Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/5d884fe2-6033-3876-a94c-533a438232ef.roa
File:                     5d884fe2-6033-3876-a94c-533a438232ef.roa (raw, json)
Hash identifier:          dNDZGbZ70bS1Loegt0f9qfl70KdIDqoCsSjYzIjOeUc=
Subject key identifier:   78:CF:43:E1:A7:2F:9F:01:70:71:62:5B:B1:43:D8:E6:E1:8C:39:4C
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584DE84B4FC8D841542C95407380
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/5d884fe2-6033-3876-a94c-533a438232ef.roa
Signing time:             Thu 21 May 2026 13:00:32 +0000
ROA not before:           Thu 21 May 2026 13:00:32 +0000
ROA not after:            Wed 19 Aug 2026 13:00:32 +0000
asID:                     396596
IP address blocks:        192.68.126.31/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 16 Jun 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:e8:4b:4f:c8:d8:41:54:2c:95:40:73:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: May 21 13:00:32 2026 GMT
            Not After : Aug 19 13:00:32 2026 GMT
        Subject: CN=0013e321-3d75-4d77-a073-45bf7f6a4452
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:82:3f:14:d5:bd:b4:c4:c9:33:f2:3c:33:fc:d3:
                    2a:f5:74:27:b0:93:59:9a:fa:9e:c3:48:be:8c:1e:
                    68:7a:3d:b7:be:c0:6e:6a:3b:0f:49:fb:56:58:3a:
                    5c:74:08:3e:55:d8:4a:ee:5c:b2:fa:44:08:ab:c2:
                    b0:41:1f:50:d6:cf:56:c0:8f:fd:41:11:35:d7:65:
                    de:4a:19:1c:8d:0b:78:e0:e4:0a:8e:de:42:06:eb:
                    82:6d:73:be:5c:8e:63:5c:28:f5:04:be:fd:24:88:
                    80:e5:fe:1b:09:06:74:01:68:38:5d:24:b8:3e:a3:
                    c7:12:58:1e:bd:62:47:7e:48:e2:fd:31:6b:cd:64:
                    5f:03:ce:a1:37:c5:8e:60:f9:a4:a8:56:38:35:5b:
                    8e:4d:4a:d4:97:25:06:2a:c8:ab:df:18:ba:f2:cc:
                    fe:c2:aa:1d:d8:06:b2:26:7e:c1:69:0c:8c:31:a4:
                    9a:43:3f:19:16:e3:ef:20:96:9a:7e:26:1b:cd:f7:
                    17:ee:d2:fc:dc:03:d5:a8:c1:0b:89:88:4f:6f:30:
                    ee:94:be:49:a9:30:99:18:56:df:22:bc:3c:7a:40:
                    a7:b5:2c:92:67:c9:44:1e:f6:69:18:13:b4:c4:94:
                    ae:72:d9:97:d6:ae:67:0b:ad:b8:ca:45:15:c6:70:
                    04:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                78:CF:43:E1:A7:2F:9F:01:70:71:62:5B:B1:43:D8:E6:E1:8C:39:4C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/5d884fe2-6033-3876-a94c-533a438232ef.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.68.126.31/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5e:9e:32:9e:da:6e:24:19:73:12:ef:73:c5:4f:5a:23:6d:a2:
         fb:ef:4d:2d:54:91:a3:f3:d3:ea:ea:34:ec:e3:b5:c9:bd:03:
         2d:38:fb:41:66:f2:43:5b:2d:03:fb:33:ea:6e:fd:32:43:4a:
         ff:3d:ff:40:a9:69:7f:9b:58:32:83:53:df:1a:e6:db:d0:c2:
         7a:df:17:32:cd:e0:d6:d9:86:39:6d:45:fd:1d:75:d9:0c:33:
         de:75:be:1a:5b:4a:41:4d:08:83:e0:a0:ac:6e:86:03:f5:0f:
         6a:f3:5b:15:f5:4f:51:18:cb:fe:c0:e9:50:b4:15:ae:70:19:
         aa:51:93:f7:8c:cf:4b:af:42:a8:74:69:15:69:d5:31:1e:05:
         bc:c0:ad:8d:2a:b7:1c:be:26:6d:e7:a2:56:e9:09:49:21:4a:
         55:c6:f2:98:1a:e7:da:32:4c:32:9d:e7:9e:58:e0:5d:ac:22:
         dd:6b:65:da:b7:03:53:94:aa:4d:43:51:6f:99:76:ce:05:97:
         94:6d:1b:c3:a8:3a:96:af:25:46:d3:b6:8a:36:7d:1b:9b:7c:
         08:02:9a:cc:7c:7f:84:93:5e:66:fd:d8:c6:44:75:2e:85:0a:
         02:6f:97:4e:ea:02:75:0e:af:3d:4a:0a:ed:d3:3e:c3:59:87:
         7b:78:c9:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 19:27:30 2026 by rpki-client