Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/1a9effa8-5594-3da1-9710-1efcb930c0d5.roa
File:                     1a9effa8-5594-3da1-9710-1efcb930c0d5.roa (raw, json)
Hash identifier:          nnQclETz20G+I4ewnGtJcHt/85pMSDgtpJ37A/qvqp8=
Subject key identifier:   16:92:43:B4:C5:E9:B5:85:C7:93:F0:9F:A0:90:C4:8E:B9:CC:E6:B8
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584D86B79FF506545BBCC7C5DB80
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/1a9effa8-5594-3da1-9710-1efcb930c0d5.roa
Signing time:             Thu 16 Apr 2026 14:09:52 +0000
ROA not before:           Thu 16 Apr 2026 14:09:52 +0000
ROA not after:            Wed 15 Jul 2026 14:09:52 +0000
asID:                     396561
IP address blocks:        192.42.173.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 19 Apr 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:86:b7:9f:f5:06:54:5b:bc:c7:c5:db:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Apr 16 14:09:52 2026 GMT
            Not After : Jul 15 14:09:52 2026 GMT
        Subject: CN=9093771a-c5af-4163-a2c1-33ab4146e743
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e6:ce:ee:e9:8b:17:bd:9c:5d:3a:6c:2c:01:78:
                    02:19:68:e1:da:12:f2:76:c8:22:89:54:e2:40:ee:
                    3c:7e:f9:95:22:a3:0b:ff:5c:29:73:4f:0d:3a:f2:
                    61:6a:ff:2c:1e:34:2f:7c:ca:60:85:fa:55:bf:b5:
                    16:62:d6:11:7f:ed:50:da:64:0d:d7:c7:9c:31:65:
                    24:3a:af:90:2c:b9:52:d8:19:91:ed:9e:f4:61:d7:
                    91:87:7f:50:52:14:9e:67:c5:2c:a8:81:81:47:36:
                    03:c2:7c:20:5f:3c:aa:b4:e3:f8:33:e1:c3:54:5b:
                    01:b5:ea:6c:4c:71:e9:d9:c0:10:03:cf:eb:7a:96:
                    83:86:ff:56:50:c3:7b:ec:be:8b:f4:08:02:23:a8:
                    4f:ef:56:fd:1d:75:70:d0:66:d1:f4:c8:19:ec:9e:
                    70:85:0d:c2:46:49:47:a0:75:78:86:bd:48:7d:ab:
                    88:1c:97:45:83:ba:e4:0d:04:f9:a6:56:34:f3:1c:
                    e0:d2:5a:01:a7:50:59:ba:a0:d4:4d:b7:6e:6d:86:
                    7b:04:e7:e9:05:73:6e:6f:eb:c3:37:a1:de:4f:6f:
                    b1:8d:12:7b:f2:f3:c7:57:01:2a:66:7b:3c:78:55:
                    b5:90:e5:b7:f6:24:75:27:6d:fb:aa:1c:40:4e:fd:
                    88:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                16:92:43:B4:C5:E9:B5:85:C7:93:F0:9F:A0:90:C4:8E:B9:CC:E6:B8
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/1a9effa8-5594-3da1-9710-1efcb930c0d5.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.42.173.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         ab:a7:43:b7:b7:03:e4:cd:7e:95:95:a6:ff:0a:f3:bb:f1:79:
         d9:0a:9e:9e:b3:17:e6:05:e3:f1:15:68:6f:b8:56:ab:f0:94:
         bd:7f:69:e0:b0:c7:48:e0:dc:3c:e1:57:87:36:ae:2a:9b:21:
         6d:44:a9:c6:86:f5:a7:06:3a:f7:c6:0c:34:fe:ee:4c:1b:a5:
         78:fc:db:b8:98:a0:fe:5a:ca:a2:15:59:e4:ca:d3:ad:f7:40:
         58:ef:c8:cd:84:be:df:9a:e1:8e:9c:11:ba:a0:a8:de:40:99:
         37:87:90:ae:02:a9:99:4f:0b:88:67:d0:6a:34:0e:2b:e0:c2:
         df:63:88:74:62:96:84:f9:08:10:06:b0:74:e1:40:cc:6f:f0:
         56:18:fd:53:95:03:da:ed:b7:7d:16:7e:c7:c0:44:c6:51:eb:
         7d:f0:aa:20:b0:c8:b1:98:65:fb:c7:ff:cb:90:04:d1:25:be:
         c5:2a:99:df:98:a8:cf:21:73:bf:2d:8d:24:0d:ca:95:c3:47:
         f7:2e:20:f0:a4:7e:6d:ae:b4:bd:5c:6c:de:84:0f:e6:98:41:
         cd:e9:f4:30:3c:64:00:57:05:9c:de:7b:1f:e3:39:e7:cf:60:
         84:3b:8f:de:37:b1:8d:a3:4d:8a:43:75:0a:80:9f:68:b1:a8:
         28:78:7d:e1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 12:52:40 2026 by rpki-client