Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/29307df3-e2cb-3fc5-a3ab-cdaf24f0a3f9.roa
File:                     29307df3-e2cb-3fc5-a3ab-cdaf24f0a3f9.roa (raw, json)
Hash identifier:          /oJssHyy+K7hdUa/OjAc5rxWHnXxrPGlz23i0Vtk9VE=
Subject key identifier:   17:91:E0:F0:2A:FD:ED:3A:41:16:8A:3F:B5:4D:0A:7F:F1:D0:E6:E7
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584D00B29BBF0FB3863AD47A7B00
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/29307df3-e2cb-3fc5-a3ab-cdaf24f0a3f9.roa
Signing time:             Fri 27 Feb 2026 14:00:40 +0000
ROA not before:           Fri 27 Feb 2026 14:00:40 +0000
ROA not after:            Thu 28 May 2026 13:00:40 +0000
asID:                     32651
IP address blocks:        192.43.172.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 04 Mar 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:00:b2:9b:bf:0f:b3:86:3a:d4:7a:7b:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Feb 27 14:00:40 2026 GMT
            Not After : May 28 13:00:40 2026 GMT
        Subject: CN=7513d9d4-44b1-4fb8-8073-deed23083e42
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:2d:68:3e:72:07:cf:9f:a1:37:77:4b:22:60:
                    18:ac:df:34:e6:b9:89:06:c5:c4:ed:c4:3b:f3:ab:
                    b6:76:04:58:d4:dd:4a:50:74:74:cc:b2:86:a6:ba:
                    8e:54:09:0d:b5:41:1f:d6:16:2d:7a:fc:86:0b:ec:
                    15:03:29:32:5a:24:f7:fe:5a:50:11:b9:3f:15:ef:
                    d6:63:cc:bd:eb:74:ed:6d:0a:55:e6:ae:5f:1b:96:
                    66:03:a8:6e:77:d4:98:dd:45:bf:cc:66:1a:43:d2:
                    6c:e7:39:da:c3:fc:49:92:01:09:dd:d5:bc:0e:c2:
                    9e:ba:be:06:e8:88:e8:c6:8a:cf:5f:c2:9e:e9:7b:
                    77:fa:c3:8a:cb:dd:68:65:13:6c:07:0d:ba:38:7d:
                    28:e8:bf:77:c8:1a:44:46:7b:30:f5:fd:ed:36:18:
                    e1:96:57:2a:ba:15:1c:7f:3a:e6:7b:55:4a:dc:8b:
                    3c:9f:9c:b9:e4:a9:f3:c2:de:5e:53:3a:69:de:18:
                    f5:0b:03:7a:24:41:9e:1e:24:35:45:b0:78:48:07:
                    aa:53:47:99:56:f0:3f:db:78:2e:87:7a:ca:8e:e8:
                    0a:ed:6a:cb:57:9f:a6:c7:65:34:4e:59:21:7b:4c:
                    0e:3a:fa:a2:68:02:c5:e0:cd:25:99:7e:c7:4b:e5:
                    3c:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                17:91:E0:F0:2A:FD:ED:3A:41:16:8A:3F:B5:4D:0A:7F:F1:D0:E6:E7
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/29307df3-e2cb-3fc5-a3ab-cdaf24f0a3f9.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.43.172.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         03:0e:9d:8a:46:40:32:d4:db:26:cb:72:97:0a:f6:78:80:a3:
         58:b1:28:c4:ce:9f:cd:49:a8:7d:b3:4d:ea:0a:01:10:7e:ae:
         b7:3d:75:2b:c4:4a:ff:07:08:8b:c5:e5:68:41:4c:55:b9:47:
         2b:1a:af:c0:12:1e:bf:2a:09:6c:52:fe:44:b2:e2:3f:32:89:
         fe:59:fd:4d:6b:f2:46:52:44:9a:af:ac:56:f6:4a:6b:31:7d:
         95:4b:aa:91:6b:41:95:af:9f:9f:61:ba:14:05:e7:fc:84:5e:
         a0:89:18:67:15:8a:8d:7b:28:a0:ff:24:df:c8:45:d6:bb:02:
         ac:fc:55:db:3d:83:94:95:f0:e4:2c:95:21:bc:4e:f5:b8:95:
         29:50:05:26:38:64:48:ed:a1:6b:76:06:6d:62:6b:12:53:7a:
         26:2f:75:83:3f:7a:53:26:4c:28:33:28:27:06:72:a3:44:69:
         06:67:2e:ed:0d:94:77:ea:bb:7e:76:5e:b1:28:ee:06:1d:a4:
         68:f3:d2:a0:ac:da:2f:aa:48:58:d9:6d:12:5f:3f:0f:5a:14:
         23:c2:25:12:ce:e8:cd:a1:1e:15:f4:87:b7:2e:28:9d:0e:0f:
         b4:38:8c:82:74:45:1b:46:cf:16:9d:78:11:20:13:78:46:16:
         dd:a2:b1:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 06:49:25 2026 by rpki-client