Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/8555602e-aff4-324a-82e3-881223092991.roa
File:                     8555602e-aff4-324a-82e3-881223092991.roa (raw, json)
Hash identifier:          +qpCW56nBzDPq0toOyW5OzKSBY22uw/gkFT+WrxC38M=
Subject key identifier:   ED:27:40:3B:A8:2D:6F:2D:91:69:CA:AE:A7:FA:44:41:E4:47:B8:76
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584F6292C17CA1C3C35856BF3600
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/8555602e-aff4-324a-82e3-881223092991.roa
Signing time:             Sun 04 Oct 2026 01:00:13 +0000
ROA not before:           Sun 04 Oct 2026 01:00:13 +0000
ROA not after:            Sat 02 Jan 2027 02:00:13 +0000
asID:                     40647
IP address blocks:        192.58.128.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 10 Oct 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:62:92:c1:7c:a1:c3:c3:58:56:bf:36:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Oct  4 01:00:13 2026 GMT
            Not After : Jan  2 02:00:13 2027 GMT
        Subject: CN=ce2e4010-622f-408e-9d67-d7cdb3b4d131
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:87:2c:76:2e:f9:27:08:cb:ce:b1:9e:00:a8:12:
                    23:b8:1c:83:eb:21:b3:11:34:1a:a8:df:c5:5d:7b:
                    62:28:e1:02:01:df:90:87:98:95:44:9c:40:70:07:
                    c4:f0:72:bb:47:56:38:da:c5:47:28:dc:c6:cd:df:
                    d0:6f:16:c3:2c:9a:f6:c8:ae:a6:7b:69:cf:b7:4a:
                    e5:e7:f7:70:3a:73:26:d1:4d:38:d9:93:ee:3a:a1:
                    3b:fe:31:c1:b5:4e:c2:d4:32:02:62:5a:6e:2a:05:
                    47:82:ab:2f:eb:88:51:5f:54:51:f4:96:a9:0f:90:
                    50:93:30:36:23:29:0d:37:5b:af:a0:96:02:93:74:
                    f6:b3:51:b3:fd:49:4d:8e:b5:37:1c:4d:a4:1d:cf:
                    5f:cf:df:21:02:b1:c2:7a:73:8e:9a:6e:2c:1d:05:
                    34:92:b7:9e:e0:6c:f5:72:3e:68:ca:f7:91:e6:63:
                    ef:52:5a:a1:4f:10:aa:6e:70:9b:cc:3d:c0:5a:9c:
                    1d:1c:c1:9a:a7:ec:4f:10:6b:89:c9:cd:02:0e:c5:
                    27:c2:1d:38:8e:fb:51:86:c8:c5:56:3c:18:7a:25:
                    76:48:41:73:ab:d2:72:65:fe:f2:28:8f:4d:10:c8:
                    8c:6d:2e:0f:a9:af:90:9d:ee:17:68:95:3e:0c:03:
                    5e:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                ED:27:40:3B:A8:2D:6F:2D:91:69:CA:AE:A7:FA:44:41:E4:47:B8:76
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/8555602e-aff4-324a-82e3-881223092991.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.58.128.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         55:73:70:cb:29:0f:d5:fb:f0:4f:f1:32:10:92:52:4e:7f:d2:
         3f:e4:12:1c:b9:91:34:b8:3c:dc:70:6a:00:12:2b:61:86:58:
         a7:b2:6a:df:6a:97:15:db:71:76:4f:98:bf:bc:53:70:2d:fd:
         cc:b3:5a:d1:51:88:79:60:f9:a7:d0:39:d7:61:76:61:9e:41:
         9a:98:44:7f:b5:37:81:65:c1:1e:58:25:45:f7:9a:8b:23:fa:
         c7:b0:b3:6a:69:c4:ff:54:6b:5b:48:d7:c0:f4:1f:91:04:b8:
         01:39:34:65:73:86:e4:47:e0:ad:39:18:0a:30:93:d1:9e:6d:
         d1:54:95:2f:0d:7c:0d:e8:7d:99:c4:45:b4:28:66:5c:e3:a2:
         18:2b:83:bd:69:b0:0a:ed:70:1d:af:8b:70:c7:c1:05:c4:b8:
         98:b9:cb:48:58:d0:46:22:e7:83:13:1b:dd:b5:f0:27:47:cd:
         c2:18:72:5f:95:20:33:07:c7:8b:c1:f2:ee:36:29:6e:6d:42:
         4f:dc:75:b1:0c:a3:51:a1:49:95:4a:97:11:37:5d:39:13:1b:
         d1:de:a2:9a:0c:7b:c1:38:2d:51:4b:06:db:7c:c7:38:ca:80:
         c2:05:f7:0e:4e:e6:25:04:77:ad:d1:0b:6b:e9:92:e2:45:11:
         41:09:6f:28
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 8 15:42:13 2026 by rpki-client