Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/3ffa1a6f-72fd-330f-a81c-ebf4bd3844e6.roa
File:                     3ffa1a6f-72fd-330f-a81c-ebf4bd3844e6.roa (raw, json)
Hash identifier:          0z5OoomaVHSrFiCyBj5GyA0zQI55amxw4Xm8wZ9in7Y=
Subject key identifier:   45:94:33:9B:DC:EF:19:68:68:DE:84:F3:FD:55:50:75:20:63:AD:C1
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584E9BE5362F273BE6AFBA9A4700
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/3ffa1a6f-72fd-330f-a81c-ebf4bd3844e6.roa
Signing time:             Fri 24 Jul 2026 21:00:12 +0000
ROA not before:           Fri 24 Jul 2026 21:00:12 +0000
ROA not after:            Thu 22 Oct 2026 21:00:12 +0000
asID:                     36619
IP address blocks:        192.5.6.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 30 Jul 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:9b:e5:36:2f:27:3b:e6:af:ba:9a:47:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Jul 24 21:00:12 2026 GMT
            Not After : Oct 22 21:00:12 2026 GMT
        Subject: CN=eb3c51dd-d7db-4a95-a987-336bce78ce29
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:f0:b8:34:3f:c1:3b:64:3f:f1:f6:18:ff:1e:
                    e7:e2:72:da:3d:19:35:02:4b:99:b9:0d:8a:e8:f1:
                    46:87:ee:f4:0b:df:dd:04:0a:c5:9f:c7:aa:81:2f:
                    be:1f:3f:c7:ef:4a:69:00:df:cc:0c:f9:53:7b:ed:
                    86:6a:70:0b:0c:20:c7:8d:4e:d2:86:8e:f5:76:b2:
                    55:de:8b:da:a9:fa:b7:74:80:82:71:dc:28:30:e6:
                    44:91:06:94:f5:29:39:84:1b:5a:1c:b1:bf:32:8c:
                    98:11:e8:92:fa:16:bc:8e:93:4f:10:00:49:a5:9c:
                    22:99:21:b7:19:04:20:c4:9d:2c:d1:2b:89:15:d9:
                    8e:30:84:8a:28:3d:f7:e1:9b:67:53:cd:59:83:cd:
                    77:2e:e7:97:28:d7:ea:8f:4d:35:f2:90:30:62:19:
                    c1:14:43:96:4f:dd:c5:02:80:90:5c:49:1b:6f:fd:
                    19:ff:40:f3:6d:91:7d:3b:7b:6c:de:09:d6:bb:34:
                    13:f5:b2:05:d8:2c:e3:a7:21:83:b6:02:3a:ec:4d:
                    32:17:10:2f:77:3e:59:2b:0f:9a:48:26:86:20:af:
                    35:4b:40:c7:50:0a:59:de:cf:2b:ef:7b:03:38:89:
                    74:f3:66:64:13:c0:9b:2a:64:33:02:25:0e:2e:1e:
                    f5:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                45:94:33:9B:DC:EF:19:68:68:DE:84:F3:FD:55:50:75:20:63:AD:C1
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/3ffa1a6f-72fd-330f-a81c-ebf4bd3844e6.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.5.6.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         10:89:a8:05:0f:38:71:59:83:e4:d7:a7:01:92:cf:53:7f:72:
         1b:6a:83:23:a3:60:04:42:98:5c:b1:3e:8f:d1:90:fe:7a:0a:
         cb:9e:48:56:6f:76:7b:a6:f7:5e:5d:b8:96:fe:81:ad:3b:45:
         b9:67:45:64:49:be:76:72:99:08:f0:08:36:39:2d:60:27:32:
         5d:81:c3:0b:4b:5c:81:5b:d9:e8:56:9e:c5:d9:45:3d:19:73:
         7c:d9:49:0b:41:5f:84:59:dd:ad:3a:92:5c:0c:fc:b3:e2:23:
         2c:df:a0:55:d6:8d:44:48:1a:14:06:72:97:46:2e:00:a8:18:
         6f:1b:9f:0b:95:18:cb:13:56:ba:c0:87:f3:ea:1a:87:eb:8b:
         14:fd:c6:ae:b1:6b:37:63:b1:cf:b9:74:3b:7a:5a:13:44:22:
         b8:ab:21:8e:63:98:44:bd:d1:68:57:a7:3f:9a:43:44:b8:ca:
         a1:70:be:95:c0:0d:fb:e3:a9:55:26:6f:da:ce:88:75:e2:46:
         c6:12:39:22:a1:c1:27:8d:97:e2:91:ef:06:c3:aa:f9:1f:d0:
         a8:4e:09:ae:21:60:cd:67:40:30:b3:45:37:98:fb:d6:20:5f:
         fa:f2:ea:0f:9b:4c:e0:bf:ad:c8:26:06:cb:99:8a:4a:6d:cd:
         c9:83:95:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 00:57:59 2026 by rpki-client