Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/d4e20185-4d8f-38eb-bff7-747ea1c91534.roa
File:                     d4e20185-4d8f-38eb-bff7-747ea1c91534.roa (raw, json)
Hash identifier:          Atnh1J1TNSHSTCzICCvVgV5ZZwoLgChYV193HpwS0Ow=
Subject key identifier:   88:A8:7F:74:A6:09:3A:BA:00:AC:B7:7C:5C:CB:0B:07:5A:03:DD:0C
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584DFC1438916AB852BE45772DF0
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/d4e20185-4d8f-38eb-bff7-747ea1c91534.roa
Signing time:             Thu 28 May 2026 15:06:01 +0000
ROA not before:           Thu 28 May 2026 15:06:01 +0000
ROA not after:            Wed 26 Aug 2026 15:06:01 +0000
asID:                     396587
IP address blocks:        192.35.51.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 14 Jun 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:fc:14:38:91:6a:b8:52:be:45:77:2d:f0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: May 28 15:06:01 2026 GMT
            Not After : Aug 26 15:06:01 2026 GMT
        Subject: CN=dfb32401-2cd0-41fe-8d66-0225202564ab
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:80:2d:3e:3c:4b:1a:dc:bd:d0:82:59:65:08:6d:
                    45:6a:8b:3a:6d:d8:7a:af:7e:1d:28:b5:c3:66:3b:
                    d6:7f:67:97:f4:14:6c:7e:22:f0:d7:35:e6:c3:2c:
                    61:75:3d:17:5d:5d:ca:4c:08:d6:0a:b2:a7:3e:5a:
                    47:1f:82:2d:fc:f5:7d:d7:1b:e5:3a:51:b5:ae:15:
                    bb:be:43:14:6f:5b:7e:90:9c:af:cf:32:21:25:58:
                    71:a1:74:8a:5e:d8:1a:01:d9:94:b1:96:ee:a2:1c:
                    78:7b:ba:7f:e8:ac:4c:73:80:48:8c:52:e3:09:65:
                    65:80:82:5e:55:45:1a:6d:d3:96:04:57:5c:27:1e:
                    ad:b5:45:5b:0d:67:44:ed:02:71:1b:4a:1a:4f:4d:
                    97:12:b8:59:11:72:48:65:d7:a4:4e:9f:6f:01:fc:
                    9f:17:95:bf:76:2b:9a:7b:17:a6:8c:99:62:f4:be:
                    86:5e:ca:00:d1:84:e2:cc:28:17:cb:93:8e:e0:3e:
                    2b:de:2e:74:36:12:04:90:91:db:41:e9:de:5b:02:
                    22:44:a3:b2:8d:ee:a7:93:37:e8:7e:33:42:e0:d3:
                    76:43:d6:b3:aa:f1:d3:cb:bd:75:52:cf:4c:90:67:
                    d4:2b:67:a4:50:bf:08:c6:43:40:8b:6b:17:1d:cf:
                    41:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                88:A8:7F:74:A6:09:3A:BA:00:AC:B7:7C:5C:CB:0B:07:5A:03:DD:0C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/d4e20185-4d8f-38eb-bff7-747ea1c91534.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.35.51.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         ae:53:92:ec:66:9f:ee:e0:6e:89:42:ba:45:ac:5f:a2:71:50:
         06:96:4b:a8:a1:e7:88:ae:17:a3:81:37:8b:fc:bf:2e:c0:7b:
         2e:d7:5a:e2:f1:83:65:22:62:7b:92:51:40:6a:df:1b:6a:20:
         1d:ca:76:05:ea:12:7c:51:d1:07:b0:7e:16:97:ad:a7:6e:ee:
         94:62:21:ab:3b:51:57:4e:85:5b:52:91:73:da:e5:f9:4f:77:
         b3:cf:0e:9d:16:a6:ca:d9:2f:e2:3b:7e:fe:53:cd:77:34:f9:
         45:e1:df:13:a8:ab:13:a5:d9:3f:79:64:3a:7a:1e:3f:10:85:
         75:02:e3:19:b5:1a:fc:fc:e7:2f:ec:59:c6:32:e7:11:e4:2d:
         35:ed:d4:9d:3f:74:72:7a:5a:05:7c:5c:43:f2:bf:12:88:88:
         64:54:a0:88:bf:67:3f:90:dc:67:53:5c:2e:92:78:42:65:1c:
         21:53:b3:c1:8c:47:ca:da:f9:17:b6:1f:9b:32:9f:36:5d:43:
         74:ce:e2:47:f9:56:a3:05:bb:43:8f:77:b7:72:e4:b1:a6:a8:
         e5:97:7f:be:51:3e:7c:25:b7:8a:dd:a8:74:5a:d7:c9:10:6e:
         f5:63:73:6f:fb:3b:6b:86:1e:55:68:fb:f4:02:0e:51:a2:30:
         b1:97:95:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 15:42:09 2026 by rpki-client