Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/e9793e09-e655-35f5-b608-64a75af57e1a.roa
File:                     e9793e09-e655-35f5-b608-64a75af57e1a.roa (raw, json)
Hash identifier:          TQ5B+abneyTFvsiS+zNsiDzn5zwU/2FGKN4B5iD56XQ=
Subject key identifier:   93:31:A1:7A:46:1A:21:77:95:F6:FA:69:94:73:0E:F2:7D:0F:0C:3C
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584DE84B4E1362D3112BFDAAE200
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/e9793e09-e655-35f5-b608-64a75af57e1a.roa
Signing time:             Thu 21 May 2026 13:00:32 +0000
ROA not before:           Thu 21 May 2026 13:00:32 +0000
ROA not after:            Wed 19 Aug 2026 13:00:32 +0000
asID:                     396563
IP address blocks:        192.68.126.31/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 16 Jun 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:e8:4b:4e:13:62:d3:11:2b:fd:aa:e2:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: May 21 13:00:32 2026 GMT
            Not After : Aug 19 13:00:32 2026 GMT
        Subject: CN=a491e34f-0d74-4c81-9992-bd6d951b07b0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:80:b5:aa:69:68:6d:5d:88:36:0a:f8:53:06:5f:
                    7f:8c:6a:52:1a:4c:55:30:f1:29:0f:d1:5f:78:5d:
                    c1:a3:40:d6:cf:f4:8d:a1:b8:d6:b0:8a:90:6a:6f:
                    86:14:bb:ca:cd:4a:48:2e:5d:02:0b:5b:1c:d3:2b:
                    88:37:51:ed:18:eb:73:cc:be:ae:6d:0a:5d:89:bb:
                    a0:6d:03:38:a2:da:4f:a7:73:f7:7e:af:27:45:17:
                    12:2d:64:22:ff:13:9c:55:34:30:f9:0b:8b:2e:19:
                    17:50:14:48:cb:89:97:c6:84:a9:82:2b:9b:c3:fa:
                    1e:23:0c:65:46:c1:b5:6f:78:66:d1:17:3f:de:57:
                    45:e5:f4:1f:4b:ef:13:3e:e0:a2:1f:89:a2:6a:9d:
                    b4:0d:c1:b8:6e:40:7d:49:d6:04:0a:5d:1b:12:b4:
                    44:a7:18:c9:ce:5b:c9:f8:18:eb:31:54:f1:e0:04:
                    67:e4:4d:b0:d6:41:38:05:8a:50:26:6f:f3:6d:ac:
                    ee:76:5e:03:1d:57:cc:a1:23:a2:a9:78:69:44:d6:
                    c8:17:fe:be:14:dd:5f:dc:25:22:c2:66:d9:c7:0e:
                    31:13:3f:5a:d9:7f:03:28:60:a4:b6:92:e1:e7:36:
                    8b:c4:a1:05:3a:78:5a:7f:2a:89:3f:fb:3d:19:d9:
                    86:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                93:31:A1:7A:46:1A:21:77:95:F6:FA:69:94:73:0E:F2:7D:0F:0C:3C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/e9793e09-e655-35f5-b608-64a75af57e1a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.68.126.31/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         81:b9:db:6b:be:10:24:68:50:a6:21:5f:9c:91:36:88:32:ea:
         9c:4b:7c:41:00:0b:ef:d5:fb:d9:74:86:cc:95:1b:fa:fa:73:
         24:d3:c9:44:76:01:e0:c6:72:34:8f:1e:89:80:34:82:9f:d6:
         28:f0:e4:e7:ca:9f:8b:c7:d9:82:21:74:fc:57:e7:21:92:32:
         7c:06:ee:ed:5a:d8:f9:a0:cc:05:14:da:ef:ec:53:ce:6c:ee:
         fe:24:6c:35:37:07:44:7e:98:f5:21:52:00:eb:1e:98:36:84:
         cb:7a:85:27:ed:62:6f:81:85:27:d4:4b:ce:92:e4:ad:c8:d6:
         8f:5e:fa:dc:c6:ff:16:cd:b8:0e:8f:80:c5:9d:2b:6f:3f:c5:
         78:15:17:a0:4b:2a:43:69:95:d1:76:f9:db:40:16:93:c1:f8:
         98:aa:f8:2e:45:b2:31:91:fc:83:63:ff:2c:c3:dd:9d:da:27:
         4f:ff:f4:5b:f4:1b:62:84:9d:8c:eb:62:20:cd:54:ac:62:a8:
         42:aa:34:c4:a3:4e:85:13:c5:01:18:50:9f:e1:02:05:6c:e1:
         2f:69:d8:3b:2f:cd:b2:f3:52:ae:45:bb:2d:83:fa:ef:67:98:
         b3:2b:e8:53:a1:e6:66:fa:7f:82:33:9e:7f:30:a7:e1:b2:69:
         06:13:58:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 17:09:59 2026 by rpki-client