Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/e538524e-ee79-38eb-8f5c-2892e158cb2b.roa
File:                     e538524e-ee79-38eb-8f5c-2892e158cb2b.roa (raw, json)
Hash identifier:          JGpyOyku/pHqZtuz7BK0g8TJq+H8es4RbPHet32eQCQ=
Subject key identifier:   FC:3F:F0:76:B9:EA:69:0C:33:6E:74:A9:5C:C1:41:8D:59:0F:08:55
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584F093D0E00190D1ED829ADF480
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/e538524e-ee79-38eb-8f5c-2892e158cb2b.roa
Signing time:             Wed 02 Sep 2026 01:00:12 +0000
ROA not before:           Wed 02 Sep 2026 01:00:12 +0000
ROA not after:            Tue 01 Dec 2026 02:00:12 +0000
asID:                     396610
IP address blocks:        192.42.173.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 26 Sep 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:09:3d:0e:00:19:0d:1e:d8:29:ad:f4:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Sep  2 01:00:12 2026 GMT
            Not After : Dec  1 02:00:12 2026 GMT
        Subject: CN=b6319e87-7aed-446f-b870-e2d34aa90515
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:5b:3e:8c:23:e7:2f:d9:6f:3b:aa:7a:9d:40:
                    b4:e1:e6:a2:8e:b4:3f:66:b3:59:bc:ba:51:2a:eb:
                    16:d2:e6:b3:5f:13:11:45:9c:35:67:10:2b:06:1c:
                    b3:95:21:2f:b9:ad:f6:1e:a8:ed:ec:af:a2:18:27:
                    bf:69:a9:ff:ec:8a:15:db:9e:96:13:df:20:06:9a:
                    f0:f0:5f:08:9e:ad:4f:38:5c:d5:86:50:7c:ce:c0:
                    76:07:0b:b3:8e:35:46:ce:30:f0:c9:a5:27:5f:71:
                    0f:0f:7b:47:a3:99:02:d1:95:4c:f5:e9:b2:65:86:
                    22:ea:c8:90:58:47:4b:d1:18:ad:80:84:18:ee:07:
                    b6:40:e8:f4:f4:d0:07:a5:6d:5c:4e:9a:1a:1d:4b:
                    9d:ea:38:8a:83:44:4a:82:55:a8:fb:9b:69:5e:9c:
                    c5:1d:05:4e:d0:51:95:47:af:cb:f9:9e:16:d7:92:
                    65:f1:dd:85:06:4e:5d:d4:4e:54:ff:45:f7:62:fc:
                    8d:94:35:5e:e9:db:55:1d:0f:01:71:81:4c:3f:ff:
                    bf:79:45:31:a0:ea:59:b3:7d:cf:10:6c:81:78:85:
                    8f:7f:fc:51:94:2d:55:59:b9:f9:2a:53:62:0d:56:
                    84:b9:5a:85:00:fb:5a:b6:d0:b0:29:7c:cc:38:72:
                    2f:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FC:3F:F0:76:B9:EA:69:0C:33:6E:74:A9:5C:C1:41:8D:59:0F:08:55
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/e538524e-ee79-38eb-8f5c-2892e158cb2b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.42.173.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         81:28:1d:fd:49:a2:57:e7:86:04:65:20:47:67:67:23:e0:ef:
         bd:8c:8c:14:a0:3f:98:cd:d0:bc:f2:2f:02:05:62:7d:0b:f6:
         52:88:f8:d4:bb:47:f5:da:cb:73:f0:2b:51:e3:f7:16:09:b6:
         61:4d:fb:6a:fd:d7:46:d0:e3:4e:17:c3:e4:d0:3d:5a:17:ce:
         e6:cf:96:d8:7d:10:75:78:7c:54:d8:c8:df:f3:9b:69:9d:82:
         ee:09:d5:f2:d9:33:83:2b:32:75:f4:4f:74:ee:3b:a1:8d:74:
         9e:cf:c7:cb:3d:f0:c1:6b:00:ae:f0:9a:30:5b:4f:40:0c:81:
         a9:3d:91:53:76:7c:d3:9b:7d:b7:f5:48:cc:e7:71:68:92:a2:
         1a:81:78:fa:d4:c7:cf:99:59:30:b4:0b:aa:9c:e1:85:3d:ab:
         c0:6e:af:4e:5f:63:1b:cb:d9:f2:a1:04:a4:4a:b4:5d:8e:4e:
         b0:58:f3:81:f0:6b:1f:88:a9:b5:87:81:75:3c:df:ee:a4:26:
         95:8b:9d:e2:4b:36:87:55:fa:4e:c5:c3:9f:ec:3b:22:de:01:
         49:c3:6c:49:cc:8d:a0:e5:17:20:62:de:78:d4:65:d4:ac:8a:
         1b:7b:d4:1a:f6:e6:bf:27:ab:15:26:9d:b1:bf:0a:99:0e:bb:
         b5:35:f9:1a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 03:22:20 2026 by rpki-client