Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/9a593d83-2e3a-3277-a0bb-60702fcd9980.roa
File:                     9a593d83-2e3a-3277-a0bb-60702fcd9980.roa (raw, json)
Hash identifier:          r5qwr1nTC96a/JNEaBjK+edVy8fw+h4Umms4yXXdpK0=
Subject key identifier:   4A:89:C6:B6:93:51:CB:0E:5F:D1:6F:05:F2:4E:67:AF:CE:25:0D:44
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584E1E443A8963C289673D4425FC
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/9a593d83-2e3a-3277-a0bb-60702fcd9980.roa
Signing time:             Tue 09 Jun 2026 21:00:12 +0000
ROA not before:           Tue 09 Jun 2026 21:00:12 +0000
ROA not after:            Mon 07 Sep 2026 21:00:12 +0000
asID:                     396583
IP address blocks:        192.58.128.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 16 Jun 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:1e:44:3a:89:63:c2:89:67:3d:44:25:fc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Jun  9 21:00:12 2026 GMT
            Not After : Sep  7 21:00:12 2026 GMT
        Subject: CN=523664df-9a06-4412-9f75-98d03141b103
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:80:71:ed:95:5b:f4:5b:59:14:f7:64:2d:8c:
                    fd:69:22:03:51:7b:dc:07:e8:f3:42:d8:9f:4b:9e:
                    7d:0d:af:17:27:72:d8:94:87:14:f1:2f:3d:6a:b3:
                    f1:c9:24:e0:9c:b6:dd:b3:a1:54:59:b0:99:a4:50:
                    4d:9b:77:d2:76:ef:94:08:88:b2:6f:c6:6e:38:6a:
                    c9:1b:f7:a0:7c:b1:92:c8:a8:3d:37:1b:15:df:bf:
                    04:13:7e:68:dc:51:b4:fa:13:19:14:46:18:63:c2:
                    c6:c0:7c:a7:5b:27:c5:fa:12:0e:84:e4:60:ff:e5:
                    51:1a:40:1b:73:ae:d4:e1:47:75:26:7d:6f:e6:f6:
                    51:98:17:c0:c6:5e:82:9b:6e:de:8c:0a:f7:5c:ef:
                    72:03:f1:60:ec:b5:61:57:56:ae:af:8e:b6:0c:49:
                    e2:47:ee:5d:6f:ba:ab:40:3d:a0:fa:ad:75:76:5e:
                    83:ef:b4:b3:59:26:17:8e:99:a3:f3:0d:52:ea:ce:
                    6f:28:3a:b2:14:fe:49:7e:a1:91:64:aa:6f:e1:ec:
                    9e:87:78:64:bb:ea:3e:ae:a5:0a:5f:26:6f:35:fc:
                    39:03:e4:95:73:a2:39:01:d7:8f:13:03:b8:a8:a3:
                    8c:7a:e3:60:ff:e8:35:e5:21:60:6b:50:1e:1a:8d:
                    20:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4A:89:C6:B6:93:51:CB:0E:5F:D1:6F:05:F2:4E:67:AF:CE:25:0D:44
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/9a593d83-2e3a-3277-a0bb-60702fcd9980.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.58.128.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4d:c6:0e:42:88:c8:53:bd:f4:93:fa:bb:69:2a:e4:0b:c8:19:
         11:6e:65:0c:11:92:a4:3f:49:82:b8:c3:3b:5d:4e:f4:0b:8d:
         25:78:d3:14:40:a9:3d:a1:6f:de:f6:11:20:47:74:af:ac:18:
         d2:4d:a6:9e:18:bb:ce:02:f0:b4:da:3c:b5:e2:47:a7:59:13:
         d9:56:7f:89:a9:20:a9:9b:a7:1b:31:b9:31:b8:12:e0:da:4c:
         4c:b1:13:b6:36:9c:cf:4c:92:7c:5e:ab:71:d1:8a:b2:c6:57:
         47:2a:66:6f:4e:d4:ae:32:ab:76:37:5c:01:07:ef:28:02:7c:
         fc:49:fb:ce:96:25:9d:8a:c9:78:1d:d6:22:ab:c1:3d:8c:24:
         e7:50:f5:8d:f9:57:87:01:7c:b4:70:af:87:bb:1b:f7:30:41:
         2d:86:ff:57:6a:71:ab:16:d3:4c:91:aa:66:ce:70:d6:d9:72:
         50:3b:93:17:ef:b2:9e:5f:83:f4:3b:4d:96:83:53:b4:9e:a0:
         19:03:fa:2f:99:22:5d:eb:2d:d5:a8:1c:e9:be:67:33:17:4c:
         7d:2e:d1:77:28:d0:34:d5:c7:5c:96:51:24:e1:80:26:83:e9:
         6f:02:30:f9:7d:2a:7e:1a:80:8f:0e:9d:3b:a1:18:a2:e4:f7:
         95:51:b6:47
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 20:02:03 2026 by rpki-client