Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/b253ef1c-fd34-3508-9abe-d7d2aa8175b5.roa
File:                     b253ef1c-fd34-3508-9abe-d7d2aa8175b5.roa (raw, json)
Hash identifier:          UY03uBA9L1GMPEYa5qM7N9n6pIqmgWnFz8v7Pq79yaA=
Subject key identifier:   5C:A8:7C:37:6D:93:EE:12:46:DD:C5:56:78:D8:EA:A2:0D:58:90:49
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584E1E443C2CFA244EB021D16C68
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/b253ef1c-fd34-3508-9abe-d7d2aa8175b5.roa
Signing time:             Tue 09 Jun 2026 21:00:12 +0000
ROA not before:           Tue 09 Jun 2026 21:00:12 +0000
ROA not after:            Mon 07 Sep 2026 21:00:12 +0000
asID:                     396719
IP address blocks:        192.58.128.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 16 Jun 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:1e:44:3c:2c:fa:24:4e:b0:21:d1:6c:68
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Jun  9 21:00:12 2026 GMT
            Not After : Sep  7 21:00:12 2026 GMT
        Subject: CN=05950d56-d380-4ff5-b5f3-61dc2719359c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:1b:c5:73:ae:b0:08:ce:10:71:83:38:c4:a1:
                    8d:e5:9b:96:40:c2:78:90:d5:e5:02:5a:1d:14:4c:
                    36:4b:3d:60:28:57:96:3b:f1:91:93:6c:65:f6:74:
                    80:4f:4b:51:16:b2:25:19:4f:55:80:2c:d0:b7:0d:
                    96:7d:19:d3:6f:91:ca:bc:0d:a8:87:d5:94:b3:66:
                    b9:6a:d3:3a:3c:58:b4:5a:69:14:94:ff:ac:0a:7e:
                    3d:4e:b0:8f:4a:81:fa:79:cf:0f:36:66:98:e5:7d:
                    70:f9:ed:4a:e8:86:bb:52:6c:53:ae:90:8a:c1:6e:
                    ff:46:3f:11:0e:d9:20:e8:e3:f8:6d:06:42:cb:33:
                    bb:d9:55:5f:42:24:87:43:85:44:49:6d:e1:c0:be:
                    99:57:30:30:dd:45:11:a1:6d:03:d3:ec:4d:78:d7:
                    94:f5:0e:25:6d:21:b6:2e:d3:5d:de:f6:da:3d:0f:
                    fc:51:d3:9b:de:d6:e2:e2:9b:0f:81:fa:c5:2e:4c:
                    7b:cf:14:ee:7c:c2:5a:63:d8:6f:88:dc:d3:87:46:
                    b4:74:3c:a4:da:20:84:33:f6:1a:1c:a6:7f:73:69:
                    32:df:a1:22:67:f5:24:3a:31:e4:4a:bc:83:ee:f8:
                    9e:07:d4:21:06:6a:96:47:0f:03:32:f9:e1:d1:7e:
                    c7:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5C:A8:7C:37:6D:93:EE:12:46:DD:C5:56:78:D8:EA:A2:0D:58:90:49
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/b253ef1c-fd34-3508-9abe-d7d2aa8175b5.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.58.128.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a1:7c:2e:84:3e:66:0c:49:f3:ac:cf:54:35:3d:b3:5c:c0:b8:
         1f:29:dc:80:23:ac:13:ca:22:aa:5e:74:85:90:f9:86:31:0f:
         8b:01:fc:69:69:0d:2c:70:65:a2:a3:e8:7b:1a:05:28:d1:62:
         b8:fe:4e:a3:74:11:44:ac:7a:79:1b:63:48:55:f9:5d:b5:7e:
         5d:71:1b:25:ee:30:82:3b:d3:b9:76:57:2a:40:07:9f:1a:92:
         b1:25:88:e9:c5:c8:88:68:48:21:c8:0c:9c:6d:05:a4:56:ae:
         9d:7d:c4:95:7b:5e:16:dc:1e:73:e8:10:51:de:9c:cb:91:ee:
         78:73:82:3a:8d:b7:c3:60:7e:b1:70:c7:6b:26:a7:bd:52:6f:
         eb:ef:ac:8e:2c:ac:ca:be:a9:cc:9a:6f:75:9d:d7:1b:da:a1:
         ac:e0:ce:86:63:e5:7c:50:e9:eb:c4:0c:7b:97:47:2d:77:73:
         65:ff:59:b1:c1:b6:51:71:0d:db:f0:48:66:e7:ec:88:d0:e3:
         e0:0d:01:3c:6b:7a:db:91:cd:70:62:4b:33:f1:9d:5e:75:fc:
         b0:3c:29:60:ae:2a:dc:59:60:a7:40:55:a9:b0:ff:2b:f6:73:
         4a:5b:17:d4:30:d4:6d:1c:1c:58:7b:77:78:ca:b2:3a:e5:90:
         27:cd:f5:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 18:43:38 2026 by rpki-client