Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/8b9b307e-c9f0-3761-b4a2-52aa2a69d5fe.roa
File:                     8b9b307e-c9f0-3761-b4a2-52aa2a69d5fe.roa (raw, json)
Hash identifier:          FTVG+h07QbR7cVEWqOYOvc4U/rzS+fNk3bPwz8VsDeI=
Subject key identifier:   B4:48:F7:C9:D8:44:7F:4F:83:7F:48:8D:31:F2:6D:D7:71:2A:DF:AB
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584DE1509D86FE55B2997A4DDF00
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/8b9b307e-c9f0-3761-b4a2-52aa2a69d5fe.roa
Signing time:             Tue 19 May 2026 01:00:24 +0000
ROA not before:           Tue 19 May 2026 01:00:24 +0000
ROA not after:            Mon 17 Aug 2026 01:00:24 +0000
asID:                     396576
IP address blocks:        192.43.172.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 14 Jun 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:e1:50:9d:86:fe:55:b2:99:7a:4d:df:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: May 19 01:00:24 2026 GMT
            Not After : Aug 17 01:00:24 2026 GMT
        Subject: CN=b66638e3-27ad-4c90-95b1-41fff86ebb56
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:88:b2:a3:4d:28:72:ba:cd:21:15:a5:ef:5f:f4:
                    6b:0d:ef:77:2d:0d:1c:3c:62:39:cb:e6:bb:9c:69:
                    19:47:c3:b3:be:de:22:f1:30:bc:4d:8d:ec:8a:50:
                    58:1e:02:25:02:b3:f5:26:c4:44:23:d6:17:70:63:
                    99:83:46:67:39:6e:c2:55:c8:fa:78:d7:83:16:eb:
                    a4:1a:0e:ef:62:e6:b4:d8:84:5d:13:20:8f:45:c7:
                    53:c1:ad:82:0e:1e:a5:c5:d1:96:24:ac:f3:7d:c1:
                    7e:b8:3a:c9:de:2e:5b:e6:b5:fc:08:2f:f9:1e:58:
                    7c:b9:ae:fc:24:35:0b:97:47:85:b2:3c:f4:29:69:
                    04:9c:e1:08:ad:2c:b3:8e:e3:27:47:5a:60:f6:f5:
                    cc:2c:42:ff:5c:07:b1:58:95:12:35:d2:f3:a3:f8:
                    96:a7:21:53:91:1a:ac:24:95:a0:69:d9:14:08:ec:
                    5d:bb:59:af:34:53:6d:ac:4c:0c:1b:84:63:9e:61:
                    2f:11:d6:17:aa:e5:5b:35:a4:e9:8c:c3:32:09:0d:
                    74:98:eb:9b:fa:28:b2:61:12:fa:40:c0:39:f1:33:
                    06:ea:50:79:ce:ae:6a:00:75:5a:90:38:a4:bb:11:
                    1f:a0:e1:d6:d0:c7:6c:fb:39:03:b1:34:fa:56:20:
                    49:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B4:48:F7:C9:D8:44:7F:4F:83:7F:48:8D:31:F2:6D:D7:71:2A:DF:AB
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/8b9b307e-c9f0-3761-b4a2-52aa2a69d5fe.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.43.172.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1a:81:19:17:0c:97:41:f3:c0:d6:2f:01:27:81:52:5a:ab:7c:
         61:10:96:19:6d:d6:23:cb:25:ec:51:2d:f8:f0:1c:83:8e:f2:
         9e:56:4a:c5:66:c3:3c:6a:1f:d4:65:01:20:c1:12:8f:d9:75:
         5b:9a:bd:91:82:1c:8f:89:f1:c2:34:b0:a2:4f:8e:df:2f:a9:
         a1:00:df:03:2f:27:1d:3f:b0:1c:32:a5:81:c5:8a:ee:be:c5:
         6b:af:20:ba:07:1e:40:dd:79:84:a5:a6:48:95:b1:b9:c9:03:
         2d:6e:91:9f:b2:ca:7e:b5:ab:c7:76:f5:46:ee:79:9f:8a:e0:
         ed:0c:7c:bc:6d:f0:7a:f7:22:0d:00:23:d9:c4:f1:c3:a9:0c:
         88:08:25:c3:28:cc:70:3b:8e:9a:48:1d:26:84:7a:eb:ed:8e:
         8c:5a:fc:fc:aa:d7:55:e0:ef:ad:51:0d:00:89:8e:90:f4:52:
         04:f1:06:d5:ca:a1:f6:23:1b:54:7f:32:85:3a:b6:4f:0e:ab:
         49:0c:5e:eb:2b:75:93:ff:e4:01:6b:24:a3:69:1b:30:88:c4:
         5d:cc:b5:ea:41:b2:66:35:5c:98:18:73:00:db:60:13:5a:0f:
         bc:03:52:3d:51:f5:7d:dc:b7:b2:76:d5:ab:69:3a:9c:3b:15:
         7d:78:81:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 16:03:12 2026 by rpki-client