Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/123fd0b5-96e2-3154-afb7-f2d20a939c64.roa
File:                     123fd0b5-96e2-3154-afb7-f2d20a939c64.roa (raw, json)
Hash identifier:          BkMj51IPJQ1dHtVIKVbNWV5aS2Y1Oz6VCTRUjk09tL0=
Subject key identifier:   44:2E:B3:FB:24:1E:7B:C0:F3:E2:3F:47:36:EF:1F:F3:97:AA:E2:43
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584D00B29A5FC089AE23902F3C80
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/123fd0b5-96e2-3154-afb7-f2d20a939c64.roa
Signing time:             Fri 27 Feb 2026 14:00:40 +0000
ROA not before:           Fri 27 Feb 2026 14:00:40 +0000
ROA not after:            Thu 28 May 2026 13:00:40 +0000
asID:                     396566
IP address blocks:        192.43.172.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 04 Mar 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:00:b2:9a:5f:c0:89:ae:23:90:2f:3c:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Feb 27 14:00:40 2026 GMT
            Not After : May 28 13:00:40 2026 GMT
        Subject: CN=8ba92010-2b62-4ac7-8716-a21037bf51f2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:1f:5a:c0:6c:a1:5a:0e:30:b2:78:b1:76:e2:
                    e1:b9:62:cb:88:3f:e4:64:f1:86:97:7b:51:fe:61:
                    97:8e:d4:80:5f:6e:6b:72:be:31:88:4e:19:3c:41:
                    5e:4e:12:09:4b:f7:b6:76:1a:47:c3:a4:62:4b:72:
                    55:98:5d:c6:30:c1:04:f9:80:26:0d:a7:dd:db:7e:
                    10:6b:01:97:b8:fb:31:04:cf:12:60:66:b8:21:4f:
                    3a:14:a6:ba:fe:29:b2:99:91:f9:22:61:86:05:66:
                    00:7e:62:38:59:5b:44:c0:84:8f:bd:ac:3b:70:26:
                    df:d7:10:1b:11:c8:f6:4d:69:85:74:99:b6:6d:04:
                    7b:6b:7c:5d:ff:77:64:9d:9f:d4:67:07:98:5c:4a:
                    4a:44:be:80:d5:d8:74:3a:99:b2:be:9c:f2:b2:86:
                    71:94:61:d1:63:02:da:a4:18:50:bd:74:f3:57:8a:
                    23:5b:42:17:6e:da:34:b7:36:b1:da:3e:54:a0:df:
                    81:27:d4:ee:4e:b0:61:79:46:88:a8:f5:85:72:c6:
                    73:b1:cb:d2:a8:e2:dd:6a:78:b8:0a:df:81:6c:6e:
                    3d:d8:f6:b3:82:ef:24:5a:7f:94:65:fd:7b:0b:3f:
                    ee:56:9e:30:e3:da:dd:8d:99:d5:5b:e5:ed:7b:df:
                    67:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                44:2E:B3:FB:24:1E:7B:C0:F3:E2:3F:47:36:EF:1F:F3:97:AA:E2:43
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/123fd0b5-96e2-3154-afb7-f2d20a939c64.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.43.172.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6b:9c:2e:f2:cd:77:a9:08:97:34:18:b8:fd:ca:0f:34:37:92:
         79:63:e0:9f:f9:65:28:83:55:e1:3a:13:9d:ec:46:32:bd:e9:
         8f:16:11:90:19:aa:36:0c:7b:62:59:35:f8:69:03:f8:75:9d:
         fe:80:2b:28:ac:47:4e:1b:42:45:55:08:28:10:ee:4d:a4:00:
         3c:76:83:af:ba:fd:88:1b:c6:8c:56:8b:0c:f2:fc:ad:a8:fe:
         47:27:27:41:c3:7f:d8:56:18:1c:3c:cf:ea:9a:7c:ae:73:03:
         ca:c0:ba:9c:8e:a9:0b:8e:eb:9c:76:b3:8d:99:c6:e6:86:b1:
         c2:48:53:96:6f:de:56:aa:fe:c9:ee:3d:a5:e7:dd:02:2b:d5:
         71:f2:bf:b9:b4:ca:bf:df:31:08:49:e7:68:8f:2c:5e:0b:38:
         92:49:7f:c4:34:59:14:46:10:79:a5:2b:08:24:26:d4:6d:a6:
         29:27:b8:08:f0:39:7f:16:0a:d9:62:0f:15:65:08:06:e7:63:
         ae:29:d6:00:22:e9:54:52:52:e2:c8:17:0b:d8:eb:20:fd:d2:
         25:7f:46:89:29:95:46:34:ca:34:3e:6c:6b:9f:1a:b6:3a:77:
         83:05:7e:e1:2d:a9:6c:2a:66:1c:a7:5e:3e:e3:c2:ca:3a:59:
         56:cf:99:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 16:45:58 2026 by rpki-client