Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/f093e6d8-9dc1-38de-886e-69f70811b63d.roa
File:                     f093e6d8-9dc1-38de-886e-69f70811b63d.roa (raw, json)
Hash identifier:          swIaa6WtMV1YhAFWRi4PD7mV8vXFlBYM0dgSNM2oziM=
Subject key identifier:   60:C5:63:D4:E7:FC:74:C8:60:70:7C:64:96:F8:48:F1:BA:08:EC:D5
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584D00B29BDF91826B4B9A67B3C0
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/f093e6d8-9dc1-38de-886e-69f70811b63d.roa
Signing time:             Fri 27 Feb 2026 14:00:40 +0000
ROA not before:           Fri 27 Feb 2026 14:00:40 +0000
ROA not after:            Thu 28 May 2026 13:00:40 +0000
asID:                     27544
IP address blocks:        192.43.172.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 04 Mar 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:00:b2:9b:df:91:82:6b:4b:9a:67:b3:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Feb 27 14:00:40 2026 GMT
            Not After : May 28 13:00:40 2026 GMT
        Subject: CN=5611d461-7878-4279-86c2-87eb2a62761c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:9b:97:dc:d4:5c:db:95:44:00:a5:cc:15:a2:
                    4e:2f:3a:7c:c8:3c:a5:d4:17:92:c4:6f:70:97:b1:
                    d1:32:37:db:a7:7d:d7:0f:96:82:b2:1f:2d:c2:55:
                    e1:c6:a0:f7:e5:bb:d9:83:93:47:e5:56:54:ae:b7:
                    f5:7e:b7:14:af:57:42:50:60:d8:f6:60:63:74:98:
                    57:8c:61:c3:81:cf:8d:41:40:6e:79:cf:e9:b5:ae:
                    70:59:86:86:87:aa:39:f8:cb:2f:b2:ca:35:29:e6:
                    74:06:81:b4:2e:0d:98:27:0c:c3:fe:31:e7:04:e0:
                    51:59:1c:3c:f7:89:5d:12:2d:74:74:50:2a:ce:5b:
                    45:29:ea:68:20:a1:da:ee:ff:4a:c5:b0:92:3f:06:
                    b5:31:3d:a2:91:9e:7b:25:7e:57:46:20:ad:b7:0e:
                    4d:95:62:a6:ff:66:89:3a:b3:23:ce:af:d7:ec:0e:
                    7b:f3:e5:bb:e7:a9:d7:79:ee:96:90:d9:ce:95:2c:
                    54:a8:4f:6d:08:d0:21:73:e2:1a:81:18:67:47:42:
                    ad:09:ae:bb:09:5d:41:8c:be:b5:fe:91:af:80:22:
                    4a:14:f4:1f:0f:84:a0:c7:b8:88:71:0c:6b:70:4f:
                    6c:e2:44:4a:e0:33:fd:3d:15:2c:be:ad:aa:91:75:
                    38:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                60:C5:63:D4:E7:FC:74:C8:60:70:7C:64:96:F8:48:F1:BA:08:EC:D5
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/f093e6d8-9dc1-38de-886e-69f70811b63d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.43.172.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1d:e9:b4:0e:bc:ca:b8:5d:6d:92:30:c3:c7:2e:5b:7a:31:36:
         f4:5f:2e:8a:54:39:03:d8:31:79:54:e8:15:d9:cf:0d:4a:cc:
         14:33:61:bc:e5:13:e4:1a:ed:e6:0f:2c:9b:ee:99:00:11:b1:
         4e:8f:3b:00:f3:d1:33:05:37:41:27:29:1d:f0:55:14:1e:99:
         3c:cb:ba:ec:4e:c4:7a:4e:48:7c:bc:37:70:7f:6a:a2:08:78:
         e8:4f:6d:49:94:fe:57:c5:cc:b2:c7:17:58:37:a5:14:99:03:
         5b:9f:38:d3:62:a4:f2:cf:5d:c4:71:21:83:e9:a4:4a:15:52:
         81:38:f0:25:0b:5e:9e:ee:76:d5:be:66:73:e8:b5:e1:1e:87:
         94:8f:4f:77:8d:55:65:00:54:35:54:44:a1:41:3f:9f:65:e2:
         96:7b:09:3d:ec:f4:97:38:f5:2d:77:39:eb:76:83:32:10:6f:
         15:77:5b:8e:11:99:38:48:c9:e9:ac:54:a8:5e:2f:eb:13:3b:
         e8:68:66:3e:3b:de:10:e5:d5:52:b8:86:6d:60:17:6c:3d:1c:
         cd:48:a9:40:56:8b:d6:73:c8:60:a7:b6:56:00:c4:42:7f:33:
         bb:5e:32:3f:b4:c8:a8:1e:1f:66:5b:6f:d5:e8:8b:81:48:64:
         38:35:17:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 16:45:11 2026 by rpki-client