Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/758d87ae-5df7-3e11-9bf3-74afe4c2479c.roa
File:                     758d87ae-5df7-3e11-9bf3-74afe4c2479c.roa (raw, json)
Hash identifier:          IOaL3j6uOlt/H4I2hsiFAVZkvhuil6T2vIymXu4MrJI=
Subject key identifier:   58:7A:C7:19:8E:88:AE:DC:7B:2E:10:A7:D2:ED:08:71:B7:E1:1B:B3
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584DE84B4D37D61D6AF31C365500
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/758d87ae-5df7-3e11-9bf3-74afe4c2479c.roa
Signing time:             Thu 21 May 2026 13:00:32 +0000
ROA not before:           Thu 21 May 2026 13:00:32 +0000
ROA not after:            Wed 19 Aug 2026 13:00:32 +0000
asID:                     32651
IP address blocks:        192.68.126.31/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 16 Jun 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:e8:4b:4d:37:d6:1d:6a:f3:1c:36:55:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: May 21 13:00:32 2026 GMT
            Not After : Aug 19 13:00:32 2026 GMT
        Subject: CN=5a58a9d3-237f-4908-aea7-e862fb667f24
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:68:23:70:5d:9d:c5:94:38:b6:29:10:1b:12:
                    9f:b0:71:be:ba:e6:95:53:ae:6b:d4:5d:85:b2:d3:
                    42:69:9d:a9:84:8b:c5:fb:09:b9:10:40:95:df:68:
                    3b:dd:3e:74:cf:2c:14:20:dd:5c:52:dd:37:4a:0b:
                    43:8e:ee:8f:cf:c7:95:4d:7f:d2:22:ad:af:b5:f7:
                    f8:c1:45:41:75:95:1e:47:40:7c:f6:46:eb:f2:a9:
                    22:1f:bc:68:4c:b6:76:76:a5:a3:d4:20:51:00:f9:
                    11:47:ba:5a:e5:f4:f5:07:42:e8:27:55:75:77:8b:
                    0f:dd:6a:bb:95:02:09:d2:89:20:9f:3a:f4:95:01:
                    2f:85:ac:c9:f7:0b:17:0c:e4:74:3c:05:b7:07:74:
                    8a:cd:ed:57:38:19:30:76:4b:ab:8f:49:2c:e3:91:
                    96:69:7e:78:4c:41:da:2f:d7:74:62:ee:64:74:d4:
                    99:7d:ae:f1:a7:6e:d0:e5:cf:09:a6:10:7a:e0:0e:
                    ea:55:05:3b:e0:88:55:74:8d:a4:7d:f3:1a:b2:0b:
                    6a:1c:89:ff:6f:b7:aa:15:5b:eb:52:da:8b:53:f3:
                    df:2b:68:88:2c:95:d2:51:db:53:44:7e:88:be:0d:
                    54:8d:1d:ac:95:4f:3b:84:cf:0d:9e:16:33:4e:93:
                    fd:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                58:7A:C7:19:8E:88:AE:DC:7B:2E:10:A7:D2:ED:08:71:B7:E1:1B:B3
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/758d87ae-5df7-3e11-9bf3-74afe4c2479c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.68.126.31/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         36:43:5e:cd:6d:2b:6c:a4:30:90:d6:32:e3:24:08:d5:e6:cc:
         75:66:7d:79:5f:01:97:88:cd:64:4c:90:28:7f:fd:fb:f9:5a:
         31:71:d1:b6:23:24:b5:92:84:46:ce:fc:39:b8:83:94:7d:fc:
         48:a8:ac:8a:50:ac:c2:78:e0:14:e5:73:0b:62:89:58:bd:03:
         84:f8:2b:42:57:bb:28:07:46:a4:43:c2:30:4d:50:49:73:71:
         fd:47:06:12:e7:e8:d7:a8:70:5c:33:e6:d8:9d:e2:3a:98:6c:
         90:e6:04:b5:3b:7a:10:cc:a0:96:f2:07:70:cf:a0:60:3a:bb:
         44:b0:28:d4:e7:fc:1e:08:44:06:67:f1:48:bf:a5:84:6d:42:
         95:f6:af:19:db:bd:01:07:6a:a5:28:8b:d9:e8:7f:59:7b:7a:
         a4:53:0a:4f:7f:9a:69:1f:80:7d:89:fe:39:14:c4:56:ee:44:
         4a:11:3f:3d:ac:42:9e:c3:18:9f:e2:5a:92:55:d1:43:e2:74:
         85:5a:57:b6:db:b7:22:24:a0:d5:b1:02:8b:69:d9:11:5e:59:
         47:0b:e3:9d:f6:69:60:04:a0:95:84:ec:4b:a9:11:38:c1:4b:
         e2:e1:1b:56:90:a6:39:16:b1:0f:d0:2e:db:a7:b7:4c:2a:7c:
         40:87:50:9d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 19:02:11 2026 by rpki-client