Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/51d084bb-5b61-31a7-b0d6-44fcfa9f760d.roa
File:                     51d084bb-5b61-31a7-b0d6-44fcfa9f760d.roa (raw, json)
Hash identifier:          rS6r0xAOdSDU9bDrglb29fVgjpy3Q6na/X4nX0aabwQ=
Subject key identifier:   04:4E:39:3F:88:E2:B9:C6:CB:5B:DC:B2:ED:BA:C6:14:4E:AC:FD:15
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584E1E443EACAFF2135AC6E1CE80
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/51d084bb-5b61-31a7-b0d6-44fcfa9f760d.roa
Signing time:             Tue 09 Jun 2026 21:00:12 +0000
ROA not before:           Tue 09 Jun 2026 21:00:12 +0000
ROA not after:            Mon 07 Sep 2026 21:00:12 +0000
asID:                     36627
IP address blocks:        192.58.128.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 14 Jun 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:1e:44:3e:ac:af:f2:13:5a:c6:e1:ce:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Jun  9 21:00:12 2026 GMT
            Not After : Sep  7 21:00:12 2026 GMT
        Subject: CN=6b453f46-b94b-4b04-ab44-7d1430a29875
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:6f:1e:db:37:eb:8d:a9:6e:a5:4c:d2:5c:eb:
                    5a:d1:8c:98:30:9d:e0:35:5c:35:e2:a2:1c:2f:40:
                    22:40:75:39:69:0c:cf:d0:02:87:be:f8:3b:ad:9f:
                    6d:d4:68:07:65:8f:58:fe:63:45:65:57:b1:f1:64:
                    85:99:eb:ff:98:a7:67:2f:73:df:ab:31:d1:cb:e0:
                    da:82:3a:e5:d5:e7:2e:63:5b:ed:08:e9:9f:89:43:
                    7a:24:a9:2f:dc:c2:8a:b1:5c:10:d5:fe:95:9f:e5:
                    27:57:79:9e:86:b4:75:0e:6e:4b:26:75:4d:ca:2b:
                    56:07:c2:38:b8:0a:bf:45:81:15:11:99:62:c0:c6:
                    eb:ac:86:36:ad:0b:cc:6b:3a:d1:53:a7:fa:41:25:
                    70:6c:ed:24:3a:9e:af:19:e8:7e:47:ec:e8:b3:86:
                    1a:9c:85:e1:39:2a:96:42:6d:ca:13:0b:54:2b:5b:
                    55:3f:c9:18:32:ff:e4:fa:60:30:52:f3:01:8a:d1:
                    2b:06:6e:ab:5c:07:62:9d:d3:ee:20:67:79:37:09:
                    14:e3:50:51:d2:55:1c:33:11:44:5d:96:76:0c:4c:
                    d4:f7:6c:a0:cf:79:ef:32:e1:36:4e:88:d0:39:1c:
                    81:0f:c8:ea:2f:8a:c8:ac:9a:0a:38:e5:a2:6f:4f:
                    d3:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                04:4E:39:3F:88:E2:B9:C6:CB:5B:DC:B2:ED:BA:C6:14:4E:AC:FD:15
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/51d084bb-5b61-31a7-b0d6-44fcfa9f760d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.58.128.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         44:89:89:ca:f0:f4:35:e0:6b:43:19:96:9b:e7:e6:cd:df:d4:
         91:73:46:26:c7:09:b9:9e:c2:07:83:ff:0e:6b:0a:26:68:d5:
         d4:aa:ad:db:05:46:cf:c6:a2:2d:40:29:12:54:3e:93:93:64:
         ae:d8:f0:50:21:36:fd:2a:92:53:02:3e:69:e1:38:f4:61:d5:
         5e:ca:b3:fe:45:5e:bd:95:8d:67:a1:c5:75:a1:bd:e8:89:89:
         28:0f:08:cb:97:43:6c:75:47:f7:c7:7e:aa:0c:d7:54:b4:d9:
         c9:92:f7:50:91:ea:f4:3f:b6:30:92:33:77:8d:2d:6a:b8:56:
         16:05:30:8c:80:3b:93:87:4f:ca:1c:4d:08:ed:17:fa:28:ba:
         4a:90:d0:34:39:f8:b6:ff:34:2d:b5:d0:40:56:42:fb:38:29:
         4b:47:2c:b3:5a:9e:87:74:a7:4c:1b:57:4f:a7:be:61:45:e4:
         5b:df:b5:93:be:88:b4:28:ad:4b:92:44:e6:60:d9:f9:83:8f:
         e6:f5:30:0b:7e:06:bf:59:db:25:5a:24:ab:cc:4c:19:cb:0c:
         8f:ce:17:9d:4d:70:27:3b:ac:29:44:34:ee:a7:27:c5:73:27:
         90:2c:2d:3c:0c:77:38:56:ce:cc:32:79:23:78:35:06:c1:58:
         99:75:9c:47
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 16:29:42 2026 by rpki-client