Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/f0da3b92-b1d4-382f-8c26-8f583a487c32.roa
File:                     f0da3b92-b1d4-382f-8c26-8f583a487c32.roa (raw, json)
Hash identifier:          kLspzp9m5Rp5bM0GOHDmsq0X5h2GB79uJQZFvD2PS0E=
Subject key identifier:   AE:E2:C1:A8:01:B7:3B:3A:AC:4A:5D:34:24:9A:37:63:89:EB:FA:32
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584F6292C8F8F957C01FD32AE1C0
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/f0da3b92-b1d4-382f-8c26-8f583a487c32.roa
Signing time:             Sun 04 Oct 2026 01:00:13 +0000
ROA not before:           Sun 04 Oct 2026 01:00:13 +0000
ROA not after:            Sat 02 Jan 2027 02:00:13 +0000
asID:                     396616
IP address blocks:        192.58.128.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 08 Oct 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:62:92:c8:f8:f9:57:c0:1f:d3:2a:e1:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Oct  4 01:00:13 2026 GMT
            Not After : Jan  2 02:00:13 2027 GMT
        Subject: CN=e5f20d7e-2c6d-46f5-a28d-79dde8ce880e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:c4:37:14:c4:60:bc:07:75:bd:76:db:d9:fa:
                    7e:8e:9a:ce:3f:c6:82:94:3e:e5:44:6b:1a:0d:d6:
                    9d:ca:e6:f9:ad:53:53:d1:bb:9c:1f:f4:a0:6c:14:
                    6f:ac:89:63:53:61:a8:16:ba:fe:a2:68:80:6b:ff:
                    61:e1:49:a4:70:d8:99:ab:4c:e8:86:1b:7c:da:9f:
                    fb:af:d9:ca:7a:eb:a7:bf:1d:44:8a:14:a8:80:35:
                    0f:6d:2a:30:70:81:e2:db:ab:1b:39:3f:b5:8a:7b:
                    90:9a:5b:90:49:d3:6a:ea:97:89:6b:07:74:05:80:
                    a1:26:3b:92:d8:df:ed:36:84:7f:ff:fc:85:86:00:
                    20:29:a0:5a:0e:cf:d8:17:3c:bf:62:bc:63:17:cf:
                    a9:61:71:33:f6:3c:2e:b8:fd:77:cc:83:53:56:87:
                    d1:9b:3b:33:43:86:6b:2e:89:1d:dd:66:34:cd:e3:
                    b2:6e:3c:56:f2:af:5e:0f:7e:95:ca:a3:6e:e2:c8:
                    3e:2d:3a:1e:48:c0:fb:41:25:8d:92:f2:2b:60:d3:
                    92:d5:ee:29:5f:50:03:8f:76:cc:10:ce:9b:a4:d6:
                    d2:f9:7c:76:be:3d:f5:21:d1:d4:a6:8f:ed:26:12:
                    62:51:86:58:15:46:82:88:29:4c:b8:c3:bd:20:83:
                    83:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AE:E2:C1:A8:01:B7:3B:3A:AC:4A:5D:34:24:9A:37:63:89:EB:FA:32
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/f0da3b92-b1d4-382f-8c26-8f583a487c32.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.58.128.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         16:aa:66:6f:58:23:5a:41:b9:99:02:d4:79:39:7a:0a:78:bd:
         ae:5c:ed:ed:02:ae:aa:75:4f:47:a3:74:51:7f:c0:d3:5d:58:
         7b:d5:36:b6:24:7f:c5:1f:c9:c2:ab:76:0c:39:1c:7a:86:55:
         34:05:88:39:8a:d5:13:c5:0a:e1:09:8a:a3:bf:0f:da:ab:a6:
         db:12:48:8d:bb:97:8b:d3:eb:75:be:8e:84:f1:33:e4:f7:ff:
         83:1f:07:70:57:46:e0:f3:ed:d8:6e:ec:f7:2f:e7:22:2e:b5:
         f5:d1:e6:ae:b4:78:6d:1e:1d:91:04:a4:5d:20:f6:05:23:5c:
         02:b7:9f:6e:51:37:19:dc:7b:c1:29:0e:0f:21:81:eb:87:34:
         3b:75:ea:06:4d:97:8f:f7:90:9a:50:72:2d:95:c7:2f:f7:2f:
         bd:26:47:85:04:e9:ec:8c:06:2f:a7:e7:70:be:13:48:6c:31:
         c6:d7:21:f8:15:39:d8:8b:aa:dd:8b:52:de:31:0d:32:e0:ea:
         38:04:24:53:45:9d:ac:ab:ad:be:50:c7:ed:14:68:84:ee:9f:
         ed:ce:90:53:65:94:fb:5a:44:ca:b5:e5:c0:02:c4:c6:83:c0:
         08:83:c6:4b:55:5d:94:47:0e:dc:08:18:f4:27:70:c4:dd:35:
         32:21:bb:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 6 22:10:33 2026 by rpki-client