e:73:8e:4f:ca:cd:16:91:7a:6b:2f:94:f1:90:
                    f1:e5:f1:3d:f5:14:76:fe:29:6c:41:13:82:68:69:
                    9c:0a:65:5f:ad:b6:5b:63:88:4c:ba:e9:0b:5a:e9:
                    e1:3a:e8:e7:6e:83:4b:a9:47:69:a3:0f:70:53:be:
                    e9:34:73:d3:0d:28:46:23:90:90:59:40:96:3f:90:
                    e4:12:48:6a:23:69:60:2c:d4:fc:2b:5e:f1:0c:47:
                    c4:64:21:29:90:e9:51:d4:ea:7a:04:38:be:26:19:
                    0a:f5:f2:e0:f4:1c:8f:2b:a6:62:fa:fd:f2:6f:b1:
                    d3:b9:91:fb:93:d7:54:90:18:82:8d:c5:4f:dd:0d:
                    0a:cb:fc:bf:c9:b3:e9:49:89:2d:01:af:3c:f8:5e:
                    1c:f7:0d:22:79:19:27:cb:94:28:4a:71:69:2d:6c:
                    bb:66:f0:52:40:7a:ab:32:5f:fe:96:af:e3:19:ec:
                    2d:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CC:F6:2A:DA:95:35:84:84:40:02:65:A9:EE:18:00:51:7C:74:E4:58
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/ba0c846e-9835-3f0c-9f26-b399213d18c8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.54.112.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         57:cc:88:f6:5f:0e:b8:59:ea:c7:13:d6:f1:50:a2:b0:aa:a1:
         01:dd:22:e7:cd:6a:fa:c9:30:82:d9:bd:d2:96:3e:df:89:76:
         c3:c1:bb:2c:5b:4e:1b:8c:7f:c6:78:03:54:cc:1a:54:8a:96:
         9e:d4:f1:67:68:b4:cf:bd:31:c3:52:c6:b0:3e:55:ed:3d:d3:
         5a:e3:f3:47:5b:cf:73:b9:9d:e1:7d:2a:d3:51:8c:38:2b:19:
         1d:fe:41:35:9e:40:24:ca:e7:4b:ae:5e:fa:68:b7:b9:d4:25:
         9d:d2:f9:b3:66:00:9b:cf:0e:67:3b:45:fd:62:dc:b1:4e:6a:
         f1:9c:74:6a:d7:5d:8a:b8:0b:2a:a7:df:7b:ae:75:ef:8d:ea:
         49:e1:d1:23:d1:49:34:2e:33:32:1e:61:75:41:31:60:75:90:
         9b:35:04:81:a0:1f:d3:8d:73:d9:34:93:4c:8e:76:a1:9f:6c:
         52:6b:7a:a5:80:e1:7b:04:6b:11:a2:96:5f:83:57:94:0b:c1:
         ca:15:36:94:e3:3c:0f:cd:31:10:c8:58:d4:d8:5a:92:9e:39:
         69:e6:54:73:da:55:df:74:7e:be:74:7b:b9:1f:28:5f:c4:06:
         c6:e1:bb:e2:70:91:64:29:ed:6d:a7:83:b5:8e:4d:c6:b0:72:
         b1:6f:ec:bb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 25 04:25:37 2026 by rpki-client