Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/f22830ce-27a4-3f8e-90ff-3f4e061b23a3.roa
File:                     f22830ce-27a4-3f8e-90ff-3f4e061b23a3.roa (raw, json)
Hash identifier:          +w3ZAIZ3ZdVn+dfM8W2lVvMJLjAAyS9U1f+WHLsGrfc=
Subject key identifier:   3B:A4:42:49:4E:B2:12:44:6C:43:C2:88:66:29:2F:52:5E:97:FB:CF
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584DE1506EF6B920CD86875E9D80
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/f22830ce-27a4-3f8e-90ff-3f4e061b23a3.roa
Signing time:             Tue 19 May 2026 01:00:24 +0000
ROA not before:           Tue 19 May 2026 01:00:24 +0000
ROA not after:            Mon 17 Aug 2026 01:00:24 +0000
asID:                     396550
IP address blocks:        192.43.172.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 14 Jun 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:e1:50:6e:f6:b9:20:cd:86:87:5e:9d:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: May 19 01:00:24 2026 GMT
            Not After : Aug 17 01:00:24 2026 GMT
        Subject: CN=df5ab27d-26fe-4ea8-b1d5-6bde5a7232c6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:3e:8a:94:2d:33:62:b2:ee:ce:ba:2b:05:e7:
                    d9:02:a4:c6:d0:bb:0d:eb:26:b5:e4:24:33:da:f4:
                    1a:49:c8:22:8f:c0:f8:6f:99:0f:05:49:cb:6f:b7:
                    54:86:59:ed:95:77:94:9a:c1:01:eb:f4:2a:be:98:
                    7e:29:71:80:df:32:0b:c5:fd:2c:47:ef:b2:4a:b0:
                    bd:12:ab:28:05:a6:f4:ee:97:33:66:ab:5b:c5:45:
                    7a:36:bc:8f:ea:c0:07:ea:41:0b:bd:d7:93:95:8d:
                    5a:21:66:a7:06:2d:09:81:dc:21:3f:a7:58:01:cb:
                    39:70:9d:e6:b3:db:dd:40:c7:c4:81:88:49:bf:cd:
                    e6:aa:88:93:6a:27:93:45:d6:db:db:1c:3c:8f:50:
                    fb:87:fa:fc:1e:a3:8a:43:a8:18:ff:ea:92:70:9f:
                    c8:df:76:9b:08:22:0b:f5:81:ac:bc:fe:85:33:c4:
                    ac:8c:29:60:37:6d:ee:e5:6a:ec:a6:52:4f:b2:54:
                    33:fc:0d:b0:4b:33:4c:f8:72:ec:12:86:d4:14:90:
                    89:a8:1a:ab:01:20:a0:76:69:a4:5d:94:74:f1:5d:
                    e3:3c:3f:c9:33:43:94:dd:22:4a:1c:ea:bc:79:df:
                    01:9d:87:d4:d4:22:11:85:0d:4f:0d:b5:00:b6:0a:
                    75:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3B:A4:42:49:4E:B2:12:44:6C:43:C2:88:66:29:2F:52:5E:97:FB:CF
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/f22830ce-27a4-3f8e-90ff-3f4e061b23a3.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.43.172.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1c:64:08:d5:81:65:16:b7:89:37:94:90:30:41:fb:a0:5b:b9:
         9f:34:cb:b6:8f:b8:aa:8a:1b:82:28:07:f3:e0:40:e8:9d:e4:
         80:a7:db:32:a8:07:1b:c9:d2:c1:f3:bd:f0:2e:a9:40:b0:71:
         ce:1b:c4:b0:95:1b:39:8d:8b:04:fe:9c:25:58:1c:5f:81:fb:
         3d:9b:fe:b6:b7:5a:23:a4:08:be:f3:f1:31:d1:d4:b9:39:82:
         6d:59:62:83:30:70:94:c0:b2:29:51:97:a2:36:52:fd:28:9d:
         35:d0:1c:24:df:b4:ba:9a:1e:5f:9d:7b:4d:74:04:74:02:30:
         2b:dd:8b:9c:77:ee:a0:a5:c1:f2:71:03:b3:bf:90:93:b3:1c:
         89:ed:d4:b0:1d:ee:af:01:ac:2d:b0:87:0d:74:07:36:b4:a0:
         67:b3:80:6f:49:51:8d:aa:71:9f:6f:b5:55:87:8c:7d:02:ab:
         2c:53:3c:df:7f:c6:63:c3:51:76:b0:3e:5f:f5:1c:87:94:ef:
         33:18:04:65:6d:e1:f8:1a:5c:ae:49:45:41:5f:c6:ad:3a:56:
         54:c1:a1:a4:87:5b:0a:1b:08:9b:27:0d:dd:e9:13:49:63:37:
         c9:82:76:08:68:0c:d1:4e:8e:c3:25:ab:13:ac:f0:d1:74:14:
         8f:62:6e:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 16:15:34 2026 by rpki-client