Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/8d035d94-0434-34ed-af54-ba5c4a063194.roa
File:                     8d035d94-0434-34ed-af54-ba5c4a063194.roa (raw, json)
Hash identifier:          Ie9KlikNzqyx2mKK4BvTzDTgw/ckehHvrF1llXrhClc=
Subject key identifier:   BF:B4:B6:3F:97:15:97:D8:44:2E:21:66:EC:A3:B3:B5:AA:BE:8E:41
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584E1E443BEEAE48EFFC39CDBE80
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/8d035d94-0434-34ed-af54-ba5c4a063194.roa
Signing time:             Tue 09 Jun 2026 21:00:12 +0000
ROA not before:           Tue 09 Jun 2026 21:00:12 +0000
ROA not after:            Mon 07 Sep 2026 21:00:12 +0000
asID:                     396594
IP address blocks:        192.58.128.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 16 Jun 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:1e:44:3b:ee:ae:48:ef:fc:39:cd:be:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Jun  9 21:00:12 2026 GMT
            Not After : Sep  7 21:00:12 2026 GMT
        Subject: CN=01f0b9a8-fbac-4546-a884-d26f73d1794d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:88:61:63:54:dc:a6:66:dc:50:5b:6f:f7:44:06:
                    8c:dd:ef:4b:9d:03:bd:31:b2:1a:47:31:6e:e3:75:
                    13:c5:b4:f3:ef:90:d6:f8:1a:2f:5d:86:21:cf:1b:
                    1f:f1:22:0e:bd:00:1c:e8:ff:72:4b:5b:2e:37:fb:
                    49:9d:d6:7a:c8:73:ec:8a:fe:c1:83:21:e0:73:1f:
                    66:3d:ab:14:a4:f1:06:ce:3b:43:72:e6:b6:b9:b2:
                    05:cb:f7:45:51:46:85:19:46:41:b1:4b:20:7a:bd:
                    43:27:02:cb:0a:77:a3:b8:8d:92:a5:d8:c0:31:f0:
                    67:1e:40:5a:46:ff:fa:c6:95:a1:69:4a:ae:d2:f9:
                    3f:67:48:aa:68:ae:8b:a1:e9:b7:fc:7d:09:86:7c:
                    fd:46:0a:4f:39:5a:32:4d:f0:3a:c9:80:73:81:2d:
                    64:8e:a1:40:18:66:71:c2:49:6b:45:52:13:13:23:
                    0b:5f:21:84:7e:00:fa:58:34:ba:08:77:84:c1:11:
                    8c:2c:04:8d:d8:ef:e9:ac:57:3b:c2:99:cd:f1:4f:
                    41:b6:3c:d5:17:27:8c:99:f4:65:a7:40:5e:eb:fe:
                    e8:3d:49:03:89:ca:64:2d:94:9b:6c:01:6d:0e:2f:
                    19:c3:c7:4a:aa:31:db:cf:08:b7:21:d3:ad:e2:43:
                    97:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BF:B4:B6:3F:97:15:97:D8:44:2E:21:66:EC:A3:B3:B5:AA:BE:8E:41
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/8d035d94-0434-34ed-af54-ba5c4a063194.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.58.128.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5f:1d:e8:0d:00:71:29:ea:f3:e3:09:d0:b6:84:7f:1b:02:85:
         c9:0a:f4:8e:12:db:60:cd:aa:1c:a9:85:01:80:71:ef:59:ae:
         96:8c:9b:ce:0e:de:28:8e:28:69:a9:7b:bb:a3:1d:83:e1:d4:
         d8:67:65:71:ac:eb:10:f3:d4:ea:7e:c7:c3:c0:48:84:22:7a:
         ea:6a:c4:bb:8a:ac:75:4b:c4:2b:9b:8b:15:68:3e:fc:8c:f0:
         ce:1b:d8:6b:17:aa:0a:e0:3f:5e:0d:d0:7e:4f:28:88:d5:3e:
         41:d0:b2:c4:fa:92:a4:38:85:69:28:b8:a8:0f:94:73:0b:05:
         8e:64:12:2b:87:c0:69:8f:23:88:f7:19:0f:eb:a3:74:8c:b8:
         1d:d9:7e:26:f8:30:81:c9:5d:4a:3d:8d:29:c4:96:2e:0e:df:
         91:c0:5e:fc:d0:26:45:13:91:97:a3:2f:15:d1:c5:c0:09:e2:
         7d:10:e0:a7:c1:f1:30:b8:ca:95:60:8d:ee:66:c4:0a:09:89:
         2b:1e:39:7b:e3:ae:9c:0c:38:a2:72:01:aa:9f:9f:7f:34:f0:
         35:fa:91:39:cb:f3:d9:93:de:a2:cd:86:f4:c3:74:d6:36:d7:
         16:81:e8:82:97:4f:29:ba:1a:42:63:7b:21:2f:ff:07:f0:83:
         96:dd:b2:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 22:57:04 2026 by rpki-client