Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/8b4ccc3c-4618-3487-b620-bd0e49fb63cc.roa
File:                     8b4ccc3c-4618-3487-b620-bd0e49fb63cc.roa (raw, json)
Hash identifier:          BMxNcFcF4qrIRJB0O2GAuPGB+xVaMkkdzNL0N0Hl+oU=
Subject key identifier:   FF:36:4E:BF:93:CD:8E:C5:6F:51:83:F7:6F:E7:FA:37:DE:2D:92:7D
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584D703FF8180CFDB03A6406F000
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/8b4ccc3c-4618-3487-b620-bd0e49fb63cc.roa
Signing time:             Wed 08 Apr 2026 13:00:33 +0000
ROA not before:           Wed 08 Apr 2026 13:00:33 +0000
ROA not after:            Tue 07 Jul 2026 13:00:33 +0000
asID:                     36628
IP address blocks:        192.42.175.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 19 Apr 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:70:3f:f8:18:0c:fd:b0:3a:64:06:f0:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Apr  8 13:00:33 2026 GMT
            Not After : Jul  7 13:00:33 2026 GMT
        Subject: CN=5cf27418-5084-4e15-a371-00488cabff61
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:bd:c4:fa:d0:31:86:be:95:5c:5e:96:82:c2:
                    89:26:ce:82:71:50:fe:38:3f:ce:00:54:f5:3b:f4:
                    85:64:d1:94:6d:eb:dd:8c:42:b6:8e:fc:cc:b2:c6:
                    14:d4:bd:8f:2c:a2:11:90:f1:01:62:f2:b6:cb:df:
                    04:5e:7e:94:01:ea:1c:a2:2b:9a:2a:a3:27:62:2a:
                    f2:fe:8f:cf:67:15:57:f1:5f:c3:96:14:50:8a:9d:
                    d9:0b:c3:c0:7e:27:4f:db:ef:ee:10:88:a1:5b:90:
                    a0:5d:64:62:e5:c6:a5:03:23:86:15:76:a9:26:3d:
                    d9:67:23:87:93:0a:c7:f3:dd:38:7c:8c:18:cb:1b:
                    8a:df:48:f8:17:84:00:33:3b:78:15:c0:54:e9:39:
                    6c:44:18:b2:04:81:d0:2c:8b:bc:19:42:62:d6:54:
                    06:00:78:a2:9a:63:1f:ed:78:77:63:8a:99:b5:4e:
                    15:db:4a:71:24:14:7a:fd:84:63:bf:63:06:e2:d1:
                    fb:60:c1:d1:1e:95:f0:c5:97:8f:5c:ad:ea:85:66:
                    07:dc:53:bb:48:81:4f:df:e1:08:c7:2f:13:a2:ef:
                    2a:82:76:4f:ed:3f:95:48:7a:74:a2:e9:b5:5e:41:
                    cf:30:6c:f6:22:db:cc:5f:c7:d8:29:eb:37:61:df:
                    da:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FF:36:4E:BF:93:CD:8E:C5:6F:51:83:F7:6F:E7:FA:37:DE:2D:92:7D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/8b4ccc3c-4618-3487-b620-bd0e49fb63cc.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.42.175.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         08:26:77:a7:4b:13:47:25:ea:47:f0:ef:7b:8b:4d:3a:e7:e6:
         d8:9f:b1:73:32:74:75:8d:95:2c:93:d0:80:62:69:03:cb:a4:
         91:0f:98:96:a0:07:ed:42:d1:13:b9:4e:00:6b:4f:66:bd:08:
         2a:ca:19:43:4d:bc:07:ca:15:7e:62:fb:17:98:21:a0:d7:47:
         f0:b5:d7:34:d2:84:b8:15:65:89:3d:1d:26:b2:36:95:1f:3f:
         84:d7:42:93:1e:4a:8c:8a:33:16:f5:a2:11:9e:75:76:84:f7:
         a2:5d:9a:d5:67:9f:7d:1e:90:35:de:97:f6:d4:db:37:01:04:
         5b:ce:42:c3:d7:91:39:14:0c:52:7b:db:56:bc:30:a1:85:9b:
         0c:e6:d9:e4:db:09:d4:1e:50:91:e6:84:78:f1:97:e9:e7:a1:
         29:a5:78:42:37:12:6d:3a:54:9c:21:75:30:db:e5:7c:2a:66:
         dd:87:0c:f3:ec:fa:e6:f5:49:3d:8d:40:d1:6c:cb:3d:75:d7:
         7e:8e:13:f3:f6:87:08:70:9c:6a:75:2f:24:9b:9c:62:b0:de:
         44:ef:7c:63:15:08:35:f1:51:27:80:be:82:29:4b:57:a7:d9:
         25:20:41:7d:9f:38:11:cd:1e:62:c6:7c:f9:e1:67:83:7c:0d:
         e3:61:27:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 13:04:58 2026 by rpki-client