Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/3b8424c1-a8c0-3fea-b6d0-24b32e875f3d.roa
File:                     3b8424c1-a8c0-3fea-b6d0-24b32e875f3d.roa (raw, json)
Hash identifier:          WFQwNJ2d0Pgu8KHfDDkohBy3+rVigMVp7uEDla/QphE=
Subject key identifier:   74:43:64:D1:51:A7:C7:C1:9E:9C:32:BB:28:DA:43:F4:2C:EE:9D:8C
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584EA799B5E0A66CD94BB1EEE880
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/3b8424c1-a8c0-3fea-b6d0-24b32e875f3d.roa
Signing time:             Wed 29 Jul 2026 01:00:12 +0000
ROA not before:           Wed 29 Jul 2026 01:00:12 +0000
ROA not after:            Tue 27 Oct 2026 01:00:12 +0000
asID:                     396586
IP address blocks:        192.35.51.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 30 Jul 2026 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:a7:99:b5:e0:a6:6c:d9:4b:b1:ee:e8:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Jul 29 01:00:12 2026 GMT
            Not After : Oct 27 01:00:12 2026 GMT
        Subject: CN=de977733-a935-4770-b818-a16f32cd4e31
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:45:39:06:61:11:fd:28:fe:f7:ee:5a:7d:7a:
                    a3:fd:90:3c:6d:e9:2e:3f:a7:23:ad:b3:04:c8:bd:
                    b1:5f:f5:d6:42:03:68:cf:e6:26:ba:96:26:a7:fe:
                    78:a6:89:b6:50:66:af:3f:7a:8d:3f:df:34:37:fc:
                    95:14:1e:b0:69:70:67:d5:c1:15:cb:b1:05:68:70:
                    f7:5b:5b:5f:f4:1c:29:13:77:03:15:43:34:0a:32:
                    5d:07:d0:c5:71:85:f1:5a:0d:9c:03:6c:0d:32:e9:
                    6f:80:26:61:49:14:de:b5:f3:61:9e:4d:ac:5d:fa:
                    2f:fc:9a:26:63:f8:30:8a:be:6b:8a:4e:6e:05:5e:
                    b4:07:1d:9e:ab:02:9a:ea:1d:59:8e:4f:c7:50:1a:
                    62:88:cd:eb:6b:11:ae:3f:fb:e2:60:6b:37:42:26:
                    1c:bf:69:be:75:0b:6b:54:f6:af:9e:b8:20:72:5f:
                    d6:71:48:b7:5f:fd:46:c3:b0:d0:47:0f:d5:18:ab:
                    f5:77:76:27:55:5d:14:d5:7b:21:1e:76:7c:5d:b9:
                    f3:b8:f6:27:61:c7:bb:72:26:cf:70:03:2c:f9:4d:
                    3a:18:13:b4:ef:d6:d3:eb:3c:ac:78:6c:5c:9c:58:
                    09:95:29:30:ea:b3:6d:f7:31:eb:94:f7:86:9b:06:
                    aa:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                74:43:64:D1:51:A7:C7:C1:9E:9C:32:BB:28:DA:43:F4:2C:EE:9D:8C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/3b8424c1-a8c0-3fea-b6d0-24b32e875f3d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.35.51.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         63:86:eb:6b:27:f2:8c:51:cf:5a:eb:a3:24:a1:0d:fb:d1:79:
         31:71:dc:c4:87:f0:b3:bb:d2:6f:cd:07:2e:42:06:03:87:f9:
         c7:40:6f:ae:55:96:1f:f3:ed:9e:38:81:60:25:8f:56:de:e2:
         00:5a:df:ac:bd:bf:eb:48:3e:f8:84:2d:0e:99:58:d0:31:4b:
         aa:80:de:1f:f4:da:32:67:97:05:5d:ab:bf:e9:10:6c:49:d3:
         16:4f:55:b5:73:79:00:d3:c0:40:5a:57:3b:b7:63:80:01:e8:
         c9:c2:71:4e:dc:53:1a:20:85:95:f7:91:6e:fd:e1:d2:d3:c6:
         5f:a9:73:58:7a:f5:e9:9c:c1:c3:52:3b:61:79:2e:09:fd:04:
         b2:ec:4e:ab:cf:f5:9b:18:3d:6d:38:41:8a:ee:ab:2d:32:89:
         d2:b4:2a:2f:13:d9:8d:f5:8f:dc:e5:6c:f6:4e:00:5d:1d:f8:
         41:0e:ba:8e:f2:0e:96:a7:bc:ed:99:16:48:b4:31:7f:72:8b:
         f3:98:06:bc:96:43:db:5c:ef:6c:04:b3:1a:ac:0a:e4:bf:96:
         dc:f0:ce:ee:eb:e6:9e:0a:8b:1c:b1:a5:80:76:9b:43:ee:f4:
         21:51:68:c5:13:d2:40:71:73:3b:83:59:ce:9d:1d:a0:e7:9d:
         9a:01:50:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 03:32:58 2026 by rpki-client