Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/628b04f1-3822-3b67-b603-8d63bb9c3c4e.roa
File:                     628b04f1-3822-3b67-b603-8d63bb9c3c4e.roa (raw, json)
Hash identifier:          4dxHb086RC02EMjTKDoEF/Lp8Fqlf3/1ggHdkpTCrVM=
Subject key identifier:   03:73:90:F1:AD:41:B0:EB:FC:41:D9:FE:30:57:5C:36:F7:78:18:64
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584E9BE53692E8CA5EA242740580
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/628b04f1-3822-3b67-b603-8d63bb9c3c4e.roa
Signing time:             Fri 24 Jul 2026 21:00:12 +0000
ROA not before:           Fri 24 Jul 2026 21:00:12 +0000
ROA not after:            Thu 22 Oct 2026 21:00:12 +0000
asID:                     396555
IP address blocks:        192.5.6.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 30 Jul 2026 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:9b:e5:36:92:e8:ca:5e:a2:42:74:05:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Jul 24 21:00:12 2026 GMT
            Not After : Oct 22 21:00:12 2026 GMT
        Subject: CN=a9c089c8-3b93-4dc7-9d3b-19139aebe69f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8f:13:40:c9:05:1f:54:7d:d9:e7:71:93:d7:ba:
                    44:6d:74:a1:5c:d3:f8:aa:6a:33:9a:c8:f2:4c:1a:
                    3a:32:ae:35:ef:6d:fb:13:65:bb:3e:0a:e7:11:8f:
                    00:d9:92:67:55:aa:db:c5:0f:8c:15:4c:b1:7c:57:
                    cb:97:e3:1f:08:97:c5:93:09:41:42:cf:44:a2:e6:
                    33:e8:40:73:07:28:34:9a:b6:e7:eb:54:68:d9:ac:
                    af:7e:94:99:03:f8:48:71:9c:fa:ba:73:0b:f8:02:
                    a6:c9:fb:8f:8c:38:e0:76:2e:e0:fc:1e:7d:84:6c:
                    01:70:0f:b0:1b:62:a3:73:2f:e0:78:51:58:6a:e4:
                    0f:24:e7:78:e2:c5:a2:30:5a:82:59:03:fd:41:68:
                    5b:39:e9:7d:95:4d:db:7f:40:86:34:19:e2:73:57:
                    64:05:bb:ec:c5:66:8a:1c:1a:a2:56:95:7d:9e:b8:
                    95:67:41:ac:00:82:c2:c9:72:69:67:eb:48:d6:a2:
                    72:08:4c:50:c3:a6:d6:0a:5d:d6:61:a7:62:7d:da:
                    22:70:3c:9d:9f:5b:bc:da:00:18:f0:61:6d:99:cd:
                    83:d3:fa:fe:39:77:f5:01:4b:41:fb:e1:e9:a3:e4:
                    32:0b:b2:5e:71:f0:55:cd:79:46:24:08:d9:f6:14:
                    e1:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                03:73:90:F1:AD:41:B0:EB:FC:41:D9:FE:30:57:5C:36:F7:78:18:64
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/628b04f1-3822-3b67-b603-8d63bb9c3c4e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.5.6.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         19:e2:a1:ea:e3:15:75:a0:a7:94:e2:be:50:88:23:ba:2b:e8:
         bc:3b:e4:6e:7e:9d:01:05:9c:f4:ec:2a:9a:84:96:ca:08:d6:
         56:b6:20:67:05:a5:fc:5b:1b:b2:a1:c7:a5:a8:7f:6c:a4:bd:
         8f:84:82:a7:fc:63:c3:91:9c:76:b3:fe:39:11:ef:a6:b0:4a:
         22:fc:74:0d:99:a0:19:e2:f2:f7:0a:dc:24:ea:f3:8c:17:db:
         86:54:28:37:3d:5c:61:29:0a:b5:1f:5a:31:8f:7e:0c:a4:50:
         b5:16:e4:55:85:d2:5d:e0:be:a1:69:ef:dc:fb:68:6c:03:8f:
         59:44:04:b3:c8:76:0b:0d:ec:a7:46:88:11:c6:36:d0:2d:7b:
         63:d3:30:12:49:d0:09:de:a6:7d:74:db:08:39:f9:68:99:ef:
         40:c6:34:5b:d6:af:4b:4f:6b:f6:5b:e3:4e:75:7f:fd:b3:fd:
         1b:09:f4:32:50:3b:e0:dc:22:58:a8:eb:55:f9:8d:93:65:c7:
         46:d6:ea:c1:16:b9:35:89:7b:a9:06:c5:e4:ae:2d:94:3d:55:
         20:dd:e3:d1:43:31:61:15:39:68:2d:30:64:82:8f:c2:77:c6:
         95:c3:1c:4e:cc:73:1f:c6:11:ae:6a:a2:17:2a:cd:d0:96:f5:
         dd:6a:82:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 05:46:38 2026 by rpki-client