Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/87e3845d-4271-3251-ae4b-a827b83bc373.roa
File:                     87e3845d-4271-3251-ae4b-a827b83bc373.roa (raw, json)
Hash identifier:          tXbsJjBr6/yzd7cPjS9SyuyJ9skjPabg7Kx3q4psOJg=
Subject key identifier:   A3:88:28:4B:66:A4:D8:C9:47:EA:F1:4F:7A:3F:4B:97:1D:B4:6C:AE
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584EA787520502AB4477054FDE00
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/87e3845d-4271-3251-ae4b-a827b83bc373.roa
Signing time:             Wed 29 Jul 2026 01:00:12 +0000
ROA not before:           Wed 29 Jul 2026 01:00:12 +0000
ROA not after:            Tue 27 Oct 2026 01:00:12 +0000
asID:                     27544
IP address blocks:        192.12.94.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 21 Aug 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:a7:87:52:05:02:ab:44:77:05:4f:de:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Jul 29 01:00:12 2026 GMT
            Not After : Oct 27 01:00:12 2026 GMT
        Subject: CN=0d5fd474-949b-423e-b073-611e14063b35
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:41:7e:7f:fb:0c:5e:94:43:7d:a3:a8:c4:34:
                    01:00:43:f0:bd:18:ed:48:ef:fa:e1:58:82:dd:97:
                    cf:ca:8f:be:2a:94:f6:6b:f3:2d:d5:2d:ed:2f:b0:
                    1e:fa:4f:3e:7b:6d:3f:2f:25:b5:f5:72:58:51:94:
                    db:eb:58:45:70:0e:e6:03:1a:f5:5c:6b:37:e1:b6:
                    82:23:7a:a2:83:83:8b:ae:ac:aa:8d:ab:fd:ea:5b:
                    b4:2d:fb:1e:3f:eb:1f:1a:c1:e2:82:96:b9:20:3b:
                    88:f7:19:1e:f5:f2:c9:a1:2d:85:87:d5:76:f1:09:
                    37:d4:3e:8f:4a:d1:72:4c:49:16:72:44:75:38:6a:
                    38:44:4b:d4:a7:f9:db:32:bf:16:83:21:6d:95:64:
                    0d:74:7a:4d:e1:25:12:00:82:92:4e:83:97:6c:f1:
                    01:67:4f:3c:a8:96:aa:57:d6:da:16:a1:2c:c1:c9:
                    3d:39:53:7d:14:f4:4c:6b:75:9a:12:86:3b:eb:5d:
                    e8:bd:bd:ea:d9:7d:32:82:e5:63:e8:77:2d:cb:55:
                    7a:84:aa:af:97:cc:87:15:b6:f5:02:18:aa:b1:2f:
                    0d:fb:2c:ba:e8:14:fd:c7:78:1d:95:ad:26:ff:83:
                    d1:45:04:cd:76:7e:2d:1a:bf:fa:19:64:54:7d:b4:
                    ec:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A3:88:28:4B:66:A4:D8:C9:47:EA:F1:4F:7A:3F:4B:97:1D:B4:6C:AE
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/87e3845d-4271-3251-ae4b-a827b83bc373.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.12.94.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4a:68:01:0e:1e:3e:eb:d6:6a:3d:90:d5:6f:be:be:e7:53:25:
         8d:d5:a1:0c:7d:02:9e:2f:a4:85:f0:63:b9:12:aa:cd:c8:d3:
         67:a2:f8:d6:13:46:ae:14:46:7c:d3:c7:ea:88:a8:72:3a:71:
         00:74:36:00:68:06:9a:ea:7b:5b:3b:7e:59:f6:38:cc:1d:45:
         3c:15:bd:88:bb:12:c7:e8:54:2e:7a:1a:cc:7e:5e:95:f7:f7:
         f6:ea:b6:4e:5c:01:d1:29:53:c2:35:35:36:91:c1:5c:8a:a4:
         cd:d1:b4:d6:2c:38:71:b8:62:a8:42:18:0b:ce:49:d8:a6:14:
         83:5a:4f:72:a6:74:85:18:1d:17:fd:95:e4:5a:3e:ea:e3:91:
         2d:51:e3:cb:17:0a:e6:43:1a:2d:71:26:41:f2:db:62:7a:f3:
         fa:ed:1e:3a:47:f6:25:86:11:c8:63:af:ac:68:6f:85:f3:c7:
         ef:1f:fd:80:8e:26:c0:99:5f:97:53:fd:62:fd:e0:a1:22:da:
         62:55:dc:79:a2:d7:36:a0:b0:61:06:72:79:78:d9:e0:d9:88:
         63:8f:0b:19:f5:21:c0:c4:e2:b1:df:e6:a9:5e:1d:e1:68:17:
         61:6b:80:93:85:5e:c7:fd:ce:32:b7:06:36:38:2e:60:58:60:
         23:f3:79:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 19 20:34:53 2026 by rpki-client