Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/f1e18f7b-693a-3cd3-acc6-5301662b4020.roa
File:                     f1e18f7b-693a-3cd3-acc6-5301662b4020.roa (raw, json)
Hash identifier:          zKsD3ga9EWund7CFTTk8G3eWHJQrGwNjP74T5WUTVTM=
Subject key identifier:   D3:04:32:29:30:0E:E7:0E:95:B7:5A:44:AC:FF:6F:1A:63:C2:60:97
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584EA799BECE1EA65A6ED7A29B40
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/f1e18f7b-693a-3cd3-acc6-5301662b4020.roa
Signing time:             Wed 29 Jul 2026 01:00:12 +0000
ROA not before:           Wed 29 Jul 2026 01:00:12 +0000
ROA not after:            Tue 27 Oct 2026 01:00:12 +0000
asID:                     396600
IP address blocks:        192.35.51.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 30 Jul 2026 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:a7:99:be:ce:1e:a6:5a:6e:d7:a2:9b:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Jul 29 01:00:12 2026 GMT
            Not After : Oct 27 01:00:12 2026 GMT
        Subject: CN=43061624-438a-4d9f-8bc3-5029ee396b07
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8f:ce:a2:56:eb:5e:29:77:9b:88:35:65:09:f9:
                    25:40:24:3a:51:48:5e:1e:1c:8a:37:8d:8c:c4:09:
                    4a:1e:5d:93:44:c8:c8:c9:25:f8:0f:02:f9:cc:04:
                    49:9a:e6:3c:8e:34:18:4a:5d:cd:74:47:13:c5:5c:
                    a6:df:e7:aa:cb:78:75:79:a2:76:c4:43:93:dc:fd:
                    7a:7b:07:00:61:91:a4:bf:f0:dd:d9:e3:71:bb:a6:
                    6b:ce:68:f8:b6:21:ce:55:b4:43:49:60:ee:29:22:
                    4a:bd:97:96:fb:a3:0d:89:4a:79:c3:4f:9d:f2:1b:
                    51:73:fe:d8:9a:ad:b4:ce:03:53:15:ea:15:4c:a8:
                    b4:1d:56:8b:b5:9f:35:5f:4e:f0:5d:bc:c1:03:da:
                    32:3a:24:00:49:7b:a2:bb:af:eb:b6:e5:e6:bf:46:
                    2d:3f:bf:07:44:65:be:63:d8:7f:34:76:2b:8c:a9:
                    14:f4:9b:1e:da:28:da:3b:b3:bf:9a:30:49:d4:93:
                    21:18:02:83:e5:ae:5a:95:2e:28:0b:4d:c7:63:2c:
                    bc:38:15:5d:d7:88:d3:19:0a:87:67:2d:4b:b0:4a:
                    9e:d9:9c:a4:91:a7:47:3e:f5:58:8b:2d:ec:4b:2c:
                    06:9a:98:68:fa:5e:79:1c:c4:04:cd:e2:e4:35:68:
                    13:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D3:04:32:29:30:0E:E7:0E:95:B7:5A:44:AC:FF:6F:1A:63:C2:60:97
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/f1e18f7b-693a-3cd3-acc6-5301662b4020.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.35.51.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         90:9a:e0:e3:a6:d3:ff:88:bd:fd:da:f3:a3:41:fe:1f:d3:4d:
         f0:92:e7:36:ec:27:d7:39:ad:d7:09:fe:5a:9f:49:ef:22:e4:
         49:76:e4:d6:b3:60:97:0a:8d:7c:69:25:ae:a1:80:97:2d:17:
         54:47:9d:b4:1f:dd:45:cf:8b:1c:e1:cb:79:52:ad:0b:26:24:
         a4:4c:16:72:db:3c:03:5e:79:ef:c7:86:2d:cb:4b:38:39:7f:
         4b:b7:c0:e7:5b:4c:6d:c9:f6:cc:ce:b6:8a:6d:14:e4:40:2d:
         f4:2f:b3:e9:5a:23:ae:2e:12:fe:48:07:39:cc:ae:74:b5:73:
         ce:32:6a:2e:97:97:ce:84:45:5c:90:c8:55:b9:8f:ac:63:16:
         21:00:50:f5:5e:66:94:cb:42:06:fe:4f:0d:54:bd:fd:6b:cc:
         dc:aa:dd:ef:a7:2f:ef:e5:0b:2c:d9:2e:d7:f6:ec:d4:df:b8:
         51:da:75:90:03:5c:77:0f:a8:68:af:65:d0:b0:1e:9e:9e:8a:
         22:19:91:22:4c:54:39:86:d1:c6:69:87:10:d0:24:25:94:b7:
         80:d2:84:b0:54:4f:3b:30:3c:97:22:8f:90:b3:b2:40:ba:86:
         fe:a6:50:75:3d:3c:2e:0f:d4:5d:2b:ab:ac:0a:1c:4e:7e:61:
         d4:8a:2a:13
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 05:13:15 2026 by rpki-client