Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/0aadb4ac-42ba-3259-8f4c-8a0de82ce0e9.roa
File:                     0aadb4ac-42ba-3259-8f4c-8a0de82ce0e9.roa (raw, json)
Hash identifier:          z/leqStuBIXVIc3MZlNHVRMWx9f2bM6yXUSVsBKg69Q=
Subject key identifier:   C4:2C:4F:30:2F:14:B0:DA:6F:7F:DE:F5:69:BD:E6:5F:EB:F1:F8:59
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584D00B275743A3BF8111C1AC580
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/0aadb4ac-42ba-3259-8f4c-8a0de82ce0e9.roa
Signing time:             Fri 27 Feb 2026 14:00:40 +0000
ROA not before:           Fri 27 Feb 2026 14:00:40 +0000
ROA not after:            Thu 28 May 2026 13:00:40 +0000
asID:                     36619
IP address blocks:        192.43.172.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 04 Mar 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:00:b2:75:74:3a:3b:f8:11:1c:1a:c5:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Feb 27 14:00:40 2026 GMT
            Not After : May 28 13:00:40 2026 GMT
        Subject: CN=d7f52ad3-edab-4d98-b6e2-8b99def5325c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:35:d0:da:4d:20:e4:09:64:92:0c:18:44:1c:
                    d4:f8:67:5d:42:fe:ba:6b:dd:9c:91:3c:b6:b6:12:
                    e7:9c:37:fc:1e:6c:2c:83:19:3b:b9:41:31:38:7c:
                    47:e5:58:2f:e8:89:c2:78:2b:d8:8c:df:52:63:6e:
                    bc:6f:20:f5:9b:6f:0a:34:81:f2:39:83:93:52:d2:
                    a0:49:d5:bf:80:0f:e4:91:65:62:83:69:ac:e0:36:
                    1c:00:3b:28:0a:45:a6:12:a8:62:92:fe:4e:02:3d:
                    0b:7e:81:14:57:51:f5:c0:ae:ed:56:11:5e:08:b8:
                    40:c2:57:11:3d:6d:ca:61:f0:f8:79:8b:ed:03:fe:
                    13:89:89:47:aa:ff:1e:64:c0:1c:5f:28:cd:cc:7a:
                    fc:2e:68:f8:b0:4d:f1:e1:a3:87:9e:8a:3c:ab:25:
                    49:45:a2:53:a2:13:67:28:a5:4d:5d:9c:f7:b7:d1:
                    c0:de:8a:fc:94:33:61:f9:8a:ae:33:41:20:4f:a4:
                    d2:8b:f3:81:66:df:e4:61:3f:97:6c:a5:79:73:20:
                    1f:42:bf:af:51:33:58:d8:6b:2b:39:12:97:bf:07:
                    e2:b9:15:78:e5:a8:56:58:a2:85:a1:c4:d8:09:bf:
                    c2:05:2f:c4:91:b6:12:d3:f8:35:a6:dc:82:68:79:
                    ee:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C4:2C:4F:30:2F:14:B0:DA:6F:7F:DE:F5:69:BD:E6:5F:EB:F1:F8:59
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/0aadb4ac-42ba-3259-8f4c-8a0de82ce0e9.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.43.172.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         8a:31:82:38:dc:42:fc:ca:72:06:2f:f2:f8:8d:ce:20:3a:69:
         e0:f7:82:f1:27:ee:04:50:85:73:5d:06:a1:8d:b1:58:c2:0c:
         ef:80:da:c2:91:23:9b:2b:e1:1d:83:ac:e5:00:d7:0f:50:ec:
         77:91:45:9a:6c:d1:aa:59:ff:1d:b2:5f:7f:bf:c1:8e:ea:e7:
         78:e9:5c:7f:f1:0a:fc:d3:5e:a8:e8:cf:3d:b3:1a:a8:b0:8e:
         3a:14:e4:50:33:72:e9:5c:b0:e9:8c:19:d0:d5:18:33:67:63:
         ad:6a:5d:aa:2c:52:d2:b5:38:a2:48:e9:5a:af:3c:a3:41:5c:
         98:e2:ad:9a:0f:c6:b3:4d:0c:82:f5:94:f1:40:35:b8:e4:dc:
         3a:56:c8:c5:7e:d3:6a:3c:98:4a:cb:ae:35:1e:07:5b:9d:0e:
         34:88:7d:d4:24:af:94:e4:3e:bd:0a:ef:19:dc:db:cb:7e:ec:
         44:1c:70:e3:04:66:b3:a5:d6:5c:2a:7c:1d:89:7f:96:ee:35:
         47:25:cd:69:15:ca:5d:96:b8:c7:ed:25:91:f5:31:42:5b:e3:
         fa:ee:cc:95:48:8f:19:51:26:0a:24:01:34:d8:f1:b9:0b:16:
         61:92:c9:e2:d9:a4:1e:fd:6b:f5:53:b1:79:58:3d:5f:92:dc:
         5e:f7:c1:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 04:58:48 2026 by rpki-client