Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/ceb329b5-9eed-3609-9a31-ee5c3fe97f8c.roa
File:                     ceb329b5-9eed-3609-9a31-ee5c3fe97f8c.roa (raw, json)
Hash identifier:          Eb/zftlce42dcA0nQK2tsJqmLYpyPmILcDwuKER5abs=
Subject key identifier:   62:A4:B4:F5:F1:87:5F:9D:FB:CB:6D:B5:9B:CB:E8:25:54:94:8F:98
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584D703FF68288618FED6FF6FC00
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/ceb329b5-9eed-3609-9a31-ee5c3fe97f8c.roa
Signing time:             Wed 08 Apr 2026 13:00:33 +0000
ROA not before:           Wed 08 Apr 2026 13:00:33 +0000
ROA not after:            Tue 07 Jul 2026 13:00:33 +0000
asID:                     396540
IP address blocks:        192.42.175.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 19 Apr 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:70:3f:f6:82:88:61:8f:ed:6f:f6:fc:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Apr  8 13:00:33 2026 GMT
            Not After : Jul  7 13:00:33 2026 GMT
        Subject: CN=74a94e1a-0070-40eb-bec3-050e6bc8441a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:eb:85:b6:0b:a3:38:d5:ac:66:7e:66:8d:8f:
                    ae:8b:51:9c:bf:82:ad:7f:40:53:23:e9:d6:80:0a:
                    3b:26:b5:44:c0:1b:d2:9f:fa:fb:c8:f0:12:1d:9e:
                    3f:c6:b7:78:4d:1a:ca:ff:d4:05:ff:ae:a6:15:de:
                    49:2d:89:18:b1:a8:49:e4:17:2a:c3:77:d9:ae:72:
                    95:53:fe:a8:fd:d8:0e:a5:22:3a:22:a2:00:df:b3:
                    45:af:a7:7d:74:04:5f:31:28:4b:a7:67:82:cd:0b:
                    20:51:78:d2:27:2f:a0:74:92:8c:3e:44:6f:f9:48:
                    8d:24:af:c8:14:d9:51:42:18:40:1a:3e:aa:fe:86:
                    26:4e:4f:c4:fc:02:27:29:e4:8e:3c:e5:14:68:e7:
                    6b:29:6f:48:d5:d6:73:4d:6f:d9:5c:86:b5:27:87:
                    5b:11:2a:0e:d2:92:df:f3:42:02:74:93:40:95:4a:
                    77:e3:67:16:b6:0b:92:e3:b6:39:9c:f3:dd:f2:f1:
                    e5:8d:1b:5e:92:b9:03:14:9e:9c:e7:f3:28:59:a3:
                    64:8b:a0:0b:34:ff:99:db:49:30:cf:97:4b:80:fc:
                    b9:f5:eb:e6:62:ad:33:52:45:2e:5c:09:4c:ff:8d:
                    07:72:ec:2f:15:e5:a5:35:3b:ca:84:8a:f5:a8:4e:
                    84:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                62:A4:B4:F5:F1:87:5F:9D:FB:CB:6D:B5:9B:CB:E8:25:54:94:8F:98
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/ceb329b5-9eed-3609-9a31-ee5c3fe97f8c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.42.175.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         94:24:92:34:74:dd:95:c6:19:2b:8f:79:38:a4:b0:67:d9:ec:
         03:ae:2f:c7:f5:1f:ae:39:31:ad:8a:91:62:6c:eb:ed:b9:aa:
         59:16:bc:ba:6d:b1:6c:70:bc:1d:ed:1f:fc:09:bb:00:fc:f8:
         19:f9:7d:07:fc:2f:cc:c0:2b:c3:4a:d5:14:bc:5b:52:00:67:
         ff:c8:a6:87:93:a8:1c:c7:11:08:a2:cd:76:6b:be:74:37:67:
         94:31:e3:65:7a:dd:f9:6f:70:c4:bc:47:21:94:fe:1d:97:d3:
         2c:ee:32:f3:95:55:f3:bf:45:24:22:42:05:c3:2b:08:e1:79:
         a0:53:69:3d:3e:48:1a:17:9f:a1:5d:e3:b9:00:96:a1:2e:29:
         ba:d2:1a:3c:dc:68:d3:94:f7:c3:c7:32:6c:a6:02:eb:ba:8c:
         b6:ba:b3:2c:ee:de:b8:ef:d4:13:aa:db:6c:2a:3e:b5:b2:df:
         68:f5:af:1c:3e:e8:1b:a7:f1:b9:16:9f:01:25:6e:c2:c9:5e:
         1e:ff:9d:37:a3:f8:71:a8:24:27:0f:8b:c3:e6:ad:9d:be:d6:
         48:80:3e:41:f7:7e:f4:c8:cb:d1:56:6a:47:f1:54:96:7b:31:
         65:43:85:68:36:30:0c:fe:89:a0:0f:b1:eb:3c:95:ac:eb:93:
         14:27:27:b0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 11:49:58 2026 by rpki-client