Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/cac60788-c996-370a-bbe8-c04759eb2aa2.roa
File:                     cac60788-c996-370a-bbe8-c04759eb2aa2.roa (raw, json)
Hash identifier:          +fqAsXf+d1AaTXrmi4EcfCIEUwxNkLvA80c1jE8OAkU=
Subject key identifier:   ED:DB:28:8F:A5:00:7E:A6:6D:B7:FE:7E:F1:FD:FA:A6:B8:04:11:04
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584D86B7988C2E695980EFD1B5C0
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/cac60788-c996-370a-bbe8-c04759eb2aa2.roa
Signing time:             Thu 16 Apr 2026 14:09:49 +0000
ROA not before:           Thu 16 Apr 2026 14:09:49 +0000
ROA not after:            Wed 15 Jul 2026 14:09:49 +0000
asID:                     396599
IP address blocks:        192.42.173.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 19 Apr 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:86:b7:98:8c:2e:69:59:80:ef:d1:b5:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Apr 16 14:09:49 2026 GMT
            Not After : Jul 15 14:09:49 2026 GMT
        Subject: CN=56b1a824-7095-4ae3-a712-eca04fbe8fc6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8c:b5:98:6c:da:89:37:31:9a:a2:0e:75:e6:cb:
                    36:cc:54:9c:5d:c9:14:64:d1:c6:92:c8:27:32:65:
                    91:2e:a4:60:6e:28:db:83:2b:59:48:1a:ea:f5:45:
                    7f:10:48:ed:43:0c:ab:b4:01:a8:79:fa:0f:49:f3:
                    2c:bf:b9:86:6a:e0:54:4a:61:b6:ba:4d:94:83:45:
                    83:42:90:68:03:76:39:92:c8:3d:e0:c0:e3:9f:10:
                    79:df:1b:54:14:89:5d:67:8c:0f:30:d7:3c:76:7e:
                    13:1d:c5:b6:d7:f1:2c:90:bc:a5:e3:68:e9:29:21:
                    0e:e3:48:8e:86:3a:f9:72:7d:2f:c0:d8:cb:eb:6e:
                    25:ef:fa:7f:76:e7:f1:7f:02:8f:cc:a1:b3:a3:a1:
                    3a:71:aa:46:91:c6:a7:47:02:88:f1:21:f2:b5:06:
                    c7:65:cd:c5:99:8c:48:d9:28:10:63:50:0e:8d:89:
                    78:36:be:30:ad:0c:02:5f:a2:eb:46:a1:c2:25:fd:
                    33:b8:46:37:d0:bf:41:5e:9e:ca:a9:ea:79:d1:53:
                    41:c1:7f:28:fa:17:90:a5:00:5e:e5:4c:d1:57:4e:
                    a4:97:49:a6:d9:fc:a8:fe:eb:e0:b8:dc:d8:fc:a4:
                    52:e5:ca:d9:29:84:3d:6f:51:68:e4:53:fe:0b:88:
                    e0:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                ED:DB:28:8F:A5:00:7E:A6:6D:B7:FE:7E:F1:FD:FA:A6:B8:04:11:04
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/cac60788-c996-370a-bbe8-c04759eb2aa2.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.42.173.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4a:b7:5a:e7:37:2e:ae:ae:6c:9c:a3:b2:48:df:0b:dc:f2:7a:
         e4:e0:e7:93:6c:53:c9:7d:8d:a2:bd:51:ff:c3:81:f4:84:e3:
         a0:d8:be:d0:e2:ac:4f:58:b6:be:28:7f:78:8a:6d:80:2d:10:
         ff:e6:dc:d9:9b:58:9b:55:02:91:6d:39:72:b1:89:e5:2a:83:
         60:c1:12:9f:ad:c6:89:99:14:fe:f2:2e:a0:54:6d:38:24:e6:
         84:84:3d:84:5d:ef:1d:d6:18:6f:e6:b4:f9:a2:de:53:4c:5f:
         2a:2e:a8:74:6e:a5:4b:c6:70:16:f1:ee:d3:58:b0:24:e1:0d:
         db:e2:b7:15:63:46:72:63:45:98:02:82:aa:18:9f:10:79:a1:
         85:23:1a:72:78:f8:46:0f:59:17:3a:d2:04:32:67:86:13:2b:
         74:a0:ad:73:2c:31:cd:d3:0d:74:b6:9f:3e:c7:44:77:9d:0a:
         fa:ee:89:ca:db:bb:7b:c7:94:b9:12:d8:a7:40:14:25:bc:de:
         d5:fb:b8:e8:26:85:82:b2:9b:9b:6c:5a:9f:87:0c:1e:f9:b0:
         cf:19:5a:6a:aa:32:eb:d3:15:38:76:b6:05:5d:7d:8a:fb:6f:
         22:61:8e:0f:c4:5e:1a:fd:51:79:c0:a5:b4:86:39:1e:14:b7:
         11:ed:6a:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 12:00:47 2026 by rpki-client