Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c8e342a7-0814-315c-819b-1abb4fc370dc.roa
File:                     c8e342a7-0814-315c-819b-1abb4fc370dc.roa (raw, json)
Hash identifier:          yQ44RnU7YcFj9ET7N6cqvKgfv8sG+jUVNjp1Oi5C6s4=
Subject key identifier:   36:E4:FA:CA:3C:A5:44:BC:42:5F:45:45:CF:4B:34:1E:35:9C:94:29
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584DFC143C9992AF80E2922A0F18
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c8e342a7-0814-315c-819b-1abb4fc370dc.roa
Signing time:             Thu 28 May 2026 15:06:03 +0000
ROA not before:           Thu 28 May 2026 15:06:03 +0000
ROA not after:            Wed 26 Aug 2026 15:06:03 +0000
asID:                     36631
IP address blocks:        192.35.51.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 14 Jun 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:fc:14:3c:99:92:af:80:e2:92:2a:0f:18
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: May 28 15:06:03 2026 GMT
            Not After : Aug 26 15:06:03 2026 GMT
        Subject: CN=43879f97-f091-424a-b456-2aa424b35596
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:bd:53:24:e2:4f:94:51:54:50:c6:ef:03:05:
                    d6:1f:04:8e:e0:ce:84:e8:39:b9:71:a5:8d:ba:8d:
                    19:9f:77:87:09:37:70:9a:d8:99:fe:bc:5d:91:f9:
                    b2:97:19:7c:6d:40:e5:db:02:65:58:bd:19:5f:49:
                    a6:9b:b5:ae:74:35:38:ab:87:9d:2b:f6:38:08:fd:
                    03:b1:34:a7:2d:64:0a:88:50:9e:8e:10:fb:e3:d4:
                    0e:65:c2:bc:50:59:d6:4b:3b:39:6c:d0:70:9a:c3:
                    22:0b:88:ec:da:89:2f:5b:c4:26:a8:9c:b9:9a:dc:
                    b3:0f:e7:d2:25:46:32:74:cd:90:d5:55:84:24:04:
                    c5:b4:ac:6b:16:3d:dc:44:86:1a:dd:97:8e:84:77:
                    5a:90:19:a9:8c:5a:08:f0:b6:42:f0:07:e6:e4:e7:
                    4e:97:2c:8f:86:c8:85:de:bb:1b:87:22:4b:25:67:
                    48:bc:ab:28:75:15:6c:f4:f3:f3:9d:ce:17:26:02:
                    9d:8c:67:88:da:72:21:53:e3:20:1d:e7:4d:0d:77:
                    7b:45:8e:81:1f:4c:74:9a:63:29:10:61:15:91:56:
                    d2:a5:4c:78:ef:48:2e:bb:b9:96:79:09:c2:52:b9:
                    7f:39:8c:58:3b:31:1d:a6:de:fd:d5:16:4e:ae:a4:
                    59:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                36:E4:FA:CA:3C:A5:44:BC:42:5F:45:45:CF:4B:34:1E:35:9C:94:29
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c8e342a7-0814-315c-819b-1abb4fc370dc.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.35.51.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         71:72:b3:8d:d0:de:e8:53:62:25:0c:7b:01:79:a1:dc:3a:cb:
         35:0b:77:31:91:2a:4a:ff:71:17:bf:0a:06:18:5e:49:ad:2f:
         2e:86:5e:a0:7c:6d:44:99:23:4d:93:9a:18:04:0c:ba:d6:29:
         e9:25:af:d7:1e:0f:40:0c:ea:fc:e5:07:4f:72:d2:10:51:1a:
         0b:d3:a2:45:d1:e4:3f:5a:1c:9c:eb:cd:b7:ba:27:c7:f8:c9:
         92:70:50:c6:28:fe:75:36:bf:04:1c:b7:34:d2:7a:3e:97:0f:
         82:a4:21:ec:4e:0a:f6:6c:80:d2:20:75:ca:e8:f1:fe:ea:dd:
         83:cb:51:75:e8:e3:65:12:17:52:86:68:ef:01:9d:da:29:23:
         01:a2:9e:b3:83:0e:d0:c2:20:28:7b:dd:1a:1b:df:27:e8:3f:
         e7:33:3a:50:40:2b:0b:16:7a:de:56:f0:7f:f2:1e:d5:f5:8f:
         6e:43:a3:d3:cd:93:cd:74:d3:46:16:7b:1c:2b:84:3d:ce:87:
         ff:b4:f4:a1:6c:60:72:e8:fe:9c:ef:cf:52:f8:9b:33:85:8e:
         77:88:8d:9f:c6:c0:0b:ac:65:bc:64:27:2e:e8:f8:49:b1:16:
         4c:2c:cf:0b:8f:36:7c:b9:16:a1:55:f0:c7:56:4f:53:00:72:
         b4:50:5a:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 15:01:08 2026 by rpki-client