Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/ff1ca7d5-436c-390b-86cc-126186f444fd.roa
File:                     ff1ca7d5-436c-390b-86cc-126186f444fd.roa (raw, json)
Hash identifier:          +j52SakWRCxtSZ8vIJnxiLPDY8yxcxBy47WeawGYNjY=
Subject key identifier:   5B:B6:E3:30:AD:DB:A7:FF:AF:2D:25:BE:06:58:47:27:65:07:C7:98
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584F62931218CC688179B6FA26C0
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/ff1ca7d5-436c-390b-86cc-126186f444fd.roa
Signing time:             Sun 04 Oct 2026 01:00:13 +0000
ROA not before:           Sun 04 Oct 2026 01:00:13 +0000
ROA not after:            Sat 02 Jan 2027 02:00:13 +0000
asID:                     22547
IP address blocks:        192.58.128.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 10 Oct 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:62:93:12:18:cc:68:81:79:b6:fa:26:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Oct  4 01:00:13 2026 GMT
            Not After : Jan  2 02:00:13 2027 GMT
        Subject: CN=7e4fa0a3-4202-4c2b-bb7c-10de008b8c82
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:7a:5c:fc:52:3b:70:d2:0f:24:59:24:c2:ca:
                    22:90:7c:3f:35:99:4b:b6:70:7e:d0:9e:3c:78:4e:
                    86:56:db:bb:28:72:38:65:ab:b3:47:80:64:83:5e:
                    24:ec:e0:45:8c:87:72:93:b7:97:ac:78:a1:d2:39:
                    2f:26:59:bf:a1:30:a3:45:07:cc:ee:f3:6a:33:1e:
                    aa:bd:fc:a7:ac:82:35:fb:62:40:37:d3:76:90:c1:
                    b7:ca:5d:7e:84:41:b7:3d:b1:3e:22:50:d0:b3:41:
                    20:30:3b:40:dd:c3:38:25:fb:ff:c9:df:8b:28:5c:
                    58:5d:13:cc:ab:5b:5b:ef:96:fe:81:2c:ce:c5:40:
                    a1:be:1e:8e:39:65:7a:00:d9:3a:50:c0:7d:9a:96:
                    57:a2:60:1c:f2:82:c3:c9:a2:37:33:d7:0b:a6:8a:
                    9a:4c:18:4c:39:a4:c3:f4:85:87:f6:43:4e:e5:ea:
                    45:4e:4b:ac:9b:30:04:ec:30:02:97:cd:51:d3:7f:
                    af:79:ae:c5:f0:17:a9:eb:a6:d4:5d:56:6c:08:42:
                    84:2c:b5:8b:33:81:34:73:07:81:74:ed:8f:69:82:
                    f4:8f:21:7f:96:db:d8:c2:6a:6e:a7:02:5d:70:c2:
                    0c:9f:b8:53:7b:5b:4d:7b:0c:de:06:58:14:8d:e5:
                    5d:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5B:B6:E3:30:AD:DB:A7:FF:AF:2D:25:BE:06:58:47:27:65:07:C7:98
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/ff1ca7d5-436c-390b-86cc-126186f444fd.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.58.128.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         26:16:e7:cb:0a:af:c9:03:d9:aa:2a:37:22:1d:0a:52:c2:d7:
         2e:13:77:f1:01:03:f6:77:70:c0:3f:b2:ab:43:a7:7d:c3:6a:
         e4:1e:1e:75:99:7a:7a:db:db:48:1e:a8:f4:f4:14:9a:d4:e3:
         50:1d:47:1e:7f:bd:f8:de:be:1d:bc:6d:e3:c9:1c:e2:8f:a7:
         9c:71:28:17:51:d2:af:68:c0:8b:91:2e:c8:e5:1c:d4:e0:13:
         62:89:3c:e1:e7:05:d5:4c:c4:3a:f6:32:e3:d9:23:dc:4d:61:
         21:d4:13:98:56:fe:8f:df:8e:ba:e7:3a:e0:f4:e2:8e:28:b4:
         f4:69:4d:36:9f:8b:57:71:92:67:6d:ae:99:8f:45:a4:f2:50:
         74:25:52:5f:a8:ab:98:33:cf:34:e4:8b:29:ca:aa:91:22:9e:
         45:a5:7b:53:20:70:15:32:9b:5b:f1:4c:4f:ea:07:8a:f0:ee:
         e1:81:50:f9:69:c2:69:67:62:71:45:16:39:a5:a6:66:7e:99:
         97:61:91:f9:3f:24:7f:64:52:01:e9:28:5c:b5:53:5d:4b:3c:
         60:4b:e7:9c:73:b1:53:7a:eb:be:b8:c9:79:df:70:60:a2:81:
         5e:36:74:0f:ba:60:1f:e8:02:62:61:f3:80:bd:41:22:ba:96:
         33:ed:f8:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 8 07:20:34 2026 by rpki-client