Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/e8609606-6287-322a-ae4b-360f00c7b976.roa
File:                     e8609606-6287-322a-ae4b-360f00c7b976.roa (raw, json)
Hash identifier:          UJVsb9S4V6iH2H/UzZM/PJmzpL9RKBwCYzkRT5C7Y/4=
Subject key identifier:   FD:12:08:A8:5E:AC:E0:5D:74:B7:07:1B:58:F2:44:92:B0:D3:3A:CB
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584E7BCA38F92CD34FBFF5FA2200
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/e8609606-6287-322a-ae4b-360f00c7b976.roa
Signing time:             Mon 13 Jul 2026 09:00:12 +0000
ROA not before:           Mon 13 Jul 2026 09:00:12 +0000
ROA not after:            Sun 11 Oct 2026 09:00:12 +0000
asID:                     396567
IP address blocks:        192.54.112.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 26 Jul 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:7b:ca:38:f9:2c:d3:4f:bf:f5:fa:22:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Jul 13 09:00:12 2026 GMT
            Not After : Oct 11 09:00:12 2026 GMT
        Subject: CN=c0291c28-dfa5-438c-89eb-51d15b714254
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:d0:72:41:62:04:2d:6e:30:0a:6f:72:f5:99:
                    3c:b1:4c:72:5f:be:7e:2d:87:f5:c3:7d:c5:b9:09:
                    2c:aa:3d:4a:88:18:20:e7:87:ba:cd:e9:a7:00:1c:
                    44:5d:41:4b:4e:88:6d:74:f4:5a:e3:6d:0b:f6:65:
                    66:9f:9d:e4:6c:be:ba:51:41:de:68:f3:9e:b3:1b:
                    e4:7c:25:3e:6d:d6:60:99:41:ca:cd:82:4f:76:3c:
                    91:9d:f6:43:de:b0:42:72:eb:7e:3e:73:79:b4:64:
                    5d:98:c5:ee:6f:52:98:96:6a:7e:a3:59:90:8c:8f:
                    84:02:44:82:1f:37:27:ca:61:8d:07:9c:57:09:81:
                    e3:d1:af:b2:a4:f3:68:20:e8:24:9c:32:22:f9:dc:
                    a3:a7:50:03:6f:db:9e:a6:72:ab:ec:c7:a7:24:5c:
                    a8:cc:04:77:74:a6:15:7a:de:df:aa:17:fa:6d:1c:
                    5f:e2:bd:9a:02:96:c5:b7:7d:96:0a:f9:18:94:a5:
                    58:50:c2:f2:30:ef:aa:35:d4:ee:ab:83:b8:0b:67:
                    c2:77:b2:90:af:60:36:90:8d:c3:13:13:a0:dd:b8:
                    b5:52:a2:bd:b2:71:3b:60:ec:26:49:b7:fa:d0:eb:
                    ba:6e:8c:1d:d1:05:31:ef:bc:1d:82:12:82:19:df:
                    23:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FD:12:08:A8:5E:AC:E0:5D:74:B7:07:1B:58:F2:44:92:B0:D3:3A:CB
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/e8609606-6287-322a-ae4b-360f00c7b976.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.54.112.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2a:92:f1:29:4f:db:84:ce:cc:62:ec:5e:a5:28:18:1e:1c:34:
         a9:dd:f1:8a:32:b5:d9:20:af:d4:f4:cb:22:d4:56:c3:da:7a:
         88:a1:13:f2:1b:1c:42:a3:53:5e:05:e6:80:6f:3c:09:89:3b:
         4a:0c:46:cd:40:8f:83:ca:48:ba:e4:73:38:7f:72:b2:90:52:
         45:3a:c1:98:37:53:b4:17:1b:a5:86:f0:6b:3a:27:30:9c:0f:
         eb:a6:b5:0e:a5:6d:61:39:a1:a2:21:45:f2:7a:a0:fe:28:fb:
         78:33:e9:48:73:2b:a5:27:9e:01:4b:66:62:75:bf:bc:f2:c6:
         f9:f6:a1:55:b0:a9:22:8e:6c:ff:4a:4f:89:02:8e:c9:8c:59:
         26:75:55:41:22:76:9a:99:06:08:d4:14:b3:40:7f:43:18:1f:
         60:d4:5b:61:21:5c:45:e5:f6:52:f5:c3:71:eb:03:62:de:8a:
         81:c2:31:9d:39:5e:9e:56:99:db:cb:6d:75:54:1d:1f:f1:76:
         1f:5f:2b:72:e3:61:e4:81:02:b2:4b:86:d5:0f:82:74:e4:b6:
         2e:cd:87:5d:60:15:3c:19:9d:0d:54:0e:7e:4a:31:92:9a:a7:
         aa:c8:41:96:ee:d7:75:9b:bf:57:fd:8e:40:b3:ee:9f:4f:5a:
         2f:29:4b:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 11:47:54 2026 by rpki-client