Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/dd9c125f-29a6-3314-85f5-50d678bb289d.roa
File:                     dd9c125f-29a6-3314-85f5-50d678bb289d.roa (raw, json)
Hash identifier:          4us4JwP5YhnAfhPao/ODZN/YE+T2JLjAjcFTXMJQPIQ=
Subject key identifier:   9D:DE:90:16:9D:7C:46:4B:97:1D:59:9A:7E:5A:42:60:45:A3:26:41
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584F49747C0A6C3470DDBDF34460
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/dd9c125f-29a6-3314-85f5-50d678bb289d.roa
Signing time:             Fri 25 Sep 2026 01:00:12 +0000
ROA not before:           Fri 25 Sep 2026 01:00:12 +0000
ROA not after:            Thu 24 Dec 2026 02:00:12 +0000
asID:                     27544
IP address blocks:        192.31.80.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 10 Oct 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:49:74:7c:0a:6c:34:70:dd:bd:f3:44:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Sep 25 01:00:12 2026 GMT
            Not After : Dec 24 02:00:12 2026 GMT
        Subject: CN=193f689d-51aa-4243-a9f1-ee212cc60768
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:86:f3:4b:9d:f7:b2:3d:1f:b8:f0:1d:a2:75:cd:
                    fb:41:28:a0:af:5c:0f:e4:0e:b0:ca:91:71:4a:82:
                    39:7b:38:9a:24:8e:0a:cc:f2:6e:ad:ab:ec:a9:99:
                    d4:4c:21:cc:30:c5:b2:1f:e4:ca:c7:57:86:3a:a2:
                    e6:69:47:b6:cb:44:2a:1d:d5:e8:5f:54:7b:9d:5e:
                    f0:70:fb:9e:cb:06:ca:15:e2:9a:98:45:05:85:8a:
                    0a:8e:0c:75:13:17:d8:56:75:73:ef:f7:72:c2:8d:
                    72:92:e3:5a:14:05:d3:9d:7a:45:c8:68:9d:8e:b6:
                    27:66:90:11:40:a6:d9:80:8f:62:d9:ef:76:f6:79:
                    27:90:bc:09:32:0f:68:fd:5f:78:ba:2f:f8:32:a9:
                    5d:1d:66:bb:41:4a:aa:e1:94:95:cf:96:54:58:60:
                    b1:78:a6:c9:c5:7b:d6:76:2e:c2:42:5d:65:d0:80:
                    be:9f:22:8a:a8:5d:77:51:14:a0:bc:f6:ea:46:f8:
                    81:4f:42:83:61:f4:83:63:0b:0c:14:5d:20:e6:de:
                    3b:4e:ff:b0:b4:e5:86:dc:25:62:33:dd:60:d9:55:
                    db:45:50:fc:be:93:93:60:14:d1:d6:c9:30:ba:c6:
                    20:7a:c2:2a:5f:53:c2:e2:60:aa:66:25:5f:e2:48:
                    ce:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9D:DE:90:16:9D:7C:46:4B:97:1D:59:9A:7E:5A:42:60:45:A3:26:41
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/dd9c125f-29a6-3314-85f5-50d678bb289d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.31.80.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         79:a8:41:dd:25:11:56:32:27:9a:ba:30:de:40:80:0e:ab:3b:
         dd:ea:30:ff:c7:c1:67:d9:98:92:fe:21:45:71:bb:d6:45:bd:
         40:fd:48:05:dd:14:31:f0:c7:50:a6:81:1b:f6:97:73:9d:c8:
         a2:74:cd:4a:f8:83:55:27:79:44:95:26:ef:89:09:a7:cf:27:
         b7:1c:59:ae:54:d6:d8:36:10:f8:0e:5a:76:3a:60:ee:3e:0a:
         47:1c:33:9a:38:78:bb:b1:9a:9c:68:9f:0e:62:0a:b6:0b:a5:
         12:ae:da:23:97:6d:80:ec:8f:a7:cd:24:97:f5:5f:02:31:da:
         4c:d8:a0:4a:fb:df:ea:60:e5:21:68:35:fb:0c:3a:7f:89:ee:
         ab:e5:91:4c:8d:c5:38:54:66:14:60:66:d3:40:f1:f0:8f:fc:
         a9:9e:3c:8a:3f:9b:5a:2d:2c:cf:d9:5d:82:65:3c:66:ce:87:
         91:60:62:4e:11:86:ef:da:ef:13:9d:20:45:b1:46:05:75:96:
         1c:bb:f4:45:c3:fa:cf:85:7e:7a:56:ed:62:d0:b0:39:a9:2a:
         b9:0a:35:9b:dd:6a:fd:87:77:ab:19:7a:20:84:a1:23:15:32:
         24:59:74:b7:97:9b:3a:90:a8:67:6c:e9:f6:2f:01:9c:0a:09:
         08:ed:c1:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 8 09:02:49 2026 by rpki-client