Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/53665cd5-c811-3cd9-bbcd-8ac4395de98c.roa
File:                     53665cd5-c811-3cd9-bbcd-8ac4395de98c.roa (raw, json)
Hash identifier:          uBCjFlTea9NPI/6fnuNavMytTXE2VEBo947Hy7X2XUs=
Subject key identifier:   B9:DA:7B:03:19:3B:25:08:0E:47:01:FA:EC:7B:33:F4:B5:73:65:B1
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584F6292D2BA71B96C1F5D5DAC80
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/53665cd5-c811-3cd9-bbcd-8ac4395de98c.roa
Signing time:             Sun 04 Oct 2026 01:00:13 +0000
ROA not before:           Sun 04 Oct 2026 01:00:13 +0000
ROA not after:            Sat 02 Jan 2027 02:00:13 +0000
asID:                     396688
IP address blocks:        192.58.128.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 08 Oct 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:62:92:d2:ba:71:b9:6c:1f:5d:5d:ac:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Oct  4 01:00:13 2026 GMT
            Not After : Jan  2 02:00:13 2027 GMT
        Subject: CN=4d559e8b-b055-46bb-93ef-f6f9e793e932
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:89:e4:78:4c:6c:85:2e:9d:55:cb:d4:56:1f:46:
                    b7:8b:05:55:4f:f0:60:04:2f:09:2a:a2:fb:f5:5f:
                    2a:21:65:91:8e:48:69:45:63:29:46:75:2c:17:de:
                    33:c3:f1:da:63:d1:d9:64:49:2c:b1:1b:d4:68:f0:
                    1a:c3:93:c1:22:38:86:ed:aa:a3:56:3f:36:d8:b4:
                    1d:84:35:2f:d8:c2:43:29:f6:d6:56:0f:fd:9c:de:
                    b5:4f:b4:3c:dd:ab:9c:cd:73:d3:0d:9a:90:3a:e7:
                    5e:d9:b3:53:6d:a5:3d:7c:54:65:7c:34:b5:7d:f1:
                    27:c4:27:4a:95:52:e8:69:7a:16:2d:b9:1b:c4:44:
                    37:c7:f3:c9:25:8f:c6:09:6d:c3:0f:8e:2d:90:ba:
                    cc:e0:71:46:0e:91:0d:6c:20:ca:5f:d0:e6:78:39:
                    d5:75:4e:c8:4e:05:45:19:27:5d:d4:0f:3c:80:ed:
                    50:cf:7b:b4:e4:5b:be:3e:27:3a:05:ef:4a:08:f6:
                    41:07:91:fe:6d:cc:a2:fe:54:45:c2:f2:a7:d1:83:
                    67:d7:67:71:c4:13:16:3b:82:11:a2:02:f2:f6:85:
                    ac:c3:bf:a3:b4:25:75:62:bf:16:16:b9:83:8e:ff:
                    e2:58:54:e7:fd:51:b3:72:b8:42:78:0d:4c:88:a3:
                    09:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B9:DA:7B:03:19:3B:25:08:0E:47:01:FA:EC:7B:33:F4:B5:73:65:B1
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/53665cd5-c811-3cd9-bbcd-8ac4395de98c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.58.128.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         06:e2:43:92:10:3c:cd:e5:a7:25:b9:a9:2f:83:ea:7d:39:3f:
         55:fc:f9:c4:de:77:a5:4b:20:cf:9d:f2:9d:b8:b0:0c:cb:72:
         c0:0f:f6:0e:0e:6a:57:91:f4:0c:e7:77:c8:78:57:35:45:85:
         dc:c7:e1:6a:b6:fc:05:c2:5a:45:d9:b1:6a:db:95:d1:47:85:
         85:8e:c0:76:24:c2:ba:17:7d:fe:5f:0a:03:79:21:dc:7e:bd:
         47:2f:fc:4d:e7:af:f4:8c:1b:41:22:88:2c:7b:41:28:7c:45:
         c4:76:04:5a:da:6b:55:fc:2f:d9:18:9a:78:fe:70:b8:95:e8:
         6a:a1:9c:c3:08:2f:aa:32:7d:2e:9d:b3:93:64:fb:20:d0:63:
         f7:04:5c:ea:7f:e8:72:5d:aa:32:0d:71:ca:ab:88:03:cc:b8:
         5b:0f:77:98:d8:fd:87:68:d3:15:ce:24:a1:db:3e:8a:86:96:
         20:5a:73:ce:f6:0d:ab:5c:43:ca:be:50:0c:3d:d4:cc:58:de:
         2a:29:ad:cd:e9:33:d6:dc:1a:fc:84:62:bf:af:c1:fa:4d:b9:
         70:9d:e9:1c:60:dd:7f:64:77:cf:d3:4f:99:3d:1b:fc:47:6e:
         dd:db:d9:c1:47:b6:05:48:89:9f:6c:77:28:7e:d3:19:48:ed:
         5e:10:2b:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 6 23:11:12 2026 by rpki-client