Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/6f3203f6-5060-329e-a986-51e08a569842.roa
File:                     6f3203f6-5060-329e-a986-51e08a569842.roa (raw, json)
Hash identifier:          b6tmneBmdMS7UUODjkv19tSciPX3VyxwX0MyR8vcUAw=
Subject key identifier:   61:A7:EA:D1:9D:46:9F:B5:94:B5:DF:A9:3D:B3:CF:68:9E:39:77:1C
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584E1E444780235FA3F69A160620
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/6f3203f6-5060-329e-a986-51e08a569842.roa
Signing time:             Tue 09 Jun 2026 21:00:12 +0000
ROA not before:           Tue 09 Jun 2026 21:00:12 +0000
ROA not after:            Mon 07 Sep 2026 21:00:12 +0000
asID:                     396584
IP address blocks:        192.58.128.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 16 Jun 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:1e:44:47:80:23:5f:a3:f6:9a:16:06:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Jun  9 21:00:12 2026 GMT
            Not After : Sep  7 21:00:12 2026 GMT
        Subject: CN=6a301cc6-b253-41fc-bd3b-0c67883d8118
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:d0:3d:44:34:bc:d1:63:e3:e8:70:2c:ef:9e:
                    2b:9e:1a:7d:9f:1a:be:02:7f:85:c4:c3:19:9a:8c:
                    89:db:20:41:97:d3:c3:a3:53:e3:86:e1:9e:29:e5:
                    17:04:4e:45:e7:49:74:a7:35:71:b4:22:2a:61:d6:
                    1d:1f:83:8f:5d:2d:f3:63:b6:cd:d2:65:a3:84:5e:
                    e4:07:c5:2b:63:c2:ec:d2:93:58:6a:3b:8e:f2:79:
                    7c:9e:0f:25:89:50:4d:a1:2b:6b:51:f0:57:e1:5c:
                    e4:9b:0d:c2:17:1e:df:2a:58:af:23:57:72:ce:c3:
                    69:eb:a3:aa:07:0c:a7:8e:9d:eb:59:f9:c0:27:26:
                    92:83:32:f5:c3:62:13:a4:e0:06:51:01:66:74:ee:
                    24:ea:73:c3:0b:83:83:31:46:f6:13:d1:6f:36:3c:
                    3f:7a:e3:2d:d6:80:51:f4:42:b1:f4:59:09:4e:5b:
                    d3:fb:4c:be:92:e1:bc:d0:5e:ed:bb:82:0b:c7:17:
                    cc:f5:67:c0:3c:61:5d:2f:bb:56:5c:f3:03:e6:24:
                    36:fc:2d:d7:44:fd:f7:38:b5:c5:8e:ad:04:b9:70:
                    3c:51:86:2a:c2:62:33:5e:1c:f6:d3:25:e2:95:3b:
                    7d:0b:9d:0e:39:4a:62:5d:7c:a2:b1:ee:bb:d1:cb:
                    dd:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                61:A7:EA:D1:9D:46:9F:B5:94:B5:DF:A9:3D:B3:CF:68:9E:39:77:1C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/6f3203f6-5060-329e-a986-51e08a569842.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.58.128.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5d:63:7e:b1:c8:18:bd:24:4a:6d:a1:98:5e:98:6c:d6:10:be:
         f2:a5:75:a1:b7:bc:04:7a:a5:f2:4d:cb:dc:65:c2:0e:3c:44:
         ea:1b:da:15:93:4e:bd:b7:7e:9b:58:7d:24:0b:38:0a:83:8c:
         85:c1:b1:fb:55:2b:50:2a:bd:e9:c7:52:b7:56:0b:fc:1e:72:
         75:6f:e1:37:d4:73:cb:9e:37:ab:bf:ca:c1:a4:f1:05:18:a5:
         f7:af:cc:1b:de:6e:59:38:ef:d4:10:ab:03:59:5f:b1:08:03:
         e6:84:29:bd:56:b5:39:17:cd:1e:27:21:80:92:e2:35:37:5e:
         1d:00:75:53:40:ff:c0:47:cc:ee:94:a3:67:0f:1a:74:9e:63:
         8c:9e:8c:7a:c1:0f:5f:90:40:50:00:be:66:b3:37:fd:6c:0d:
         1e:ed:55:61:9e:8d:47:0b:d7:17:91:c0:e6:34:f2:8c:9a:80:
         0b:be:10:73:d4:80:ee:7b:dd:a3:1b:12:e8:8c:a8:cb:5f:4a:
         dc:d1:79:77:4a:9b:eb:1a:cf:bf:df:50:45:a0:55:da:eb:87:
         f3:68:54:d6:b7:22:8a:31:ca:b6:04:75:93:32:68:5e:6b:50:
         fc:1d:61:d3:d7:44:df:8d:0a:19:c0:b6:b6:55:40:bf:2e:ee:
         99:41:14:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 20:51:18 2026 by rpki-client