Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/8c5d2463-abcf-39c0-abfe-d7d952bf87be.roa
File:                     8c5d2463-abcf-39c0-abfe-d7d952bf87be.roa (raw, json)
Hash identifier:          O+RBFLKsGY7cMOO4KJhnRkoPtfCcODUMZDvXogjd384=
Subject key identifier:   7D:5E:1D:7F:04:27:3A:AD:43:75:4F:A8:56:5A:15:08:C8:0F:EC:5E
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584E1E4493E9DD6529F69AD9C680
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/8c5d2463-abcf-39c0-abfe-d7d952bf87be.roa
Signing time:             Tue 09 Jun 2026 21:00:12 +0000
ROA not before:           Tue 09 Jun 2026 21:00:12 +0000
ROA not after:            Mon 07 Sep 2026 21:00:12 +0000
asID:                     396596
IP address blocks:        192.58.128.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 16 Jun 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:1e:44:93:e9:dd:65:29:f6:9a:d9:c6:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Jun  9 21:00:12 2026 GMT
            Not After : Sep  7 21:00:12 2026 GMT
        Subject: CN=c3b8dc43-76f9-4277-bec3-0cdde1b429ba
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:90:a5:74:e8:9f:e7:cc:18:21:1c:74:45:92:d0:
                    86:ef:34:bc:f6:37:c1:15:38:4e:d7:c4:00:e6:6a:
                    88:38:82:ac:87:2c:b1:02:bc:8d:a3:71:47:95:90:
                    f4:8b:f7:6b:77:51:63:e7:bb:19:30:5c:19:6b:c2:
                    90:ce:6d:a8:76:de:e7:a5:c6:b1:45:54:84:72:c0:
                    fa:aa:3c:ec:08:06:1a:43:40:5c:ba:a8:fc:39:92:
                    0f:db:0a:f3:28:c9:55:b6:58:4a:53:9c:ff:9d:ad:
                    ec:c9:f2:ee:30:dd:15:7a:c0:ca:31:83:d7:de:bf:
                    f9:01:f4:bd:67:fa:78:91:28:95:b4:0d:72:28:10:
                    66:ab:8f:fb:11:66:e6:15:48:2b:54:4a:07:0f:85:
                    30:4e:39:a1:04:af:dd:ab:1f:63:92:9b:6a:35:e1:
                    0f:58:95:77:b7:af:3c:13:18:0f:1e:d7:bd:64:38:
                    ea:13:45:43:63:82:dc:e8:63:1a:9a:45:a2:72:07:
                    25:4a:af:97:de:a7:be:da:af:1d:31:bc:f9:88:f8:
                    5d:aa:e4:cd:c3:91:0a:06:b3:e8:88:a5:9c:61:a3:
                    0f:7f:92:9e:5b:44:dc:43:a6:c8:74:d3:b1:5a:9b:
                    1b:89:5f:50:5a:b8:10:49:76:67:b5:08:db:75:94:
                    dd:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7D:5E:1D:7F:04:27:3A:AD:43:75:4F:A8:56:5A:15:08:C8:0F:EC:5E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/8c5d2463-abcf-39c0-abfe-d7d952bf87be.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.58.128.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3a:bc:93:20:9f:09:79:f7:54:e3:b6:f2:a2:47:7b:6f:10:40:
         9f:4e:b0:22:74:4e:3c:bf:a1:88:b4:71:9b:27:2a:64:1f:3d:
         43:7f:31:bb:d6:a3:5e:61:a2:ea:18:47:6e:4f:94:cf:7f:d3:
         ac:0e:ab:23:74:20:94:18:ed:9f:7d:3a:72:81:6a:05:aa:d8:
         8a:4c:a2:fb:85:9f:bc:f8:35:05:8e:09:98:14:07:68:46:c1:
         bb:f4:f7:2c:19:bc:ad:24:17:32:dc:3f:48:2b:dc:de:78:58:
         c0:7d:f5:d9:4e:04:ee:05:03:9f:33:82:d4:38:d4:bd:75:4f:
         62:40:9b:c2:1f:2c:0f:63:05:39:5f:ab:ef:51:ed:fd:75:22:
         e3:a1:47:18:49:a7:9d:49:20:f9:7d:3b:df:6f:13:a3:3f:04:
         eb:e7:4d:e7:97:ab:de:d1:a5:ca:82:0c:e3:bb:50:e3:d9:44:
         41:b3:ef:16:96:4a:01:7f:e3:c7:0b:13:b1:36:16:dc:e1:fb:
         a1:bc:8c:cf:db:46:8e:39:d0:b9:5b:f7:9f:6f:e2:11:d3:92:
         6e:57:be:a6:1d:17:17:90:78:aa:84:34:66:ae:58:e4:e7:60:
         1a:61:9b:3e:1c:8a:9d:be:ea:3b:f0:dc:e2:1f:05:b5:90:69:
         2b:b7:7b:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 17:59:44 2026 by rpki-client