Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/cc73a6ea-c5c3-350e-bdeb-302580d91add.roa
File:                     cc73a6ea-c5c3-350e-bdeb-302580d91add.roa (raw, json)
Hash identifier:          Sd8n6uN+JsecFiIPa79Q6AuQhEc9hAI0z4twgGJ/f6Q=
Subject key identifier:   9E:F3:55:AC:31:2C:2E:32:0C:14:DB:CA:BC:91:F8:9C:1B:77:5D:92
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584D703FCB618AE60307BCE71BB0
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/cc73a6ea-c5c3-350e-bdeb-302580d91add.roa
Signing time:             Wed 08 Apr 2026 13:00:33 +0000
ROA not before:           Wed 08 Apr 2026 13:00:33 +0000
ROA not after:            Tue 07 Jul 2026 13:00:33 +0000
asID:                     397199
IP address blocks:        192.42.175.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 19 Apr 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:70:3f:cb:61:8a:e6:03:07:bc:e7:1b:b0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Apr  8 13:00:33 2026 GMT
            Not After : Jul  7 13:00:33 2026 GMT
        Subject: CN=14f95f6b-125d-400f-9267-7d704af7cc3d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:c3:f6:9a:63:8e:3d:28:85:36:55:ea:10:06:
                    2e:72:5d:88:51:6e:09:30:73:3b:ad:31:b2:eb:af:
                    c1:70:31:9c:b8:e5:89:d3:6f:57:63:49:0b:0e:8c:
                    1e:ee:2e:e3:73:1d:57:2e:d0:8f:1b:f5:f9:59:08:
                    f0:41:af:80:f6:87:0e:7d:2e:64:76:de:53:4b:6c:
                    2a:c5:eb:29:77:4f:2a:b5:7e:ad:82:00:f4:a1:8f:
                    16:36:8a:a0:99:49:a4:3c:36:3f:3e:d8:db:c5:a2:
                    a7:c6:a7:e6:7d:8c:a1:0b:9b:d3:3f:10:21:d6:8e:
                    ba:8a:fe:b5:ba:4c:cf:c0:24:c9:d2:5f:f7:d6:d7:
                    b2:29:c4:63:86:ae:3a:ab:b4:df:60:1b:95:44:28:
                    78:5f:1b:25:87:24:89:c2:83:27:72:99:19:58:d0:
                    55:80:23:1e:ce:80:a3:ce:4c:46:ca:63:2b:f4:bc:
                    54:cc:a9:36:9a:ac:54:68:d6:0e:80:34:53:2f:db:
                    3d:ab:cd:78:6d:5b:b4:9a:bc:b2:bd:be:0e:54:d3:
                    9a:ed:13:d0:f9:c7:f7:49:7f:36:0a:b1:aa:54:4f:
                    ef:14:f4:c3:c3:db:49:44:31:eb:05:75:f1:cf:b0:
                    22:fd:d9:25:c1:84:0a:ce:56:eb:a9:fe:5c:7d:61:
                    db:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9E:F3:55:AC:31:2C:2E:32:0C:14:DB:CA:BC:91:F8:9C:1B:77:5D:92
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/cc73a6ea-c5c3-350e-bdeb-302580d91add.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.42.175.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         45:31:26:52:87:64:c4:84:2e:88:a1:78:da:1d:5e:64:1b:51:
         ba:0d:fb:e4:eb:6e:47:0c:51:12:80:c8:42:61:ad:a9:a2:c7:
         75:8a:84:1a:ac:4e:20:88:88:79:5d:ad:5b:23:95:59:fe:c1:
         f3:bf:c3:0c:57:1b:de:52:12:a7:f0:f2:d9:ed:fc:fd:e0:a7:
         73:9e:69:6a:d5:f4:93:3e:2d:8b:3c:8b:c2:39:df:45:6a:f1:
         0d:03:a2:de:79:07:1b:98:64:5b:20:93:9f:6c:7c:ed:7d:80:
         af:c0:6d:52:d4:85:37:f9:70:93:c9:01:cc:1d:97:d7:8d:da:
         a6:46:53:cf:f9:a8:28:ad:3b:91:60:6a:22:62:37:49:71:d6:
         60:3e:12:98:22:60:3f:dd:75:49:57:df:a9:05:e9:aa:d7:94:
         19:27:ea:5a:9b:65:db:7c:44:53:83:cf:aa:39:a8:2d:82:2a:
         43:c3:b0:15:04:0f:a3:9e:4c:74:b5:66:f5:e2:30:f5:36:15:
         93:d0:05:ee:2c:2a:2d:ed:4c:57:97:6c:1f:e5:53:ad:b1:80:
         77:f6:52:75:e7:c1:e7:53:5a:5d:00:1f:ea:73:d6:d2:40:7d:
         9e:f1:63:ef:0c:2c:d6:c6:2b:bc:bb:5f:ee:a9:40:41:9e:8d:
         7b:9e:ac:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 19:37:00 2026 by rpki-client