Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/e20c27ca-30cd-3ea3-a6b6-276523efa84f.roa
File:                     e20c27ca-30cd-3ea3-a6b6-276523efa84f.roa (raw, json)
Hash identifier:          eCL/AApGWcDeIFswGjOH0UXq2c1oVkefLPXVdnfwVp0=
Subject key identifier:   B1:AA:CD:49:92:14:DC:17:78:97:B7:CF:79:5A:F6:67:07:D2:33:9F
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584D6AAA7DC6F64AB8035996D6E0
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/e20c27ca-30cd-3ea3-a6b6-276523efa84f.roa
Signing time:             Mon 06 Apr 2026 13:00:30 +0000
ROA not before:           Mon 06 Apr 2026 13:00:30 +0000
ROA not after:            Sun 05 Jul 2026 13:00:30 +0000
asID:                     396593
IP address blocks:        192.42.176.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 19 Apr 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:6a:aa:7d:c6:f6:4a:b8:03:59:96:d6:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Apr  6 13:00:30 2026 GMT
            Not After : Jul  5 13:00:30 2026 GMT
        Subject: CN=1ddc8d46-623d-42a1-bdb3-39ae0d9b8251
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e4:86:1a:99:3c:65:f1:cb:7e:6b:f5:ee:c8:69:
                    fa:e5:74:aa:a1:82:c4:52:9b:a2:00:22:fa:7c:a7:
                    34:97:13:59:38:4e:6a:a1:31:85:51:c7:85:f1:c2:
                    b3:07:c7:cf:7a:e6:04:71:dc:50:c9:f1:df:42:2d:
                    0a:0a:8e:00:32:00:8a:47:d5:bd:b3:3b:e5:55:e7:
                    9d:ef:34:58:03:70:1b:bb:1c:0c:c8:43:e2:9c:e0:
                    74:68:f7:9c:f1:d4:ea:74:ac:b7:c8:3d:56:f3:98:
                    07:b1:86:49:71:74:db:39:3d:34:d9:f0:2a:ce:57:
                    1b:40:dd:c2:ee:96:a3:60:f5:0d:e0:8d:1e:c3:9d:
                    ad:1d:99:d0:b6:9c:8b:83:3a:2e:20:56:37:da:6f:
                    f1:11:a6:9d:9c:c3:ed:e9:72:56:43:fd:21:08:cb:
                    c6:54:a0:83:de:d9:9f:51:d3:3c:45:58:4c:01:91:
                    cf:21:93:cb:ee:4f:56:2c:41:0c:44:48:8a:e2:ff:
                    0b:d0:d4:1d:82:d5:69:b4:4c:af:e5:f0:6f:71:2f:
                    c4:d5:9c:c8:ba:b7:43:db:41:60:69:10:3d:bb:5c:
                    32:04:f0:f4:b1:d7:e1:ee:7e:27:b8:40:9e:3c:96:
                    6d:2a:a4:8b:c4:22:86:59:84:64:2a:d9:79:e7:c7:
                    ba:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B1:AA:CD:49:92:14:DC:17:78:97:B7:CF:79:5A:F6:67:07:D2:33:9F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/e20c27ca-30cd-3ea3-a6b6-276523efa84f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.42.176.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         ab:6c:1e:84:6e:d1:94:f7:16:4e:3c:94:97:fe:0d:75:7b:c3:
         af:18:8f:96:8f:cb:92:93:92:8e:d2:12:fc:eb:56:52:5d:30:
         75:73:81:73:45:21:46:5d:0e:1d:21:a0:69:36:e1:bf:89:f1:
         91:ff:36:e8:0a:bb:a9:ce:9f:0f:5e:d7:14:3c:51:e1:a9:ee:
         23:c3:d3:39:57:99:13:81:03:27:79:54:8a:13:c1:5e:97:89:
         4f:69:da:70:e8:36:67:e4:1e:a7:39:6c:bc:ef:7c:5a:f9:5d:
         e3:7c:be:f4:76:65:c5:32:d9:2a:88:d6:82:f7:1c:ab:b0:72:
         cf:ef:fe:f2:cb:0f:51:60:73:00:b3:29:fd:9d:2c:fb:f3:69:
         a4:f6:7b:35:3e:25:e8:66:f3:0e:42:64:78:80:12:71:0c:2d:
         e7:51:08:8f:71:8f:68:f8:3b:98:33:d6:29:eb:dd:16:4e:db:
         f3:c3:ce:d2:82:91:27:6a:6b:2a:1c:f5:83:e9:bf:c5:8c:95:
         24:c1:b1:82:ad:ab:27:1c:80:1a:39:ad:f5:67:5a:1a:c8:07:
         60:83:7c:52:d0:54:07:15:6e:fa:58:ee:34:2c:13:49:15:9b:
         59:88:b6:62:2e:f8:1a:d8:c0:3d:eb:8d:49:0c:7c:15:8f:a4:
         ca:7b:23:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 10:16:04 2026 by rpki-client