Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/9879dd08-80b1-3c70-a2e0-a0efb7bec240.roa
File:                     9879dd08-80b1-3c70-a2e0-a0efb7bec240.roa (raw, json)
Hash identifier:          CT93l28uou78P8LcnUM6MZ1GjUXSAygRdrRW6hbA5Lc=
Subject key identifier:   99:BE:1D:6B:FB:08:5D:01:9D:B0:46:C7:83:30:6B:29:5F:85:D3:B7
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584EE2274A363A2254BCC579F364
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/9879dd08-80b1-3c70-a2e0-a0efb7bec240.roa
Signing time:             Wed 19 Aug 2026 01:00:12 +0000
ROA not before:           Wed 19 Aug 2026 01:00:12 +0000
ROA not after:            Tue 17 Nov 2026 02:00:12 +0000
asID:                     396565
IP address blocks:        192.42.178.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 21 Aug 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:e2:27:4a:36:3a:22:54:bc:c5:79:f3:64
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Aug 19 01:00:12 2026 GMT
            Not After : Nov 17 02:00:12 2026 GMT
        Subject: CN=4685b61a-cc19-4b5b-94f1-29d760d193e6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:ff:b0:08:c5:83:ef:9b:c1:2f:a3:35:13:04:
                    71:02:bb:27:7f:2d:1c:4f:e3:f6:90:39:8a:3c:49:
                    d7:73:c0:59:f4:7e:87:10:bb:ba:84:65:c7:96:0a:
                    28:d7:63:2f:6e:0b:34:22:36:ee:a7:06:d8:cd:4c:
                    ce:79:df:6c:7f:4b:b7:b8:45:5a:70:c7:42:ab:f5:
                    6c:ea:e8:b0:84:5f:2a:6d:76:48:e9:b9:a4:be:b6:
                    1c:53:80:35:bb:84:ba:8a:80:87:ad:e0:76:8e:4a:
                    cc:89:6f:bd:86:86:3a:e3:c3:be:89:5c:fe:ee:73:
                    02:a7:ed:b5:2e:54:7a:55:9a:5b:76:e1:9d:6f:7d:
                    43:38:ea:6c:2d:b6:ce:58:bb:3b:4a:5b:9d:5e:b5:
                    31:f8:79:d3:e2:ed:3d:b7:8b:99:78:15:d5:09:c9:
                    63:bd:0b:e6:a2:70:d2:da:cd:13:a3:1a:59:21:c2:
                    e0:8b:f8:6c:e1:c4:69:26:cc:17:83:bd:f2:be:bf:
                    57:b9:99:07:9b:a9:f9:7f:8c:3a:1b:a4:8d:6c:7b:
                    c6:eb:3c:ce:86:42:25:a0:e9:d8:72:e6:f5:63:09:
                    3f:37:6d:2b:49:1e:6c:da:ac:97:33:6b:70:f0:b8:
                    5a:74:18:dc:bb:a2:f4:a6:4e:65:21:4c:4e:5d:26:
                    e7:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                99:BE:1D:6B:FB:08:5D:01:9D:B0:46:C7:83:30:6B:29:5F:85:D3:B7
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/9879dd08-80b1-3c70-a2e0-a0efb7bec240.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.42.178.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7c:ad:e8:df:4c:ae:67:be:8c:bc:f1:90:6d:3c:c0:ae:43:0a:
         23:9d:75:c6:23:ee:78:cc:a4:7a:2e:ba:8f:e3:62:e4:a5:60:
         30:eb:be:29:88:dc:98:85:dd:77:dc:66:84:6e:d6:9d:4c:e5:
         be:cf:09:de:e4:97:f7:ca:69:38:88:d9:41:1c:c1:f1:ec:ff:
         de:53:6b:27:3b:de:37:2c:11:c6:fa:7a:6a:66:f1:84:c9:dd:
         23:01:06:8f:47:c5:e7:46:25:44:a3:49:67:ff:1b:ac:de:0a:
         cb:3a:3f:ba:8c:25:ad:53:f2:ee:ca:22:53:c7:95:7c:7d:8c:
         a8:66:ba:49:33:a5:43:39:05:56:4e:bc:10:0e:ea:70:ec:ba:
         4a:58:c8:a4:31:80:cf:11:33:3d:65:1e:2b:ae:d7:c3:0f:0f:
         03:4a:a6:63:30:c3:89:37:93:59:e1:20:5d:1e:7a:f6:8e:8f:
         78:6d:78:05:d7:84:5c:c3:89:72:6b:fc:19:a7:1d:21:ab:72:
         46:22:e5:84:10:2c:fb:19:cb:60:6b:96:43:77:59:da:1c:58:
         68:dd:ce:5b:2a:80:3c:86:be:cf:58:36:4f:aa:d6:40:b9:73:
         96:36:88:e9:d9:e4:1c:02:0d:ce:46:7f:c2:ca:e7:80:a5:e1:
         14:58:fd:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 19 20:25:56 2026 by rpki-client