Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/9dc10f66-c1b1-3f8a-b811-8edf9706db54.roa
File:                     9dc10f66-c1b1-3f8a-b811-8edf9706db54.roa (raw, json)
Hash identifier:          bPhTvjlqG2/+ZehVPpfpeYhArQUfT+vFLL9ubHU3lUk=
Subject key identifier:   8B:31:FF:41:2C:EC:9D:AB:C6:94:D8:6A:1E:EA:8A:06:93:8B:14:7D
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584F497D9FDC7BAE6CBE39A8D440
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/9dc10f66-c1b1-3f8a-b811-8edf9706db54.roa
Signing time:             Fri 25 Sep 2026 01:00:12 +0000
ROA not before:           Fri 25 Sep 2026 01:00:12 +0000
ROA not after:            Thu 24 Dec 2026 02:00:12 +0000
asID:                     397195
IP address blocks:        192.68.126.31/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 10 Oct 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:49:7d:9f:dc:7b:ae:6c:be:39:a8:d4:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Sep 25 01:00:12 2026 GMT
            Not After : Dec 24 02:00:12 2026 GMT
        Subject: CN=1dc0290f-fefb-4342-aca5-80830a56f276
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:1b:63:88:49:77:bc:ef:db:28:2a:cf:39:43:
                    11:42:f8:fc:d2:a6:37:c3:9d:52:9a:3a:4a:9d:d6:
                    d2:e3:97:51:8e:de:fd:56:d8:58:b6:82:84:ad:30:
                    06:2f:81:25:0d:0c:bc:aa:9c:b9:03:47:45:d2:70:
                    70:7d:49:06:2a:71:19:56:58:51:bd:41:6b:39:f3:
                    e3:87:e3:9c:62:90:15:50:3f:93:57:8d:0a:84:03:
                    ff:1b:56:03:f3:b3:c3:ec:24:88:1e:a8:33:01:0e:
                    41:69:9c:f3:22:f5:90:6d:14:1d:e5:4e:e4:d1:5c:
                    ba:78:1d:78:52:92:33:d5:9d:96:fe:c4:b8:2f:94:
                    6d:b0:c1:a1:76:93:c3:d7:bb:57:d7:93:af:15:57:
                    50:a2:83:72:3c:0a:41:85:90:52:13:5b:03:8f:dd:
                    b1:f1:0f:4b:ad:aa:9f:5c:e5:71:d2:a1:26:f5:6b:
                    d5:de:30:5f:c2:e3:02:73:9a:b2:ff:61:08:c9:da:
                    26:16:b6:78:7d:7d:11:49:68:eb:9d:da:3e:d3:77:
                    1c:cb:57:fa:1c:a9:56:89:96:b9:42:1d:5b:9a:3e:
                    5b:bc:87:46:52:35:f3:2f:ac:50:97:30:af:f5:17:
                    53:fc:08:53:d0:fe:d9:35:18:02:92:77:a2:4e:d3:
                    81:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8B:31:FF:41:2C:EC:9D:AB:C6:94:D8:6A:1E:EA:8A:06:93:8B:14:7D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/9dc10f66-c1b1-3f8a-b811-8edf9706db54.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.68.126.31/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3e:f5:b6:a3:b3:8d:53:35:43:72:e4:5b:cd:dc:3a:5c:44:91:
         2a:f2:38:68:bc:8f:6d:b4:6f:b4:cf:d2:9d:0a:af:2f:a4:d9:
         d6:fc:de:f4:a2:43:dc:30:a7:f0:90:da:b5:e3:d4:51:7b:04:
         91:2a:db:54:bf:d2:fc:92:75:10:01:a1:6c:ef:94:f3:3f:59:
         d8:9b:63:b0:0a:6b:2a:d0:e6:16:d8:b8:2a:f9:f5:48:af:d2:
         de:fe:02:75:c5:77:62:14:89:4e:42:9b:a7:92:99:7e:40:a9:
         36:92:e1:76:2e:36:03:18:0a:7b:bd:a1:7e:1a:9c:68:29:a3:
         98:00:62:43:f9:cf:5c:1a:54:20:cb:a2:68:f6:8c:1c:b8:f1:
         68:df:a7:c1:ed:67:b2:a7:70:fd:ea:80:2d:9c:32:af:63:a8:
         22:a0:e1:e5:65:2f:42:81:97:f6:2a:90:dd:0c:57:36:6b:2f:
         50:91:f7:81:20:49:34:81:7c:df:18:21:8e:2e:63:08:37:2a:
         a3:70:36:f3:06:63:66:a4:cf:65:11:c1:53:fb:04:69:5e:a5:
         19:c3:75:ed:cb:54:c0:59:24:2f:47:65:58:6a:12:06:c3:e0:
         dc:a1:d9:a6:c1:61:33:e2:65:98:57:5d:b9:f7:9a:f5:7c:60:
         5b:84:24:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 9 17:48:17 2026 by rpki-client