Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/ed66fb95-cd28-3fdb-a318-199cbbc6cd74.roa
File:                     ed66fb95-cd28-3fdb-a318-199cbbc6cd74.roa (raw, json)
Hash identifier:          ytJAuOHdI3WmlLSLZmg9Bq7YK30rMRpcySqz756Ofco=
Subject key identifier:   B3:D0:89:4A:68:DB:79:2B:66:50:2E:BC:93:3F:C3:3B:9D:42:EB:D3
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584F498A39484706391E80AFE880
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/ed66fb95-cd28-3fdb-a318-199cbbc6cd74.roa
Signing time:             Fri 25 Sep 2026 01:00:12 +0000
ROA not before:           Fri 25 Sep 2026 01:00:12 +0000
ROA not after:            Thu 24 Dec 2026 02:00:12 +0000
asID:                     396609
IP address blocks:        192.30.45.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 26 Sep 2026 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:49:8a:39:48:47:06:39:1e:80:af:e8:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Sep 25 01:00:12 2026 GMT
            Not After : Dec 24 02:00:12 2026 GMT
        Subject: CN=d1c7f73f-3d53-47c0-b6a4-4a9a5e1291ba
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:91:2a:8e:4b:44:46:d9:b4:0a:28:46:8c:fe:1d:
                    87:c6:54:7a:69:15:42:a7:d8:9e:52:cd:2d:3a:a4:
                    26:50:38:9f:1c:c3:81:b2:37:59:93:14:0a:8d:5d:
                    79:5e:46:2e:0f:ee:49:3a:d6:ca:9d:b9:8b:b3:f2:
                    c2:b1:e4:93:15:9b:21:6e:ab:01:01:03:ba:ba:3c:
                    50:e1:49:4e:3c:13:45:e4:9e:8a:76:d6:a5:c9:b6:
                    29:2d:f2:82:0a:e7:4d:cd:78:d7:48:34:f2:07:5e:
                    69:c0:74:73:8e:ad:1f:96:56:14:c0:73:4c:b2:52:
                    c4:f2:2c:90:9c:29:2c:cc:c9:d5:a7:b6:dc:7e:06:
                    fa:66:cb:00:14:62:1b:55:e6:32:a0:9b:6b:f7:83:
                    40:c7:6b:1d:b1:b9:58:41:3f:24:18:8c:65:c3:6c:
                    d4:4e:f3:f0:09:e9:d1:16:63:b2:1d:a4:95:1a:ca:
                    4c:6a:68:01:da:4a:de:fa:5a:9a:39:30:fe:a7:b3:
                    24:aa:d8:5a:80:7c:6d:9a:d2:da:fb:cc:b9:8f:e7:
                    b6:70:7f:40:fc:99:5f:ac:e1:4d:b5:35:e9:62:e4:
                    cd:e7:48:30:8e:c1:6c:86:75:9f:06:ec:7d:fb:12:
                    cc:91:9a:4d:ee:a0:d7:12:ab:4d:70:fd:69:80:84:
                    52:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B3:D0:89:4A:68:DB:79:2B:66:50:2E:BC:93:3F:C3:3B:9D:42:EB:D3
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/ed66fb95-cd28-3fdb-a318-199cbbc6cd74.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.30.45.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         aa:54:f4:3d:d7:dd:92:69:2b:43:ca:91:06:18:f3:c4:09:87:
         42:35:7c:1f:44:98:72:3e:c4:42:65:3d:8b:b7:9d:22:c7:2d:
         9a:05:e2:7b:29:3a:4a:40:6f:63:0d:0e:d9:29:4b:41:dc:d6:
         ba:f0:8b:ca:0d:62:1e:9c:de:2d:b6:b2:d1:16:03:85:70:00:
         8a:27:64:60:c3:26:c4:c5:29:3d:4d:79:73:f3:1d:5e:ae:d6:
         62:7d:9b:20:24:32:9c:28:dc:3a:51:82:06:d0:a7:45:2e:dc:
         10:53:59:6c:6a:49:b6:1f:2c:e4:f8:9f:94:19:ff:bd:23:27:
         29:40:1b:2c:e6:17:43:6b:4f:3b:42:41:0f:ec:d2:48:58:a1:
         66:3b:b1:08:29:53:85:3e:79:36:a0:84:b1:aa:b2:3d:f2:9b:
         30:6b:ab:db:40:d3:1c:49:4d:9e:04:2c:2a:e1:f4:f4:e6:be:
         45:a2:34:f8:43:05:4c:b1:a2:d0:8a:80:07:b1:75:30:1c:8c:
         f1:61:de:b2:75:ad:52:f9:48:88:2a:64:3e:60:6c:e8:68:7d:
         ee:5e:20:ab:3e:7d:a0:68:25:74:5c:8d:f3:a9:7d:13:a0:84:
         c2:e3:76:1e:7d:e3:e3:66:e6:4a:5d:6f:d7:8b:d0:c8:ac:af:
         86:18:c5:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 25 10:43:06 2026 by rpki-client