Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/9722dab7-2dd5-3563-ba22-f0910f7fc2aa.roa
File:                     9722dab7-2dd5-3563-ba22-f0910f7fc2aa.roa (raw, json)
Hash identifier:          yKpSNTOpIxyoGeRtA+u+GkPf3nACitKKlFm7UqgUoZs=
Subject key identifier:   AA:9E:A9:82:E7:7D:ED:B5:67:FA:59:94:0A:2B:F5:44:CF:FA:6A:17
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584DE84B4C6E28D1C2A870A79B80
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/9722dab7-2dd5-3563-ba22-f0910f7fc2aa.roa
Signing time:             Thu 21 May 2026 13:00:32 +0000
ROA not before:           Thu 21 May 2026 13:00:32 +0000
ROA not after:            Wed 19 Aug 2026 13:00:32 +0000
asID:                     396612
IP address blocks:        192.68.126.31/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 16 Jun 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:e8:4b:4c:6e:28:d1:c2:a8:70:a7:9b:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: May 21 13:00:32 2026 GMT
            Not After : Aug 19 13:00:32 2026 GMT
        Subject: CN=92e0876d-a367-4fe6-ab73-6a668649a34a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:fe:75:62:e4:89:42:20:cb:4a:90:ff:3f:ae:
                    f0:10:76:f6:72:20:83:64:82:e7:4a:2f:a0:3f:6f:
                    17:dc:6e:d8:23:c2:06:67:e3:2a:bb:08:73:ee:fb:
                    4b:6c:c7:d6:4d:25:79:34:d6:0d:01:8e:0a:cb:38:
                    ec:df:c3:ba:be:b6:3b:37:ca:fa:c5:78:61:8a:ee:
                    3b:64:e1:f9:67:45:b1:89:7d:bf:42:49:e5:a1:3b:
                    ef:30:14:14:56:90:e5:9a:2c:85:3c:a5:c0:ed:51:
                    a2:f7:61:06:00:50:00:db:42:47:d6:fd:4f:a9:99:
                    df:9d:07:7d:67:d4:2e:a1:97:94:b2:9f:d5:5d:32:
                    52:ac:33:f3:94:d5:22:a3:d0:4a:28:cd:65:b6:4c:
                    9a:6a:3d:c7:a4:51:6a:69:76:4f:f8:70:31:cd:7e:
                    78:ef:1a:db:74:b1:9a:1d:96:f3:b0:ef:53:c6:00:
                    2d:c4:c6:68:bc:43:12:b3:16:1d:96:e6:eb:a0:91:
                    77:14:c4:d6:29:78:17:92:f7:96:80:18:93:27:a0:
                    43:45:15:d3:96:87:bf:31:3b:fe:c7:63:c5:96:56:
                    35:1b:43:69:d9:b7:10:71:a5:71:cf:4a:63:c1:31:
                    da:7d:8c:00:be:84:3c:97:04:98:99:12:a7:17:98:
                    b1:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AA:9E:A9:82:E7:7D:ED:B5:67:FA:59:94:0A:2B:F5:44:CF:FA:6A:17
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/9722dab7-2dd5-3563-ba22-f0910f7fc2aa.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.68.126.31/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         71:bb:41:f5:a9:ef:1c:14:24:ff:7d:70:bc:63:80:00:40:51:
         cb:88:ff:54:d9:cb:7d:4a:67:04:59:e6:ee:43:f9:14:40:78:
         3e:41:0a:b1:14:3f:2a:25:c4:95:d9:f1:23:76:2e:c4:d0:60:
         3e:31:88:7d:76:40:0e:60:4f:c8:3b:f0:76:7b:bc:6a:df:29:
         7d:ef:29:c4:b3:2e:4a:34:28:e7:f4:33:19:34:0c:69:8d:e1:
         df:96:a5:5d:44:8d:1a:c7:ef:2c:a9:1c:e1:cf:b6:3d:e2:68:
         4b:6e:f0:54:b7:f6:71:58:3f:16:aa:bc:84:66:f6:fd:f3:43:
         af:9e:7e:19:58:11:de:a6:29:8d:7a:4a:60:5d:f9:1b:de:30:
         01:28:3a:ea:47:d2:73:4a:e4:b0:8e:b5:d6:28:bd:5e:2e:01:
         33:0b:03:2d:c4:49:cd:bb:42:45:18:a7:7d:7f:6c:81:df:0f:
         29:3f:d2:d4:5e:ae:3f:02:2d:5b:13:d8:4e:23:59:9a:d3:fc:
         a0:ed:6d:e2:f9:34:56:4f:d5:7c:8d:7b:93:89:34:5d:56:23:
         a6:31:d7:db:44:ab:3e:4b:65:a7:1e:15:cd:93:50:14:9f:bc:
         be:1f:48:ee:4e:5b:c2:60:fd:40:6c:10:e6:d9:07:9f:89:47:
         e9:c0:fd:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 23:34:09 2026 by rpki-client