Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/08b98604-fe21-3dd7-96b5-78d7a42f9bb1.roa
File:                     08b98604-fe21-3dd7-96b5-78d7a42f9bb1.roa (raw, json)
Hash identifier:          /u3g5+xgPWsoo/pisXMcxW29FaeT3baIcNU5f2l1co8=
Subject key identifier:   71:25:FA:BE:57:2F:A0:AA:C8:C0:F6:4A:AA:45:E7:BC:68:17:77:A3
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584CEBC22B7D526A19B7CFF46C98
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/08b98604-fe21-3dd7-96b5-78d7a42f9bb1.roa
Signing time:             Fri 20 Feb 2026 02:00:32 +0000
ROA not before:           Fri 20 Feb 2026 02:00:32 +0000
ROA not after:            Thu 21 May 2026 01:00:32 +0000
asID:                     40717
IP address blocks:        192.12.94.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 04 Mar 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:eb:c2:2b:7d:52:6a:19:b7:cf:f4:6c:98
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Feb 20 02:00:32 2026 GMT
            Not After : May 21 01:00:32 2026 GMT
        Subject: CN=aa5ad4b0-faf1-4941-a8c5-6c038a16f29f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:5e:51:88:99:bd:68:a8:e2:ce:bc:cd:48:52:
                    c0:70:c9:37:aa:5d:0a:71:51:e3:c4:29:1c:af:63:
                    f4:99:a0:46:d7:41:b4:3c:39:f0:0a:b0:55:4f:71:
                    e8:5a:c6:03:ce:69:13:53:af:8a:a9:d1:80:27:33:
                    95:87:1c:10:f5:86:2e:5b:2f:fd:52:73:e2:9b:21:
                    4b:2c:ba:b4:91:74:59:56:bd:4f:59:52:a0:95:54:
                    cf:41:eb:00:5c:ff:9c:47:ae:a6:75:43:bb:7d:d2:
                    e9:f0:14:3a:cc:7e:2a:5a:29:ac:9d:52:96:e6:d0:
                    a2:fc:5d:77:26:6a:21:5b:85:be:a8:f6:ae:02:f8:
                    d5:d3:e7:8c:18:a9:ef:55:52:f1:ae:3f:8f:a0:de:
                    a0:63:76:40:2f:a4:e1:11:57:6f:a8:7b:fe:87:fe:
                    33:c9:01:52:f7:27:ff:09:66:dd:73:d5:5d:8f:ba:
                    b0:96:6a:a1:d8:93:1f:c6:92:98:11:00:cc:78:30:
                    ef:1c:65:f6:f9:2c:ca:30:16:53:ec:1d:61:2c:e9:
                    9a:9a:d3:89:f5:7a:ea:08:9f:80:b7:26:48:57:78:
                    dc:6e:9f:ce:8d:24:29:36:95:5c:49:da:5f:10:ba:
                    b3:a8:c5:56:d0:d7:9f:1c:24:e1:35:e8:ad:eb:ca:
                    49:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                71:25:FA:BE:57:2F:A0:AA:C8:C0:F6:4A:AA:45:E7:BC:68:17:77:A3
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/08b98604-fe21-3dd7-96b5-78d7a42f9bb1.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.12.94.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4e:ca:f5:81:ad:b6:79:4e:dc:ee:dc:4d:8b:e1:de:cc:e7:b6:
         4d:bf:05:38:6d:3a:74:e3:c3:47:4f:b6:f2:c8:ee:51:c5:e0:
         79:cb:96:54:88:b5:b1:5c:b7:1b:d5:ac:52:9a:fd:97:ff:d6:
         43:dc:3c:89:98:50:95:c0:7c:86:f6:54:2f:a9:4d:f1:e4:9f:
         dd:00:45:b4:71:a0:e9:de:9b:41:48:d6:46:d8:96:99:2a:2a:
         aa:bf:5b:e3:f9:21:be:cd:d6:ad:d4:47:e0:2d:61:09:aa:45:
         81:74:f8:28:db:89:32:3f:9f:58:cd:a5:1e:b3:dc:91:bc:6a:
         7c:b4:d3:02:0a:34:4c:77:ab:6f:c2:c6:92:d4:4a:eb:32:68:
         28:10:65:bb:1c:6f:87:bb:61:f1:aa:2d:1c:02:6b:96:b3:b8:
         20:ca:96:10:e3:83:02:e4:e7:60:d3:5f:a8:11:a2:45:6e:55:
         39:ae:ee:3f:aa:fb:22:b1:7a:c4:91:c0:ed:03:ce:35:90:53:
         1f:0c:90:49:47:7a:b4:0b:2a:8f:25:90:7b:38:af:23:2f:30:
         d0:ba:7c:23:ed:35:c4:3c:71:09:af:34:27:57:df:84:8b:4d:
         50:e6:dd:48:4b:1c:9f:db:13:93:ce:d6:a5:57:94:05:fa:9c:
         97:2a:81:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 03:14:05 2026 by rpki-client