Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/db9e8940-05a2-3a78-861c-a14477a7bdca.roa
File:                     db9e8940-05a2-3a78-861c-a14477a7bdca.roa (raw, json)
Hash identifier:          OV7JfAGiUuxWa7zzeD3Vu+VoFRxDF5kzhzfP28XxtkA=
Subject key identifier:   12:C3:3E:B4:C6:66:21:2D:8F:03:60:2A:15:4F:B1:9A:95:0D:77:31
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584EF2E761857B71048F55E33400
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/db9e8940-05a2-3a78-861c-a14477a7bdca.roa
Signing time:             Tue 25 Aug 2026 01:00:12 +0000
ROA not before:           Tue 25 Aug 2026 01:00:12 +0000
ROA not after:            Mon 23 Nov 2026 02:00:12 +0000
asID:                     36620
IP address blocks:        192.42.175.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 26 Sep 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:f2:e7:61:85:7b:71:04:8f:55:e3:34:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Aug 25 01:00:12 2026 GMT
            Not After : Nov 23 02:00:12 2026 GMT
        Subject: CN=78ef18ef-6653-40a6-9665-17c466e1a584
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:d7:c8:72:81:30:f9:21:71:1c:af:82:3d:5d:
                    36:cb:f2:65:64:57:03:8f:aa:a8:c4:66:33:8f:f6:
                    86:79:78:23:e1:5b:9c:86:23:d5:33:8c:6a:f6:66:
                    9f:83:00:0f:c1:5b:63:73:48:46:a9:c5:da:c8:35:
                    61:4c:28:d6:8f:3c:c4:a0:55:3b:e6:fc:48:16:82:
                    59:4e:5a:88:52:6d:61:66:f6:f1:75:ef:fd:af:c7:
                    e4:4c:dc:22:37:ba:d1:d7:09:36:33:68:3a:50:3f:
                    72:ec:54:b6:3f:d2:bd:33:0c:cd:f4:fd:55:ab:3d:
                    cd:ca:55:50:81:1b:05:47:9c:76:eb:ce:2f:b8:cc:
                    d8:70:a7:95:f3:15:94:83:21:f2:0a:29:c8:f2:6e:
                    14:53:69:6b:39:11:0d:37:71:2a:0b:6d:8b:54:fa:
                    c0:5e:56:b0:50:74:76:73:b8:9c:e6:02:e4:5c:75:
                    87:7e:aa:1e:7e:da:09:66:71:84:a5:55:be:e9:ac:
                    a7:e8:8d:b8:7f:ca:cf:89:15:9a:48:6e:fa:9e:56:
                    38:b9:ee:1f:53:d0:33:c5:93:d9:ef:7c:8d:d3:9e:
                    30:6a:ee:19:3d:54:94:e6:a1:f2:23:08:8b:ea:bf:
                    35:84:ea:1f:4c:7c:51:09:01:f4:2c:fd:50:2a:e0:
                    3a:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                12:C3:3E:B4:C6:66:21:2D:8F:03:60:2A:15:4F:B1:9A:95:0D:77:31
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/db9e8940-05a2-3a78-861c-a14477a7bdca.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.42.175.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2c:c4:ae:e6:2a:83:ad:f1:db:7e:66:44:c7:44:b1:06:ed:e3:
         dd:72:61:c6:94:87:b7:ad:be:20:99:72:52:3a:36:3a:d0:33:
         8c:dd:48:fe:35:1a:b4:23:e0:bc:64:6d:4b:29:8c:21:34:c5:
         a4:7e:d0:09:8e:b4:14:52:07:2a:9a:c4:87:fd:de:84:d5:d2:
         aa:9d:2e:11:a8:c6:93:e1:d0:ba:60:6a:8c:8e:6d:29:fe:6a:
         32:5c:af:50:0c:ca:33:a9:af:e8:58:c8:8d:5f:c0:f8:9f:86:
         10:c1:f5:93:0d:e9:b3:53:72:15:1e:77:ec:c5:0f:8f:c4:d1:
         8a:1a:62:9b:fc:51:7f:c5:74:3a:c3:27:a5:ae:45:fe:87:e3:
         36:16:8b:64:c1:17:a6:d1:c0:fb:d8:8e:6d:cc:23:98:0a:08:
         25:1f:57:8d:d4:d4:54:0f:29:6b:2c:44:44:2f:3e:5e:78:c7:
         48:ff:8a:a7:ce:58:76:20:75:0e:1e:e2:97:27:3e:fe:ef:d8:
         b2:58:0a:c8:78:4d:8b:36:87:ec:1d:1e:82:c7:9e:05:eb:87:
         1f:7f:1b:0f:2e:1b:6e:b1:ce:d5:47:e5:38:cb:70:bf:25:52:
         ae:27:7b:04:00:f8:de:5f:53:85:96:b1:32:c3:7c:1e:a0:b6:
         58:f1:84:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 09:19:16 2026 by rpki-client