Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/86cab172-b370-32a4-b90f-6ab2db138b9b.roa
File:                     86cab172-b370-32a4-b90f-6ab2db138b9b.roa (raw, json)
Hash identifier:          SSP2OY7KtP4p7Xys6Er9/H3ognCW0MtcHnNgxr1ylx8=
Subject key identifier:   D6:72:2D:99:CA:CC:04:EF:23:FC:57:AB:06:66:31:89:3F:0D:E7:AE
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584E1E44488603B694F7DDC6BA00
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/86cab172-b370-32a4-b90f-6ab2db138b9b.roa
Signing time:             Tue 09 Jun 2026 21:00:12 +0000
ROA not before:           Tue 09 Jun 2026 21:00:12 +0000
ROA not after:            Mon 07 Sep 2026 21:00:12 +0000
asID:                     396611
IP address blocks:        192.58.128.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 16 Jun 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:1e:44:48:86:03:b6:94:f7:dd:c6:ba:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Jun  9 21:00:12 2026 GMT
            Not After : Sep  7 21:00:12 2026 GMT
        Subject: CN=b96f6e0d-02b4-4942-976a-8fd46ecee4d4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:1f:56:20:80:8b:55:1b:91:33:2c:ae:8a:91:
                    19:9f:55:d6:82:30:ae:6d:53:73:5f:3f:ad:f3:e4:
                    71:ac:e0:8c:2e:32:f2:ef:67:f8:f6:f4:15:5f:5e:
                    ca:d6:1a:86:40:a3:91:4e:e6:45:24:a0:9c:aa:d8:
                    e2:42:23:02:cd:de:a7:d2:4c:d8:34:3f:ea:b5:d7:
                    af:88:9a:0a:d0:00:99:c9:97:94:81:80:59:34:a2:
                    9b:2e:38:6b:cb:e9:8d:a1:dc:7f:33:76:01:05:70:
                    bd:8e:05:c8:f6:fa:4e:54:b5:07:8f:27:85:0b:c0:
                    30:c6:46:9a:41:86:09:c8:f8:d2:64:13:7f:48:15:
                    01:75:c6:0b:97:bf:aa:d3:05:1f:48:f6:37:05:65:
                    5c:88:56:f1:e0:b2:b7:3c:fa:e2:98:49:81:71:90:
                    ec:84:93:1a:76:da:c1:f8:36:d8:63:0b:ec:84:93:
                    75:12:33:fb:7f:f4:d2:8b:e0:ed:cd:46:79:e5:af:
                    34:08:15:51:48:b1:f8:ea:52:4e:24:62:95:1e:03:
                    0a:b5:9d:87:84:51:ff:97:56:4b:fc:80:5e:b1:fb:
                    bf:f8:05:f8:20:c2:45:4b:b8:cd:25:a8:f2:98:a7:
                    09:92:8a:49:64:7e:9e:9f:83:0f:2f:81:21:7c:a9:
                    32:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D6:72:2D:99:CA:CC:04:EF:23:FC:57:AB:06:66:31:89:3F:0D:E7:AE
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/86cab172-b370-32a4-b90f-6ab2db138b9b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.58.128.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         27:5e:2d:64:7a:3c:22:ce:20:30:78:7e:e4:d9:69:0d:38:84:
         d7:55:ed:65:bb:a8:23:f9:b8:6c:30:3b:ab:c8:f9:66:d2:23:
         46:59:ef:42:be:87:3e:94:88:0c:bd:8a:a9:f1:ab:ff:4b:d4:
         28:32:32:82:54:3c:64:c8:02:b2:d7:81:89:a0:fd:df:cb:1a:
         ce:35:1e:36:7f:b1:83:d5:cc:d8:71:4b:8d:0f:5e:55:5d:ce:
         31:ec:ae:99:5c:0d:d4:62:b4:81:56:f1:30:3c:f3:07:5b:cc:
         c7:fa:c5:ec:87:73:cb:38:82:bc:fd:06:99:96:c4:15:1b:10:
         73:6a:ec:75:de:fc:18:3d:63:52:f2:63:fe:94:2d:a2:ea:23:
         27:04:54:3a:f2:41:36:22:31:99:09:8c:14:66:da:72:fd:2c:
         07:6f:2b:c9:2a:08:27:ed:18:be:02:e6:79:3c:d9:31:c2:0e:
         b9:8c:62:8f:49:90:ba:b6:a7:b0:4e:02:52:86:e7:70:4b:30:
         86:46:1a:95:27:f3:2c:55:19:f0:5d:15:61:3d:8d:9b:ec:47:
         c9:3a:1a:67:8b:d4:24:40:81:2f:d3:59:da:08:5d:f0:f9:d3:
         db:3a:24:0e:a9:cb:08:28:b6:0f:23:77:32:07:7c:99:91:c4:
         ef:0f:b4:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 20:02:58 2026 by rpki-client