Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/2801cb6d-6a7e-3d2a-aa66-ff20f893f6b0.roa
File:                     2801cb6d-6a7e-3d2a-aa66-ff20f893f6b0.roa (raw, json)
Hash identifier:          Mo7MtCOXVzGmLlgR/sTpF3bWWZIVuw/C78AGyJReBlA=
Subject key identifier:   97:F6:9A:27:73:D7:F8:13:4C:69:2E:DD:E5:E3:93:C2:8F:38:49:2C
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584F498976E0247383F7FC0C8680
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/2801cb6d-6a7e-3d2a-aa66-ff20f893f6b0.roa
Signing time:             Fri 25 Sep 2026 01:00:12 +0000
ROA not before:           Fri 25 Sep 2026 01:00:12 +0000
ROA not after:            Thu 24 Dec 2026 02:00:12 +0000
asID:                     396604
IP address blocks:        192.55.83.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 10 Oct 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:49:89:76:e0:24:73:83:f7:fc:0c:86:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Sep 25 01:00:12 2026 GMT
            Not After : Dec 24 02:00:12 2026 GMT
        Subject: CN=5bff5f84-8908-418f-a18d-97313d6b92dc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ed:99:46:5f:e5:4e:48:e5:d2:e5:ab:bd:22:77:
                    82:7d:40:ae:67:80:6a:a4:b3:a3:21:75:e9:dc:78:
                    bd:58:33:52:b1:da:29:48:23:4c:f5:7c:8c:f5:61:
                    b2:54:61:bf:58:37:aa:de:8a:96:5c:0f:ec:e3:d5:
                    da:5e:10:1d:99:99:5b:75:5a:6f:ac:a0:72:12:20:
                    60:63:1e:40:41:7a:f0:bc:68:6b:02:61:4f:c6:ff:
                    82:7d:a0:92:92:a3:df:66:6a:fc:c6:a2:a0:3b:37:
                    2a:1a:a8:00:aa:71:fd:84:2b:7d:0c:00:da:83:a7:
                    6c:de:4a:35:8f:55:82:ab:25:b8:59:10:6d:9b:bb:
                    47:6c:62:5b:91:74:e6:ef:3a:a3:0a:3c:4f:38:45:
                    d0:4f:33:99:35:5f:7c:c1:6c:87:80:42:88:03:4d:
                    5b:cf:5e:71:3d:7a:2a:34:64:33:3a:40:78:46:86:
                    e7:e2:0d:03:6f:ed:c9:78:78:32:17:fc:96:dd:a9:
                    e9:99:30:91:c0:e7:ac:9f:11:47:ad:d3:63:f8:10:
                    22:5d:09:eb:57:8f:2e:f5:47:b9:f7:c6:f2:6f:a9:
                    b9:4f:82:c1:fb:82:e3:46:da:fe:9a:df:52:de:b2:
                    ef:ac:af:9f:b4:ed:04:32:6f:26:53:14:53:4d:fd:
                    90:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                97:F6:9A:27:73:D7:F8:13:4C:69:2E:DD:E5:E3:93:C2:8F:38:49:2C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/2801cb6d-6a7e-3d2a-aa66-ff20f893f6b0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.55.83.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         48:a3:4a:59:49:de:e7:cd:91:41:d6:08:31:3f:fd:ec:28:6a:
         7c:c3:34:a0:c0:d9:39:6c:1a:cf:14:69:e9:4a:ea:88:39:d9:
         eb:d1:5b:58:05:30:e5:90:23:87:e2:3e:d4:a1:e8:3d:87:2a:
         96:79:08:67:ee:c2:02:5f:e8:42:a5:cd:f9:b2:65:b5:3b:15:
         6f:69:de:70:8b:94:46:4c:bd:78:9b:51:67:d0:51:55:05:ef:
         b1:e8:61:c0:9d:21:c0:48:be:c6:65:82:aa:f4:d6:6b:ae:bb:
         ba:87:c8:ca:4c:c2:4b:be:89:9e:b6:60:cb:dd:e4:81:95:5b:
         b8:0b:c7:f8:b5:3e:ea:f9:d7:33:81:13:17:1c:01:54:28:bc:
         28:b2:ef:f9:8e:0a:b2:f3:f3:26:2a:d1:4d:31:65:71:4d:e9:
         d7:27:d3:cb:2e:46:76:a7:bc:93:ec:11:f0:db:60:4c:c8:08:
         0e:da:e2:0f:9f:6f:bc:27:04:92:b8:72:d6:60:71:04:fa:b8:
         29:65:a2:ce:eb:ca:84:65:b1:07:6e:53:8b:8b:6b:d0:35:eb:
         6b:20:a5:87:d9:4f:5d:d3:a9:b9:4c:1e:33:f9:89:1c:f8:fc:
         ac:7d:f1:85:e0:bf:8d:b4:83:19:42:12:bd:3c:df:ab:bb:ac:
         a7:8a:28:4a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 8 05:53:15 2026 by rpki-client