Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/6635ca0a-c92a-3e70-aeca-457a07a54544.roa
File:                     6635ca0a-c92a-3e70-aeca-457a07a54544.roa (raw, json)
Hash identifier:          H3efACdhUUbHvRYNnkFfR3SEjAVO1HhL/ACxxI6s1+s=
Subject key identifier:   57:A3:A0:B1:1B:11:F5:BC:A9:6F:9F:9B:75:15:68:AB:28:E2:30:97
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584CEBC22BE824A2E8A7B4609840
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/6635ca0a-c92a-3e70-aeca-457a07a54544.roa
Signing time:             Fri 20 Feb 2026 02:00:32 +0000
ROA not before:           Fri 20 Feb 2026 02:00:32 +0000
ROA not after:            Thu 21 May 2026 01:00:32 +0000
asID:                     396543
IP address blocks:        192.12.94.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 04 Mar 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:eb:c2:2b:e8:24:a2:e8:a7:b4:60:98:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Feb 20 02:00:32 2026 GMT
            Not After : May 21 01:00:32 2026 GMT
        Subject: CN=ed3e10c0-e4ea-4469-9f62-8ac206d082fe
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:57:01:e6:79:75:94:af:50:11:87:bb:e5:e3:
                    ae:19:b6:8e:1e:45:cc:73:8a:eb:b1:c9:a2:fa:3a:
                    74:d3:0c:d3:fc:d0:ee:74:88:85:aa:f7:83:e4:8e:
                    fc:ad:09:f3:f4:85:a3:d3:60:48:3d:ab:36:8b:92:
                    3d:e6:5d:bd:5c:29:50:60:cb:b2:0a:e4:81:b9:58:
                    b6:c8:dd:61:5b:43:8e:6b:7e:19:82:e0:bd:1b:ec:
                    fe:09:4f:18:d1:05:fa:15:90:95:3e:4c:65:b1:62:
                    2a:c7:a5:7c:40:f3:09:00:a6:e1:29:24:0c:d9:b2:
                    df:7a:3c:e3:5f:c7:c1:1e:77:24:56:76:74:3a:a4:
                    8b:12:2f:44:72:58:27:03:0c:af:6b:8f:49:b6:51:
                    81:bc:cd:87:44:0f:5d:9d:94:e6:45:9f:06:bf:fb:
                    d7:c6:9c:31:c9:98:b7:ed:48:35:f5:2c:46:32:90:
                    e5:70:2f:ac:bf:6c:57:a7:7f:04:fd:c0:f5:32:ce:
                    21:90:6b:6b:78:ab:f7:0e:40:91:11:50:5a:01:53:
                    4a:ae:7a:6b:5f:b4:d6:b5:c5:46:32:02:6e:67:fd:
                    69:bf:c1:e5:86:6d:1e:8b:c5:f4:9b:41:74:10:87:
                    67:e2:ce:ed:d5:48:ca:81:22:75:f0:af:46:a8:b6:
                    57:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                57:A3:A0:B1:1B:11:F5:BC:A9:6F:9F:9B:75:15:68:AB:28:E2:30:97
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/6635ca0a-c92a-3e70-aeca-457a07a54544.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.12.94.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         33:20:10:c3:f1:66:d4:13:c4:29:01:c1:ce:4b:17:b9:5c:03:
         30:86:1a:59:92:73:27:42:75:e8:9e:f5:51:dc:71:05:a0:d6:
         0b:e4:8c:4e:6a:b8:09:b0:ec:99:29:51:eb:97:79:15:b0:5a:
         24:6a:97:45:4c:48:91:9e:52:d1:7b:32:d0:d7:9e:4a:4a:5f:
         b2:21:38:b7:8f:50:6f:11:48:b3:62:c3:46:56:db:67:cd:c0:
         8e:6c:be:2f:74:f6:ed:3a:80:01:88:95:67:49:af:79:2a:f1:
         17:9a:80:c2:f9:a6:73:56:61:6b:d9:52:ec:ff:71:65:66:c6:
         88:7e:8d:4c:1d:43:28:cb:a0:b7:1e:13:3a:19:33:68:ee:9f:
         04:e6:84:4b:aa:00:9f:26:19:f9:b6:87:00:29:eb:b2:bf:34:
         87:67:c3:53:24:8e:cc:e6:98:77:05:b3:8b:42:2d:0e:d9:33:
         2d:a4:0b:ee:33:25:9b:2c:7a:68:7c:a4:da:9a:91:7b:76:2f:
         5f:9e:4e:08:70:bc:69:72:0e:d1:5f:70:a7:39:d5:ee:0d:95:
         60:73:3a:a5:a9:be:2c:17:07:ac:9f:59:3c:49:89:be:79:c3:
         9e:12:60:07:50:77:55:13:05:3f:62:87:26:bf:7a:3b:34:3d:
         c4:38:73:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 03:14:21 2026 by rpki-client