Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/b35b4901-6e68-32bd-84c8-5edc50dc51ed.roa
File:                     b35b4901-6e68-32bd-84c8-5edc50dc51ed.roa (raw, json)
Hash identifier:          A+zc+s1yPV5fIe5UmE6b3V42UoBFeCSr/X+yv36lPi0=
Subject key identifier:   DC:FA:87:C7:EE:E0:1A:11:1F:CE:56:32:F6:E3:F4:AB:C0:0F:AA:86
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584D5FA865D5FE57DFD1BAC04480
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/b35b4901-6e68-32bd-84c8-5edc50dc51ed.roa
Signing time:             Thu 02 Apr 2026 14:22:40 +0000
ROA not before:           Thu 02 Apr 2026 14:22:40 +0000
ROA not after:            Wed 01 Jul 2026 14:22:40 +0000
asID:                     396827
IP address blocks:        192.42.178.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 19 Apr 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:5f:a8:65:d5:fe:57:df:d1:ba:c0:44:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Apr  2 14:22:40 2026 GMT
            Not After : Jul  1 14:22:40 2026 GMT
        Subject: CN=2aded895-d386-4f5c-aeaf-089dea26f85d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8f:3b:b5:d9:f9:38:1d:05:c0:b4:09:81:65:d0:
                    a3:92:23:b3:be:dc:71:29:c2:9f:b6:74:73:97:48:
                    19:5d:25:f4:f3:6c:81:26:c7:7a:92:eb:c6:6c:08:
                    f8:3e:9f:6e:c2:d2:eb:1c:0f:e9:12:73:b1:a6:77:
                    73:9a:01:26:c3:22:67:ec:a8:1d:ef:d3:ac:de:af:
                    e9:ab:bd:7b:ff:2a:0f:17:d0:ea:f6:6c:71:19:4b:
                    16:61:f3:11:98:18:94:51:75:98:ab:e6:05:94:01:
                    f9:dc:41:52:7d:0a:48:08:eb:12:16:ad:f3:a5:4d:
                    69:1b:f9:ac:38:b3:ea:4f:46:fe:1a:47:b9:e1:b8:
                    bd:fe:87:31:a8:a5:88:fb:26:d0:ce:f8:cf:d7:ef:
                    ac:6b:ce:aa:83:a1:fd:9a:c5:26:d0:b9:88:75:e2:
                    bf:1a:1d:58:f3:ad:d0:ff:97:59:45:05:c9:3b:ee:
                    8a:9f:12:6f:70:6a:e3:0a:0e:43:8c:b1:be:8c:95:
                    d5:db:5b:cc:54:96:dc:44:5e:e2:3a:78:97:16:27:
                    3a:5f:93:db:c2:37:e9:7c:8f:41:bd:f0:88:d2:37:
                    21:cd:9b:0c:4d:84:db:97:cb:c5:d3:ba:e7:c8:e9:
                    2e:3d:ef:dc:97:89:25:8c:9c:2c:a7:94:4e:36:5d:
                    9d:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DC:FA:87:C7:EE:E0:1A:11:1F:CE:56:32:F6:E3:F4:AB:C0:0F:AA:86
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/b35b4901-6e68-32bd-84c8-5edc50dc51ed.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.42.178.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         93:94:bf:42:41:17:4c:94:90:52:13:34:e8:60:c9:02:c1:50:
         6a:72:3b:81:30:ec:31:19:0a:b2:fa:e3:86:16:5c:8b:17:d7:
         52:f0:dd:37:12:39:57:0f:13:3c:59:65:37:bb:c8:f2:59:0c:
         21:6c:9c:70:e9:3c:f2:1b:86:29:fe:9a:6b:6f:ca:57:18:1b:
         83:d5:4b:bf:98:c3:aa:94:dd:31:de:79:51:d2:f0:ac:78:5a:
         9d:de:f8:0c:13:d2:4a:b8:33:34:fe:61:3a:2b:45:be:eb:f1:
         d5:e7:51:99:2b:d6:96:db:57:ee:76:25:47:25:95:11:fe:75:
         68:8d:c4:7c:79:48:e2:af:3d:e3:ca:82:e0:9f:c6:f8:a6:a3:
         90:b3:2b:28:ac:58:4e:a7:9f:6b:62:bb:8d:c9:6b:3d:d8:27:
         a6:f6:cf:cb:4f:48:2b:9a:bd:18:3b:b9:31:ca:e4:42:9d:fc:
         c7:2a:d3:25:cb:53:36:2e:1a:34:95:16:4b:83:d1:76:73:f4:
         46:30:dc:10:92:50:a7:92:b5:05:91:8b:27:97:ce:fb:83:6c:
         1d:c5:79:4d:2a:85:ea:78:8c:91:23:27:0f:1b:0c:dc:74:66:
         95:80:3b:01:68:5c:1f:66:3f:ab:4b:0b:69:ba:fc:90:3f:4a:
         68:ce:8c:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 12:43:09 2026 by rpki-client