Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c85bdeb7-480c-38da-b8d6-4ec2c54567ad.roa
File:                     c85bdeb7-480c-38da-b8d6-4ec2c54567ad.roa (raw, json)
Hash identifier:          84ftq6ual2+4f/lX6rqgvCdfBQfgjesCmi4E2j19ePU=
Subject key identifier:   5D:75:5C:CE:9E:95:8C:E4:44:FF:03:9A:6E:79:1D:5B:5A:EB:A2:10
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584F49732DF0FF581622A8093E80
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c85bdeb7-480c-38da-b8d6-4ec2c54567ad.roa
Signing time:             Fri 25 Sep 2026 01:00:12 +0000
ROA not before:           Fri 25 Sep 2026 01:00:12 +0000
ROA not after:            Thu 24 Dec 2026 02:00:12 +0000
asID:                     396596
IP address blocks:        192.68.130.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 10 Oct 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:49:73:2d:f0:ff:58:16:22:a8:09:3e:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Sep 25 01:00:12 2026 GMT
            Not After : Dec 24 02:00:12 2026 GMT
        Subject: CN=13dc2a48-7c61-426f-b2c0-378daf1130a3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:02:06:5d:bb:ad:3c:1a:f6:73:62:48:77:05:
                    98:2a:56:00:4a:73:e2:64:77:30:8e:78:8c:0d:b6:
                    14:97:ea:f4:e4:46:e8:4f:ce:38:2d:ac:42:24:3f:
                    08:ab:14:cd:28:cf:4a:1c:33:a8:fb:e1:e3:af:7a:
                    03:ec:62:8b:9a:a7:e6:04:9f:1b:96:cc:f3:d1:0f:
                    bd:4f:ff:25:13:74:67:c3:ec:23:3d:87:83:98:c6:
                    09:3c:ba:28:22:43:27:c0:b7:75:a0:92:d3:06:aa:
                    f9:69:e4:a3:37:48:26:9a:bd:16:ea:7f:6c:f3:c2:
                    41:0a:c6:fb:48:56:76:33:09:92:f6:47:61:0a:1c:
                    51:f3:7f:ac:76:38:76:d1:1b:5a:aa:0d:96:e3:2a:
                    11:f9:9e:1f:da:db:27:e3:be:e1:d4:5b:b0:30:6f:
                    c9:97:e9:3f:03:0d:e5:97:ed:6c:16:db:d8:4b:b6:
                    5c:17:03:25:34:1c:9e:a4:f1:dc:b6:44:f1:4b:3e:
                    66:93:a0:08:55:8d:4e:6d:3f:f1:0c:61:de:0d:7c:
                    bb:a9:c9:70:b7:8c:b4:c0:fa:f2:83:72:7f:c5:b8:
                    59:5f:96:6f:03:e6:b7:ac:91:ef:0d:35:d8:1e:cb:
                    71:fd:37:6c:e5:84:b1:91:d1:de:ac:d3:d2:e2:d4:
                    1a:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5D:75:5C:CE:9E:95:8C:E4:44:FF:03:9A:6E:79:1D:5B:5A:EB:A2:10
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c85bdeb7-480c-38da-b8d6-4ec2c54567ad.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.68.130.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a9:9b:a7:1c:4c:84:31:a9:5d:5a:b0:a7:a7:dc:f2:08:df:a8:
         57:2a:9e:9c:9c:a0:0d:8a:5f:1e:6d:8a:f2:65:d1:b7:4c:07:
         0d:c0:74:e1:cc:7e:b1:d3:2d:6a:19:34:b1:58:98:ec:94:49:
         26:65:0b:ad:5a:6c:22:20:33:90:e7:a2:1e:a7:9f:ad:db:b8:
         66:79:51:e1:4b:70:67:81:42:fd:eb:ec:ab:74:f9:bf:b3:6a:
         3c:4a:b1:ee:95:d4:03:c7:90:96:35:a5:a8:66:90:74:d0:9e:
         f3:d4:34:18:81:b0:ed:69:6d:93:c7:16:d5:da:d2:02:30:17:
         9c:de:0a:6e:50:c9:8b:52:71:66:84:4b:de:cc:aa:bd:56:59:
         36:7c:37:e2:a8:0c:ef:17:ad:24:a5:5e:a6:89:3d:7c:cd:5f:
         28:71:26:c3:eb:9c:72:c8:e2:31:23:0c:0e:b1:d6:a2:a6:37:
         fd:ff:1b:d8:ba:79:16:c6:d0:56:b6:28:5b:b9:c8:39:ae:98:
         84:90:da:cf:85:3e:be:b6:9d:6b:3e:f7:63:11:a5:14:0a:30:
         d2:ca:d9:60:50:53:30:b0:ab:6f:08:a3:15:e2:ed:2e:36:1c:
         7d:53:4e:f3:51:9d:32:84:b9:a7:2a:ff:2b:29:fd:65:52:c4:
         d8:b9:c0:c7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 7 23:00:32 2026 by rpki-client