Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/ccb923b4-1757-34d3-9ea5-c80ca131b701.roa
File:                     ccb923b4-1757-34d3-9ea5-c80ca131b701.roa (raw, json)
Hash identifier:          xdTuKo4V5Vrv/OIUR6qkNBzUKgZRzBdTUV56CxjyaiU=
Subject key identifier:   78:77:6E:1E:9F:74:FD:21:1F:08:EF:65:4B:97:D3:ED:A8:92:C3:3B
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584F3E48006D7E60E05295204560
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/ccb923b4-1757-34d3-9ea5-c80ca131b701.roa
Signing time:             Mon 21 Sep 2026 01:00:11 +0000
ROA not before:           Mon 21 Sep 2026 01:00:11 +0000
ROA not after:            Sun 20 Dec 2026 02:00:11 +0000
asID:                     396545
IP address blocks:        192.5.6.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 28 Sep 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:3e:48:00:6d:7e:60:e0:52:95:20:45:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Sep 21 01:00:11 2026 GMT
            Not After : Dec 20 02:00:11 2026 GMT
        Subject: CN=f3ee9b70-0cce-4ad3-830f-b0186029c2a1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:89:18:ba:11:4d:c8:c0:fd:8b:88:2b:88:74:10:
                    da:bf:4f:0e:99:cd:d5:46:e2:9f:84:cd:6f:bb:95:
                    cf:93:d0:02:cc:37:d2:e5:39:f9:ed:32:47:4b:7d:
                    6e:2d:e4:3a:a2:fc:42:c3:ab:be:7d:a6:be:3f:72:
                    dd:29:ba:e1:87:5d:35:eb:53:9e:5e:b2:23:e8:91:
                    21:81:dd:7f:a4:30:3c:cf:94:70:9f:e6:8c:d6:63:
                    b3:47:f0:e6:40:a0:02:51:c6:fc:ad:c9:d9:69:fb:
                    96:7d:76:46:57:35:31:c5:4c:9f:e0:e1:61:ff:f0:
                    7d:a4:48:7e:83:59:18:a7:7a:28:2f:a8:dc:6c:61:
                    f7:2e:94:2a:e7:d1:ca:62:be:df:01:d0:21:58:6a:
                    a4:d2:58:59:e5:16:c0:af:97:09:4e:99:e1:f4:5c:
                    d5:81:73:53:b8:4e:46:e1:a8:57:07:d5:c9:a4:0a:
                    48:6b:2b:50:e5:58:79:6b:de:0a:f9:b6:9c:cb:bf:
                    63:5e:27:2d:8e:43:de:5e:fb:58:27:d4:02:58:ff:
                    e4:da:d6:e5:e1:9b:ef:c2:6d:88:84:a4:e5:95:87:
                    62:b4:ea:2d:49:e2:a3:52:67:3f:dc:08:4f:1a:e6:
                    66:4a:6f:ef:0f:d9:76:99:40:56:13:31:c0:da:bf:
                    db:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                78:77:6E:1E:9F:74:FD:21:1F:08:EF:65:4B:97:D3:ED:A8:92:C3:3B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/ccb923b4-1757-34d3-9ea5-c80ca131b701.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.5.6.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         8b:ff:2b:3e:f4:a4:04:54:60:af:40:ce:a6:59:91:e7:9d:9b:
         b0:6e:71:99:f8:a1:a7:7c:13:f0:bb:e5:a8:35:97:c6:34:61:
         31:ee:be:9d:54:ab:9a:96:c2:f7:aa:36:fb:36:36:27:1e:8d:
         54:d4:d2:57:c0:54:99:d7:4d:d1:7c:db:a9:ca:1e:09:10:68:
         f1:61:60:d1:33:66:bb:6c:a9:e7:84:71:d9:03:95:88:3d:ea:
         df:2f:e6:d1:03:65:c0:11:21:30:cc:15:6c:e4:c0:ef:f7:35:
         88:19:70:74:07:a6:75:7f:72:e6:91:28:ab:37:08:52:6f:10:
         b4:5e:82:d6:90:fb:6d:59:66:d0:3b:ef:89:06:15:68:d6:e3:
         af:31:3e:e0:24:07:3e:53:aa:7a:7f:11:c2:b8:a3:11:f6:bb:
         71:81:51:7e:0a:52:9b:57:9b:16:79:bd:2b:a8:41:2f:d6:8d:
         40:31:24:ef:74:c5:a5:a7:f6:8e:b4:08:80:51:cf:9f:14:45:
         b1:ca:a5:71:3c:b5:a1:b8:7d:88:d2:9c:0a:10:24:4c:4e:91:
         c1:90:f5:5a:6e:92:ef:81:f3:dc:da:3e:a7:05:82:b3:16:6b:
         21:af:4b:aa:b0:d6:30:7a:96:f9:1e:69:e0:ff:7e:91:39:8f:
         76:79:dd:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 26 14:15:21 2026 by rpki-client