Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/940afe9e-a0d7-32d3-b488-d8bb6c62b6bb.roa
File:                     940afe9e-a0d7-32d3-b488-d8bb6c62b6bb.roa (raw, json)
Hash identifier:          oypGJcR14owXgMsJaHvzRgdvAp8df//ismHVWZE5X/s=
Subject key identifier:   AE:F5:9A:16:C4:E4:17:44:BE:7C:EE:DD:6F:C3:C2:FA:47:3B:61:84
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584EA799AD4EBAFAA2D30ED3B8C0
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/940afe9e-a0d7-32d3-b488-d8bb6c62b6bb.roa
Signing time:             Wed 29 Jul 2026 01:00:12 +0000
ROA not before:           Wed 29 Jul 2026 01:00:12 +0000
ROA not after:            Tue 27 Oct 2026 01:00:12 +0000
asID:                     396544
IP address blocks:        192.30.45.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 21 Aug 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:a7:99:ad:4e:ba:fa:a2:d3:0e:d3:b8:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Jul 29 01:00:12 2026 GMT
            Not After : Oct 27 01:00:12 2026 GMT
        Subject: CN=59c34739-825b-4590-8dbc-d3bf64a88747
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:01:fd:2a:29:70:2c:26:d5:d8:98:cd:4f:5c:
                    1c:2f:a3:3a:07:ef:15:ee:1f:a5:65:3d:94:85:b5:
                    5d:5e:54:03:cc:9d:c0:c1:11:9e:44:99:9c:3b:59:
                    d0:ae:bb:4d:27:f5:c9:b1:70:20:05:16:6f:8a:db:
                    39:57:a5:d0:18:25:40:d1:66:44:54:c7:2e:f1:72:
                    8c:5f:e5:da:82:73:a2:46:1b:78:33:9b:fb:8f:30:
                    52:6e:40:20:90:8e:64:ae:ad:a5:d8:ee:e4:4c:0d:
                    e9:5a:a6:06:8f:0c:17:0e:86:cf:83:d0:bc:0e:4e:
                    18:4c:bf:9a:58:6f:d6:a1:45:95:ab:68:a1:f3:84:
                    bd:d6:c4:38:83:bc:1f:85:75:de:97:21:e8:e6:47:
                    b5:ed:04:5f:ef:0f:09:00:05:98:72:ff:85:ed:84:
                    db:0e:3f:a2:74:6b:83:bc:8a:09:6c:6c:68:b3:36:
                    f6:48:79:b0:9f:5e:ef:70:67:ce:5d:ef:dc:1d:11:
                    b5:23:06:e2:36:fa:f4:30:d6:59:56:da:15:6d:2e:
                    bb:db:cd:db:cb:32:a1:91:a9:b7:3a:c0:6f:22:3c:
                    dd:a8:1f:36:6d:16:83:3f:c8:2d:c8:7e:20:b7:33:
                    09:d7:2e:d1:22:d3:f6:ad:a9:a7:e2:88:61:a4:4b:
                    2b:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AE:F5:9A:16:C4:E4:17:44:BE:7C:EE:DD:6F:C3:C2:FA:47:3B:61:84
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/940afe9e-a0d7-32d3-b488-d8bb6c62b6bb.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.30.45.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         be:a2:24:00:76:25:e1:9b:f0:bc:a8:f6:ed:35:fe:d5:3e:66:
         7b:dc:83:19:32:04:aa:b5:26:91:c7:90:5a:68:32:0f:95:76:
         ce:6e:99:fe:8e:37:ae:3a:d5:f8:6b:99:18:81:90:e5:e7:1a:
         23:95:1f:fa:22:5b:2e:f8:a5:a6:3c:22:fb:b1:cc:84:43:96:
         4c:d6:28:26:11:2d:26:4d:d8:35:d9:f1:21:26:bd:c4:9a:e9:
         77:f8:eb:9d:8c:dd:1b:6e:12:ab:ac:8a:41:95:25:fb:f4:8b:
         a0:f5:ab:1b:98:a1:ba:73:d8:97:99:30:d1:35:55:b9:09:d9:
         b2:bd:7b:52:bb:7c:b8:79:fa:1e:32:9c:7c:6c:30:aa:54:bd:
         37:a6:d7:4d:6f:c0:30:5b:48:31:0c:e0:09:a9:f0:9d:50:24:
         25:d6:2a:ec:64:06:e4:6f:26:2c:52:64:e6:9e:48:be:18:54:
         26:bd:84:49:13:60:8d:77:52:05:ad:d7:bb:49:d1:ae:af:9c:
         6c:63:95:fa:56:f9:26:49:4a:bd:5b:f0:97:a1:4d:24:27:6c:
         20:f5:07:ae:7e:15:8a:99:93:9d:cb:2d:8b:eb:1d:bf:be:ec:
         7f:2b:b3:fd:fa:93:02:d0:4a:12:ca:bd:0a:40:0d:ed:e0:af:
         2e:f4:af:63
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 19 19:31:47 2026 by rpki-client