Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/01f52e36-05e7-3b97-ab36-382365954ffb.roa
File:                     01f52e36-05e7-3b97-ab36-382365954ffb.roa (raw, json)
Hash identifier:          TY4FifnjdmN92Af0pCSqLGn15UPKY5gmEHe54y0h7iU=
Subject key identifier:   C9:6C:60:0A:08:A4:C6:32:96:F3:B0:AB:29:A4:1A:13:C7:D6:D6:7F
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584D703FD7C67803632C1726B9A0
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/01f52e36-05e7-3b97-ab36-382365954ffb.roa
Signing time:             Wed 08 Apr 2026 13:00:33 +0000
ROA not before:           Wed 08 Apr 2026 13:00:33 +0000
ROA not after:            Tue 07 Jul 2026 13:00:33 +0000
asID:                     36630
IP address blocks:        192.42.175.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 19 Apr 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:70:3f:d7:c6:78:03:63:2c:17:26:b9:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Apr  8 13:00:33 2026 GMT
            Not After : Jul  7 13:00:33 2026 GMT
        Subject: CN=4ab65f0b-f013-4642-830c-57fc6b011618
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8e:cd:19:41:94:e9:b8:ea:51:b4:af:73:68:f2:
                    8e:7e:e0:ab:0c:16:95:78:66:d3:24:33:49:fb:bd:
                    ed:38:24:66:0e:2b:eb:32:8f:18:88:83:c8:a2:96:
                    37:c7:1b:a0:77:52:48:ec:df:77:8d:1a:a9:ca:14:
                    1d:ba:03:a1:e8:c2:91:6d:14:71:e3:c2:f0:65:19:
                    24:c8:ca:98:6e:0f:1b:62:1e:b3:0a:37:ab:f6:fc:
                    fd:69:67:12:d3:2b:e4:04:20:5b:c4:ed:b7:4f:fe:
                    f2:83:4c:e1:be:b4:c4:50:bb:37:36:8c:e6:f2:f1:
                    d2:69:20:3e:6c:1e:2f:ff:34:4c:20:2c:01:8d:e6:
                    8e:45:09:bd:dc:fb:96:b0:a3:ae:5c:e4:bf:d6:91:
                    31:8d:fd:14:e6:e2:cd:58:d4:07:d2:bc:46:9f:89:
                    43:c4:c4:09:59:56:4b:1e:a7:65:a7:95:61:41:9f:
                    aa:63:6b:c3:9e:34:fe:e9:99:f8:32:49:56:89:72:
                    22:09:0f:0f:4b:21:63:28:2e:cf:6f:d3:62:de:5f:
                    9b:b1:78:81:e8:79:79:3f:7c:b0:f9:12:8c:40:ae:
                    88:fc:12:e5:f3:7f:4f:2d:46:96:a7:78:ee:a5:96:
                    83:35:2f:da:a2:aa:92:2c:30:65:98:59:3b:b6:f6:
                    23:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C9:6C:60:0A:08:A4:C6:32:96:F3:B0:AB:29:A4:1A:13:C7:D6:D6:7F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/01f52e36-05e7-3b97-ab36-382365954ffb.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.42.175.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         07:73:3f:c3:2b:49:0c:87:fa:50:1e:9a:76:9a:d3:75:87:e0:
         e0:83:97:f1:07:ef:29:7b:e2:78:7e:94:cd:3f:7f:72:be:1b:
         ad:16:a7:bd:b0:7e:50:0b:45:77:71:df:a3:17:f2:9d:76:b1:
         75:8a:a4:8d:64:c1:a8:23:28:ef:fc:2e:46:7f:ad:07:d4:9f:
         dc:ba:3e:93:eb:9a:f2:b9:3c:f5:81:a9:a3:20:36:10:70:89:
         e9:06:65:b2:51:a2:92:fa:d7:62:4b:b8:81:47:49:44:d2:07:
         a7:22:a9:f5:89:67:31:d2:37:e8:a9:54:6e:93:4b:36:8b:de:
         f7:25:4b:d6:0a:1f:9d:d2:02:18:d2:b3:85:b7:4a:94:8b:c2:
         5b:1f:b4:87:72:b6:24:d4:e2:29:6d:c3:e1:a2:de:69:df:93:
         6c:72:8b:89:4a:6b:75:a8:9e:89:f0:70:fc:c4:ee:3f:8f:34:
         5f:70:20:13:75:6d:56:fe:8e:be:96:49:a9:6e:bb:c0:c1:8b:
         14:71:51:73:0f:14:52:09:85:9a:30:ee:ba:6a:f9:1c:3a:da:
         3e:27:88:4a:e7:8f:b9:58:e5:9f:5d:a3:2b:e7:f7:ae:31:91:
         24:68:98:d1:70:55:77:d2:33:e1:dd:b6:41:7d:11:04:8d:95:
         b2:aa:c0:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 16:43:03 2026 by rpki-client