Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/b902a145-91ce-3127-b047-3b79b31c5679.roa
File:                     b902a145-91ce-3127-b047-3b79b31c5679.roa (raw, json)
Hash identifier:          lhu7Lgvbk75mQaxyg7eIyKVgFFv8gRlP/QCxyLFQjhg=
Subject key identifier:   54:C5:84:EF:C7:08:4B:6D:4E:27:8E:F5:DF:15:AC:1E:00:20:12:95
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584DE84B4EB79CB6B3EFD8CF0A00
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/b902a145-91ce-3127-b047-3b79b31c5679.roa
Signing time:             Thu 21 May 2026 13:00:32 +0000
ROA not before:           Thu 21 May 2026 13:00:32 +0000
ROA not after:            Wed 19 Aug 2026 13:00:32 +0000
asID:                     396586
IP address blocks:        192.68.126.31/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 16 Jun 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:e8:4b:4e:b7:9c:b6:b3:ef:d8:cf:0a:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: May 21 13:00:32 2026 GMT
            Not After : Aug 19 13:00:32 2026 GMT
        Subject: CN=8ce0b90e-79a7-4894-b110-112b9c70e6a2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:10:64:24:0d:a2:73:90:b4:a6:d1:bf:88:d3:
                    20:d9:74:71:07:dc:9f:6a:cd:26:b8:7e:15:50:6e:
                    3e:f0:90:6a:ee:b8:9c:57:48:6c:1f:7a:03:f6:11:
                    79:ab:04:b2:0b:a3:e3:4c:ce:8a:f8:8b:ef:c5:cb:
                    80:2f:c4:8a:b1:f6:bd:00:8e:e2:de:32:3d:09:e6:
                    c6:32:66:19:35:de:a2:ab:d3:6e:d1:c3:ed:7f:63:
                    d5:a9:97:9c:74:5e:db:df:22:6b:6c:1b:b2:f5:30:
                    54:a0:22:87:b0:a6:1d:44:79:47:e4:34:21:f1:59:
                    c1:28:3b:a7:71:7f:79:18:83:dd:1b:c3:b3:98:71:
                    3a:b7:65:9b:4e:b8:09:de:36:32:8a:fa:d0:96:b2:
                    41:09:9e:d2:a7:76:31:30:69:11:e5:b1:80:0a:55:
                    8f:b6:a5:55:8b:1a:fe:b4:09:ea:c5:8d:10:bd:64:
                    0e:83:00:45:ab:d1:69:b2:fe:61:8f:48:ac:87:7d:
                    2e:5d:c6:bb:a0:94:8b:a9:46:be:0c:20:52:14:67:
                    c3:db:01:81:12:88:dc:ae:41:34:78:96:3b:be:ec:
                    c6:bd:69:d2:89:0e:a5:0d:58:7e:99:7b:a8:ff:75:
                    49:71:91:9e:19:fa:77:84:58:fd:01:ab:e1:de:4d:
                    0a:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                54:C5:84:EF:C7:08:4B:6D:4E:27:8E:F5:DF:15:AC:1E:00:20:12:95
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/b902a145-91ce-3127-b047-3b79b31c5679.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.68.126.31/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         8b:50:60:7e:8c:f1:fd:38:3a:eb:b2:97:4f:35:dc:e4:39:e2:
         65:ce:63:b3:7d:16:c5:56:5f:e8:c8:92:3c:ba:42:7b:99:9b:
         13:04:cf:b7:95:de:3b:5c:c7:34:61:ce:e1:9f:ba:68:d4:a9:
         67:dc:bc:68:5d:9e:ac:3b:21:a6:45:1b:73:84:c0:62:4a:65:
         fd:b0:3f:f6:1d:35:be:b7:20:2e:a0:e4:22:d2:c9:8e:04:2e:
         d1:2c:91:bd:10:d9:af:1b:dc:60:0e:39:16:6b:7c:0c:da:d3:
         fd:68:2b:1c:1d:33:c9:a8:0b:aa:88:10:99:41:44:16:a2:ac:
         ef:19:12:ec:60:a0:00:03:44:32:06:c7:28:c6:7b:86:bf:f3:
         95:7c:45:93:a4:ed:05:03:95:14:96:47:8a:99:ab:d5:0d:17:
         fe:88:1e:dc:6b:ad:f8:3e:48:a3:7d:35:67:1d:b1:4e:9f:b5:
         97:59:30:ee:99:0c:12:a6:13:d3:ef:82:14:7c:6d:d6:86:82:
         5e:00:3c:6c:8e:6e:72:4d:b6:d4:c3:7a:03:0f:84:8f:bc:fb:
         9d:d5:dc:ea:cd:95:ca:e4:80:a4:36:0b:e4:8c:a6:f1:40:89:
         88:15:cd:bc:f5:17:ed:f9:e4:7b:ae:fb:a2:55:d1:aa:ad:84:
         c3:95:b3:42
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 21:02:23 2026 by rpki-client