Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/70af5ca7-860d-3cd4-9f7c-fa17568436b9.roa
File:                     70af5ca7-860d-3cd4-9f7c-fa17568436b9.roa (raw, json)
Hash identifier:          DWIfE9I1GCHv6OHEV67w0SsfnstQ1iOx+SkHm9jQSGg=
Subject key identifier:   A4:0C:A8:05:81:A5:39:40:E1:9D:C1:C7:FF:ED:8B:50:57:4A:81:EB
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584EA7875AE838FFF4F184D0D7C0
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/70af5ca7-860d-3cd4-9f7c-fa17568436b9.roa
Signing time:             Wed 29 Jul 2026 01:00:12 +0000
ROA not before:           Wed 29 Jul 2026 01:00:12 +0000
ROA not after:            Tue 27 Oct 2026 01:00:12 +0000
asID:                     36619
IP address blocks:        192.12.94.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 30 Jul 2026 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:a7:87:5a:e8:38:ff:f4:f1:84:d0:d7:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Jul 29 01:00:12 2026 GMT
            Not After : Oct 27 01:00:12 2026 GMT
        Subject: CN=dcdcf289-33a6-4f8d-8510-825571918634
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:b3:d6:73:e5:b8:45:a8:d0:a1:c2:e4:10:07:
                    91:95:b1:34:3f:9e:00:02:19:f1:e7:39:7a:06:50:
                    21:11:de:08:63:b6:f1:8e:68:9b:05:9a:5f:a5:db:
                    17:10:e9:71:d6:cd:30:24:87:48:e5:30:61:3f:d1:
                    0f:7c:44:1e:ad:68:68:8f:a3:4f:d8:36:94:f9:c7:
                    0e:59:8c:7e:37:21:4c:5c:e0:3c:6b:5b:a3:18:3c:
                    5b:12:93:9d:fc:76:b6:23:cb:23:7b:33:aa:aa:bd:
                    b4:66:9d:28:b8:63:b7:d0:74:49:2e:3b:42:60:33:
                    c0:86:bd:cf:26:2a:02:fd:8d:ef:4e:5e:1f:51:38:
                    bd:88:58:f4:1b:15:85:f3:33:f6:dc:69:89:11:65:
                    b2:99:55:c9:9d:0c:a8:d0:b7:2e:f1:4b:a3:70:ec:
                    78:e3:cb:67:98:2d:26:cb:5d:40:bd:63:27:c7:b9:
                    3c:f6:ae:75:a4:63:6f:df:ea:9c:90:f3:2a:ba:a6:
                    d6:7e:af:1c:73:13:bb:f8:d0:93:78:b3:8e:56:a6:
                    09:72:12:b2:df:8d:07:a6:16:25:26:17:0f:3e:a0:
                    99:29:82:ef:3a:94:6b:5d:a8:d6:5c:6e:48:e2:b6:
                    97:16:a2:05:7f:77:94:de:ce:5e:27:16:f9:ce:1d:
                    ea:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A4:0C:A8:05:81:A5:39:40:E1:9D:C1:C7:FF:ED:8B:50:57:4A:81:EB
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/70af5ca7-860d-3cd4-9f7c-fa17568436b9.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.12.94.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0d:dc:94:5a:ae:7d:5d:cf:76:f3:7b:f5:03:00:f8:36:99:bc:
         54:bf:f9:b3:d1:0f:e8:88:d1:55:7c:3a:8e:27:85:be:46:11:
         bd:23:33:81:95:62:b9:1d:11:b6:da:dd:d8:1f:c6:03:16:dc:
         35:a2:9d:7e:36:a9:2b:bb:8d:a9:4d:d1:5e:6e:df:94:82:6c:
         cc:84:3d:51:4d:e8:4b:03:c5:f7:3a:2b:cb:c2:e2:d9:16:16:
         d5:81:cd:2a:0f:b7:22:0c:09:e8:06:4e:69:e8:87:a6:2f:75:
         0c:2d:e6:58:aa:bd:2d:99:28:57:3d:dd:2d:24:7a:82:19:6d:
         d1:f2:6d:4e:3f:29:a6:2d:e3:f3:0c:63:be:8f:32:e8:a7:2c:
         9c:8c:60:94:19:8d:ed:c2:a5:bc:16:58:70:ba:ad:6d:2c:e7:
         61:a7:cf:82:4c:dc:64:47:cc:86:58:9d:db:ef:b9:90:d5:f0:
         9d:35:ce:cd:64:87:c1:08:c1:e4:ab:53:83:71:cd:63:83:6d:
         9a:f0:5e:5b:e0:37:58:aa:55:dc:19:2c:fb:d5:21:17:f7:e4:
         6e:a1:b6:56:43:c0:a7:6e:f3:fd:57:08:9f:27:0d:e0:cb:3c:
         88:b7:a8:ef:db:5a:c0:35:6d:24:b1:9a:ed:c1:1a:88:73:3e:
         e9:f3:ce:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 10:12:09 2026 by rpki-client