Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/cbcdb66b-7aa2-30e0-aed1-34ece77176ea.roa
File:                     cbcdb66b-7aa2-30e0-aed1-34ece77176ea.roa (raw, json)
Hash identifier:          XlikrKkoVgEZEuJtBAqRsN98culRL/hsvCqUQ+8mzHo=
Subject key identifier:   AD:99:23:D8:F7:17:53:98:4B:7A:39:F7:39:12:B2:57:15:A9:80:34
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584D86B79DCD2961583B2EE54D80
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/cbcdb66b-7aa2-30e0-aed1-34ece77176ea.roa
Signing time:             Thu 16 Apr 2026 14:09:51 +0000
ROA not before:           Thu 16 Apr 2026 14:09:51 +0000
ROA not after:            Wed 15 Jul 2026 14:09:51 +0000
asID:                     396562
IP address blocks:        192.42.173.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 19 Apr 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:86:b7:9d:cd:29:61:58:3b:2e:e5:4d:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Apr 16 14:09:51 2026 GMT
            Not After : Jul 15 14:09:51 2026 GMT
        Subject: CN=3ca8dc09-20ae-48a7-a8e7-8b6c2b2b3dc6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:f5:13:47:42:83:b1:0b:59:26:5a:a3:cb:c8:
                    96:ab:d9:a0:76:ad:f8:3c:f1:94:55:81:07:12:23:
                    bf:bc:c6:bd:5a:48:84:1f:4a:a2:06:d4:44:41:b5:
                    9f:af:1a:58:29:3f:0c:ad:73:a6:fa:30:cb:d2:90:
                    06:e3:27:5e:0a:20:79:a7:fc:9a:f6:c6:34:2a:6a:
                    84:3c:b1:5d:46:e6:3f:fd:83:b5:cb:79:d0:8e:ad:
                    93:4b:a5:3c:60:97:58:a1:9e:89:9e:fb:63:f0:0c:
                    ff:d0:c0:c0:81:e2:57:6a:04:2e:26:e8:ca:db:0c:
                    bf:80:ee:0b:98:6b:eb:ff:c5:8e:30:45:d7:d3:4c:
                    f2:72:de:f1:e2:65:95:ba:38:8c:b2:df:39:f0:af:
                    fe:c3:0a:1e:2e:08:ea:5a:10:5d:d1:6b:25:8a:5b:
                    10:ac:9d:90:91:1b:e9:ca:9f:7f:e5:0e:b5:b5:31:
                    fa:68:b4:f2:c5:d7:e8:45:ab:95:42:cd:87:57:49:
                    4b:2e:35:62:19:57:8d:3c:d0:70:31:77:ac:12:a9:
                    61:2d:13:3e:e7:b4:0c:05:1c:8d:51:03:a3:43:c1:
                    0e:a0:97:5f:65:42:d8:42:ca:2c:30:52:ce:d0:60:
                    6c:cc:3a:4f:bd:f5:bf:3c:86:94:4e:2e:6c:2f:1a:
                    f6:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AD:99:23:D8:F7:17:53:98:4B:7A:39:F7:39:12:B2:57:15:A9:80:34
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/cbcdb66b-7aa2-30e0-aed1-34ece77176ea.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.42.173.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         41:52:2c:6b:4e:76:5a:84:d0:cf:3e:34:96:eb:23:48:38:50:
         10:a6:5f:84:2c:e6:eb:cc:71:46:9e:17:3f:18:62:d1:a1:5f:
         5c:13:2f:23:cb:ea:ad:6e:c3:77:11:cd:dd:79:ed:aa:20:3c:
         45:e5:b9:d1:2b:18:0d:5e:86:6c:d8:01:29:19:e3:0a:4d:57:
         8c:87:28:d4:93:45:ce:7d:e1:21:18:0a:1b:8b:53:9f:15:a8:
         31:a5:1e:aa:f9:a0:50:ee:73:94:45:cf:1b:f6:53:3b:33:50:
         ac:c4:b4:fb:09:49:9d:3c:02:39:88:2f:f9:89:7c:4e:79:71:
         6b:7a:78:ee:7e:14:3f:4e:39:95:5b:02:ee:f2:0e:43:a0:9c:
         73:80:c3:a1:93:ad:bd:3b:f5:8f:0e:6c:49:61:dd:41:b6:ad:
         d8:af:62:79:6c:00:f5:87:fe:9a:a5:c8:81:99:66:18:3b:20:
         56:48:53:84:1e:de:92:8c:61:98:df:fd:a2:47:3f:10:5e:ce:
         06:87:9b:ea:f4:49:ab:f3:72:b7:04:5d:b6:b9:c4:ad:18:a6:
         0e:8e:70:f6:74:21:ba:5d:6c:91:62:1b:90:54:c6:ef:8f:e9:
         b8:06:c1:cf:87:6f:a0:6c:d8:7f:f8:5d:d4:39:8d:36:9b:22:
         66:21:b0:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 01:18:42 2026 by rpki-client