Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/dc629aac-3b32-3bca-abba-3e7b26577afb.roa
File:                     dc629aac-3b32-3bca-abba-3e7b26577afb.roa (raw, json)
Hash identifier:          zKW/8cH9N5CRKy3mqOkZ97u3RsVXrzJVeV/G2kLsTJ0=
Subject key identifier:   78:2D:53:38:44:C6:81:6F:9D:C6:BE:B0:97:9D:CC:45:7D:E6:E5:42
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584EA799B7D24009B2D1CA033BA0
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/dc629aac-3b32-3bca-abba-3e7b26577afb.roa
Signing time:             Wed 29 Jul 2026 01:00:12 +0000
ROA not before:           Wed 29 Jul 2026 01:00:12 +0000
ROA not after:            Tue 27 Oct 2026 01:00:12 +0000
asID:                     396609
IP address blocks:        192.35.51.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 30 Jul 2026 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:a7:99:b7:d2:40:09:b2:d1:ca:03:3b:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Jul 29 01:00:12 2026 GMT
            Not After : Oct 27 01:00:12 2026 GMT
        Subject: CN=2cbe0833-d80b-4dbb-a367-6adc941c7dc0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:9c:df:09:41:70:88:51:fe:67:7d:0e:75:1e:
                    d6:bf:ab:26:00:3f:ed:be:71:d2:53:87:d3:34:2a:
                    95:7c:35:95:82:f9:a9:1e:dc:c5:a3:11:cd:b2:f1:
                    98:b3:13:35:97:67:dc:2c:43:e9:e7:c4:36:4a:5f:
                    e9:e4:36:b3:34:14:99:d7:55:c4:92:bb:49:c6:50:
                    0d:27:98:77:ef:7e:ed:76:14:88:ed:ca:a6:8c:b7:
                    12:0e:fe:c0:ce:b4:0b:ae:6a:26:53:a0:5a:a9:85:
                    aa:a5:fa:f9:ce:78:cd:25:9c:f7:2a:b7:8f:9e:79:
                    f1:c3:72:c4:38:9c:aa:bf:79:a7:75:ad:6e:91:ee:
                    f6:d1:57:16:3f:03:d0:c4:c2:2d:a2:0e:36:c4:20:
                    9b:76:33:32:c3:9d:3a:bc:66:03:31:3d:a0:5a:a9:
                    5e:5d:22:77:7d:db:d3:62:89:72:78:88:fc:63:e1:
                    90:62:20:4d:8a:d1:64:00:82:de:0a:89:3b:7f:be:
                    70:0c:6b:a6:4b:b3:03:e2:39:51:15:84:d8:0f:33:
                    a0:bd:2f:de:92:b2:69:7f:dc:b9:2e:b3:c3:97:d1:
                    9c:91:f8:8f:10:74:e8:4f:2d:ed:e5:42:68:e2:78:
                    79:01:b3:79:70:3f:bb:f5:c4:ce:b8:4e:49:c6:a2:
                    7f:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                78:2D:53:38:44:C6:81:6F:9D:C6:BE:B0:97:9D:CC:45:7D:E6:E5:42
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/dc629aac-3b32-3bca-abba-3e7b26577afb.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.35.51.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         65:09:5a:0b:b6:34:7d:eb:9c:08:5a:cd:77:de:71:88:77:24:
         6d:65:70:e9:3f:b8:6d:f9:70:60:31:e8:c7:04:5b:aa:06:f9:
         67:ad:fc:1e:dc:21:06:be:39:46:fa:1c:1a:7a:08:ab:2f:dd:
         f8:11:1d:08:af:34:9f:72:a9:9c:fb:3d:d8:55:96:07:b6:00:
         59:24:23:af:b7:f4:ca:5b:a9:32:76:51:3d:c1:ab:a1:b6:3b:
         2c:49:47:90:88:e7:31:60:37:21:ba:58:53:66:a8:b2:78:f9:
         a5:86:e5:36:fb:cf:ff:bc:8a:49:1e:ce:f9:bd:14:45:15:0c:
         cd:47:0c:b8:0c:82:d2:8b:a7:97:fb:1b:f5:68:a4:99:d2:ba:
         07:3a:79:ee:2c:65:bf:0d:62:8c:96:07:85:a7:de:f2:00:e0:
         ab:d6:56:db:c3:6d:3c:d4:7e:9c:20:2f:be:ed:ab:8c:2e:2b:
         2f:38:55:1e:71:15:58:42:7b:14:63:30:ee:97:69:55:88:b3:
         d1:fa:eb:25:56:48:5e:0e:fc:38:84:30:d6:73:99:03:69:d5:
         10:6f:44:19:90:73:79:47:e9:ed:8d:9a:e3:5f:9d:6a:55:cf:
         4d:ff:21:44:29:dd:49:3e:f6:59:b4:70:69:82:23:bd:d8:1a:
         a9:13:b4:50
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 03:32:29 2026 by rpki-client