Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/57542f83-7c3c-3ff8-af92-281c4d0f33e7.roa
File:                     57542f83-7c3c-3ff8-af92-281c4d0f33e7.roa (raw, json)
Hash identifier:          UlKgh1eJ2eWcpbWPwG8FEHKuXJtAUH/W/IZvKjqWGTQ=
Subject key identifier:   51:1A:38:7D:6A:CD:9E:40:27:FF:F2:30:83:81:A3:64:78:82:FE:CA
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584E9BE5374428FB8FDD02DB23C0
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/57542f83-7c3c-3ff8-af92-281c4d0f33e7.roa
Signing time:             Fri 24 Jul 2026 21:00:12 +0000
ROA not before:           Fri 24 Jul 2026 21:00:12 +0000
ROA not after:            Thu 22 Oct 2026 21:00:12 +0000
asID:                     396563
IP address blocks:        192.5.6.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 30 Jul 2026 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:9b:e5:37:44:28:fb:8f:dd:02:db:23:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Jul 24 21:00:12 2026 GMT
            Not After : Oct 22 21:00:12 2026 GMT
        Subject: CN=cfebb5c7-cf7c-40a1-bc55-7fc1febdecca
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:fa:6d:96:39:5b:45:4a:5b:31:c2:25:56:96:
                    7d:6f:66:4f:88:4f:cf:89:d9:d6:5d:c8:3b:cd:48:
                    a9:b1:93:82:e8:9f:84:b8:f1:57:45:e0:1c:20:a1:
                    b4:71:27:cf:e6:4e:22:dd:50:25:73:1f:eb:1a:ed:
                    7a:8a:12:4e:ce:0e:97:88:29:19:8c:ee:c4:72:96:
                    f5:a9:bc:20:a1:27:96:61:f6:3e:c0:fb:aa:27:df:
                    bc:a5:cd:16:14:d0:5a:21:ca:a5:f6:bb:cc:53:ff:
                    d1:63:40:14:dc:2c:8c:0b:a1:69:9a:9b:a2:e4:40:
                    1a:6e:57:b7:bd:35:84:a7:9a:59:ea:73:23:c9:e7:
                    b4:7c:6d:d1:1f:dc:ed:12:3a:04:3a:d8:ca:7f:0e:
                    0e:44:3e:db:a2:e6:7c:37:4d:b7:b5:a7:db:35:78:
                    a2:d0:fd:36:b8:c7:5e:2c:57:71:21:a4:bd:5d:5b:
                    a9:6f:46:77:7f:c8:17:e5:e9:e3:60:ca:f9:46:5c:
                    e5:95:22:dd:c2:35:0a:d0:03:19:18:4e:22:0d:8c:
                    9e:66:fe:fe:bc:72:1b:b4:35:1c:3b:77:4b:c7:61:
                    bd:e7:86:52:2a:19:21:0a:44:38:ed:da:bd:80:2d:
                    66:f9:95:cc:5a:14:48:10:10:9d:45:80:a0:79:9c:
                    0a:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                51:1A:38:7D:6A:CD:9E:40:27:FF:F2:30:83:81:A3:64:78:82:FE:CA
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/57542f83-7c3c-3ff8-af92-281c4d0f33e7.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.5.6.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         74:c3:58:4e:ce:c2:fb:a2:6f:ef:ff:70:37:15:6f:b1:6d:d3:
         0b:00:62:b6:f5:a1:75:da:f1:a8:84:b4:f7:1f:31:90:f8:f3:
         af:47:6d:e5:57:4c:ae:31:ed:ff:c3:f4:54:89:8f:d0:93:02:
         ae:40:b1:e5:a6:f6:48:64:ca:05:9c:bb:61:f8:60:ef:f8:19:
         5f:7a:a1:ed:d9:bc:cc:e1:11:5a:64:c6:96:3c:05:67:cc:bd:
         99:79:d5:03:3b:f2:43:6c:0b:dd:3e:b1:d3:d4:87:b5:46:05:
         cd:9d:5b:06:ad:a6:4d:e4:2b:16:01:d5:99:ca:22:bc:42:dc:
         0f:b9:37:43:7f:08:2a:93:8e:63:55:2e:2e:d3:fa:42:be:87:
         69:ef:b9:57:5c:d4:f4:d2:4e:a3:67:2d:eb:f5:9c:36:ac:86:
         56:14:22:aa:40:54:8d:96:69:a8:e7:c9:30:19:50:39:c0:ca:
         ce:ee:f7:86:43:2e:70:3a:e0:fd:47:ba:98:b2:34:05:f3:c9:
         3d:6c:99:ce:9d:e1:0f:64:08:12:ea:e0:f8:8e:6e:88:3d:6b:
         90:c2:1f:86:f8:8c:7c:04:c4:80:9f:aa:c9:2c:ba:06:c4:0c:
         63:d5:66:cc:21:35:3f:fb:16:ae:c5:b3:bd:5d:99:bd:0b:40:
         d5:06:8b:c6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 08:17:28 2026 by rpki-client