Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/babd3466-e6c2-3811-ab93-4cf6d0e0fc17.roa
File:                     babd3466-e6c2-3811-ab93-4cf6d0e0fc17.roa (raw, json)
Hash identifier:          GW9LpMCSuUyO1KibGpTv66YZ5zTvtv7Rbd/hELIWOy8=
Subject key identifier:   A7:AF:B7:39:CC:BB:BD:54:4D:17:48:A0:FC:EE:34:C6:6A:F5:98:8C
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584DE1507BB0BFF64772A7830500
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/babd3466-e6c2-3811-ab93-4cf6d0e0fc17.roa
Signing time:             Tue 19 May 2026 01:00:24 +0000
ROA not before:           Tue 19 May 2026 01:00:24 +0000
ROA not after:            Mon 17 Aug 2026 01:00:24 +0000
asID:                     36621
IP address blocks:        192.43.172.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 16 Jun 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:e1:50:7b:b0:bf:f6:47:72:a7:83:05:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: May 19 01:00:24 2026 GMT
            Not After : Aug 17 01:00:24 2026 GMT
        Subject: CN=4761bf2d-661d-4879-a549-35c3d1b7bb9d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:48:58:1e:99:32:36:66:98:16:f2:09:30:d5:
                    ae:f1:d5:e9:7f:57:53:b0:2d:33:12:a4:7b:82:3f:
                    e7:26:a7:64:ce:a9:95:33:76:52:2d:78:a7:ac:ff:
                    22:a2:82:82:28:94:17:01:ff:62:17:75:57:e2:fb:
                    ca:05:69:31:0a:65:09:f6:bb:76:38:44:41:f7:70:
                    37:53:78:ef:92:21:03:95:e8:4d:a4:ff:58:21:de:
                    e2:01:0c:4b:c4:e5:e7:ac:ee:fa:13:1e:d3:18:6c:
                    72:ef:d9:46:f2:d1:b7:c3:33:90:7b:be:2d:9f:05:
                    10:c1:19:c5:ac:d4:4f:d8:bc:2f:40:ad:1a:04:29:
                    85:0e:b7:b2:6d:99:95:35:f8:d6:ea:01:69:9d:80:
                    a6:f7:c5:5e:e8:61:79:fa:b2:ed:56:a8:b5:b5:4a:
                    c3:4c:59:33:a6:21:19:23:8c:24:88:c8:d8:46:77:
                    80:b1:5f:0e:25:fd:af:10:73:bf:00:46:ee:48:dc:
                    cc:2b:b8:2b:ca:87:8c:b1:7a:c5:10:ed:c0:f9:d6:
                    f6:06:db:16:aa:96:f9:77:f3:6c:9d:70:8a:3c:83:
                    d9:7a:70:54:d8:c5:1d:29:9b:1d:65:fd:1f:75:cf:
                    ad:52:a5:65:64:77:30:1f:84:f6:5b:b9:da:09:60:
                    c5:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A7:AF:B7:39:CC:BB:BD:54:4D:17:48:A0:FC:EE:34:C6:6A:F5:98:8C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/babd3466-e6c2-3811-ab93-4cf6d0e0fc17.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.43.172.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         b3:63:13:a0:d5:44:06:e7:ba:6e:29:31:2e:bc:ab:54:91:d5:
         c6:42:a3:d9:21:75:5d:3b:5f:7a:38:a7:7e:42:b9:83:3a:0d:
         73:85:64:9b:84:06:a2:d7:2c:ae:e1:ab:1a:78:22:fd:88:1b:
         27:bf:98:3b:34:d7:75:43:26:9c:91:46:34:e3:06:0e:f9:b0:
         1d:b6:5d:ea:21:d6:a4:6a:26:90:ab:15:03:cd:35:e6:9e:98:
         9e:6a:5f:8a:44:2e:d9:ea:6f:7f:7f:c1:01:f1:87:49:2c:fa:
         fd:e2:4d:c8:6b:57:9b:27:2f:e3:36:84:55:c8:f8:ba:9c:af:
         37:c8:60:07:97:4e:19:26:88:e5:40:88:85:6b:28:a9:02:19:
         0b:98:7d:2e:3a:0c:de:2b:ab:be:2e:9e:aa:d7:d7:96:f6:bc:
         60:43:57:7e:02:98:b3:73:af:d7:0d:d6:0d:03:99:b2:ab:09:
         de:1d:50:ba:52:06:20:13:30:63:97:5c:a0:72:3b:89:16:33:
         ba:98:a1:35:6f:b8:ef:e6:0f:40:d4:91:06:4e:b6:7e:63:2c:
         e4:b4:51:67:6a:e5:9e:4e:96:7e:c2:96:af:bf:f3:ac:3b:cd:
         16:1a:9b:75:eb:31:4c:db:fe:13:10:27:9d:23:e9:5b:a4:8d:
         a2:b7:b4:de
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 20:00:43 2026 by rpki-client