Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/9524857f-8331-3f47-83f9-be33c61b1f2b.roa
File:                     9524857f-8331-3f47-83f9-be33c61b1f2b.roa (raw, json)
Hash identifier:          4uqmCHqHA/vJQLE6Qfup3dMnxB5ZcWpSntLI0Cse0dQ=
Subject key identifier:   BA:EB:B4:5D:EA:D4:05:01:B2:BD:4A:AB:94:C7:94:4B:15:55:EE:20
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584D07AD0B2DCF015072DB8C16C0
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/9524857f-8331-3f47-83f9-be33c61b1f2b.roa
Signing time:             Mon 02 Mar 2026 02:00:31 +0000
ROA not before:           Mon 02 Mar 2026 02:00:31 +0000
ROA not after:            Sun 31 May 2026 01:00:31 +0000
asID:                     397209
IP address blocks:        192.68.126.31/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 04 Mar 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:07:ad:0b:2d:cf:01:50:72:db:8c:16:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Mar  2 02:00:31 2026 GMT
            Not After : May 31 01:00:31 2026 GMT
        Subject: CN=d6caad53-3a24-4125-a96d-aa0a9efd0ced
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e1:51:65:a2:a9:91:d4:f5:45:8c:9f:92:88:5d:
                    bc:56:c3:96:6e:51:ed:f0:d1:50:c0:9a:34:2b:a9:
                    79:f3:d2:98:05:ba:6f:10:fb:e9:a0:66:96:03:f4:
                    0a:0d:4a:34:b9:49:7a:81:6e:e7:44:d4:21:4a:d0:
                    e0:9e:9a:d8:f7:1c:e6:74:a0:3d:ec:90:83:50:71:
                    b1:c1:83:ad:81:b9:a2:73:74:56:b1:94:05:73:ee:
                    a3:40:08:98:12:3a:c2:6a:b8:b6:a9:35:18:42:ab:
                    ab:16:e4:28:bc:83:71:6a:76:04:ec:a7:e0:3f:49:
                    9d:5b:b3:27:3f:07:34:85:2d:03:d1:bd:22:da:cf:
                    b0:82:a9:06:9d:a2:d8:32:b4:25:8b:97:53:ff:f7:
                    35:d8:4b:85:9b:ac:0b:f4:93:98:d4:a1:eb:dc:f2:
                    74:4b:d7:ad:23:4e:06:1c:50:cc:6e:48:d8:1d:a6:
                    b0:05:b1:41:ae:2f:0c:b3:51:ba:c4:fc:6f:64:fc:
                    f0:32:89:4b:de:50:5d:8b:fd:b0:09:c5:19:59:a2:
                    9b:2c:64:5a:4f:9c:b4:fb:7d:31:17:35:ae:61:3f:
                    b6:12:69:20:52:50:97:00:e5:55:73:cd:18:b3:a0:
                    8d:f3:d5:a9:72:c6:24:c1:5e:9d:72:fc:60:86:80:
                    dd:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BA:EB:B4:5D:EA:D4:05:01:B2:BD:4A:AB:94:C7:94:4B:15:55:EE:20
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/9524857f-8331-3f47-83f9-be33c61b1f2b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.68.126.31/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         56:92:b8:00:50:83:96:5b:80:73:95:aa:4a:0f:45:ea:46:c0:
         e6:75:67:cc:1d:65:ef:eb:72:ac:7a:91:1f:7a:37:79:92:79:
         a1:68:1a:d2:e1:d0:4e:7e:39:d0:b7:c0:8a:f6:9d:2f:ce:48:
         bb:ab:6f:01:c0:2b:38:78:9a:f6:40:30:8e:f3:00:8b:1d:d8:
         74:39:37:f9:51:5b:19:ec:36:c2:92:e7:d5:24:c3:50:68:84:
         56:8b:b4:6b:95:7a:bd:50:46:58:37:be:ca:de:e8:7d:6e:c5:
         6b:e9:19:60:f3:0c:dd:29:df:6a:fc:7e:07:f8:a1:14:16:0b:
         aa:a7:aa:ef:09:97:22:05:03:45:99:eb:56:eb:b4:f0:e0:23:
         8f:e4:29:48:a6:f9:cb:97:ee:8c:0a:e5:cf:b6:e7:e4:c8:54:
         ff:94:58:32:1c:c0:cb:d2:c7:96:85:f7:e0:05:1b:b8:0b:9d:
         81:ba:ed:f1:b9:07:d9:97:15:a3:86:c7:6d:81:a9:7a:1a:45:
         09:d5:15:27:cf:df:af:8a:17:a1:0b:12:05:62:1d:6a:dd:f5:
         81:83:bc:de:ac:8a:62:14:8f:60:c7:1c:8b:bb:3d:42:fb:fe:
         e1:03:61:9b:a6:7f:ed:a7:fd:e0:fe:5b:c5:15:e1:21:a6:06:
         34:a5:17:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 08:17:37 2026 by rpki-client