Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/f2e2eae0-38c1-33bc-ad33-c706b1c8f5e1.roa
File:                     f2e2eae0-38c1-33bc-ad33-c706b1c8f5e1.roa (raw, json)
Hash identifier:          YVYo1XPIM4FGwAblkHgaCbG/JD08yxML/ZLGxMIfJfk=
Subject key identifier:   E7:F7:56:BC:45:BD:9E:B5:6B:91:80:ED:B2:9B:69:8D:9D:85:69:3A
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584CEBC23C0FD7E07A4FE4011680
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/f2e2eae0-38c1-33bc-ad33-c706b1c8f5e1.roa
Signing time:             Fri 20 Feb 2026 02:00:32 +0000
ROA not before:           Fri 20 Feb 2026 02:00:32 +0000
ROA not after:            Thu 21 May 2026 01:00:32 +0000
asID:                     397206
IP address blocks:        192.12.94.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 04 Mar 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:eb:c2:3c:0f:d7:e0:7a:4f:e4:01:16:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Feb 20 02:00:32 2026 GMT
            Not After : May 21 01:00:32 2026 GMT
        Subject: CN=0264a990-865f-4c35-8ce4-cadc2943899d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:ae:e4:e3:7b:a0:c1:51:85:2f:12:3c:a3:e1:
                    a3:ce:fc:a6:26:66:d1:1f:7e:4e:90:85:af:6f:c2:
                    57:b5:45:16:3c:6b:1e:c1:ff:b2:ae:78:35:54:29:
                    d4:bd:14:fd:a2:0d:83:21:b3:42:ac:42:13:41:3a:
                    33:24:b3:40:0b:52:25:c7:89:8d:bf:a0:ec:cd:59:
                    87:1b:a2:32:7b:0c:a3:c7:86:49:34:77:62:13:a0:
                    c0:e1:9d:c7:c7:23:dd:cc:fd:18:f5:4e:8c:94:5c:
                    68:29:bc:72:a6:a0:b9:f0:2e:25:a7:87:2b:55:f8:
                    22:b8:e3:31:66:ec:2e:07:28:01:f3:8f:b6:97:1d:
                    c7:e8:ce:c6:99:09:19:ce:39:57:7c:fa:ba:0b:34:
                    6d:42:c4:0d:aa:bd:0a:a7:d6:0a:4a:f9:8b:32:ec:
                    6a:50:d1:c9:eb:35:30:80:68:d5:a1:62:26:51:c1:
                    be:30:98:1f:7b:67:49:1b:b2:d7:38:bb:12:23:e1:
                    8b:dd:d0:e2:59:1b:cb:9c:50:ba:99:7b:16:88:aa:
                    d7:e8:05:35:47:9a:cc:b2:b2:cb:23:d2:a5:c7:58:
                    54:16:26:53:be:8a:28:6c:00:1e:b2:a6:84:ea:53:
                    1d:55:af:90:48:31:a6:78:da:67:d6:5d:3c:c9:75:
                    fb:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E7:F7:56:BC:45:BD:9E:B5:6B:91:80:ED:B2:9B:69:8D:9D:85:69:3A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/f2e2eae0-38c1-33bc-ad33-c706b1c8f5e1.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.12.94.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         21:74:0c:53:99:bc:4f:dc:4b:16:0c:79:4a:80:8c:01:85:2e:
         f1:bd:f9:b2:53:e0:73:07:3c:1a:04:0a:60:21:cf:27:28:e6:
         e0:a1:ba:20:7e:b5:53:4e:ac:02:41:d3:86:20:d8:86:15:1d:
         b5:e4:2e:ba:de:00:0b:29:49:ad:33:ad:a2:1d:4a:5a:05:44:
         aa:ee:bd:bb:1f:f1:78:23:61:7e:47:5a:a9:a6:4b:d3:d5:7e:
         e3:fb:83:34:fb:4d:71:e6:43:fa:51:53:77:c3:4d:d8:80:81:
         33:04:3f:57:34:e7:aa:93:b8:15:03:de:02:05:d6:4a:47:ce:
         d9:9b:2e:ba:dc:63:1c:81:bc:3e:22:93:ee:15:f2:36:65:2e:
         bd:1a:0a:2d:9b:86:b2:02:e3:9f:b8:cf:df:ac:dc:17:d3:b0:
         e5:8d:de:13:ef:1b:a8:9c:5c:61:82:c3:76:d8:0b:14:9d:ad:
         35:eb:2c:a2:f6:83:f4:b9:67:7f:2d:e8:3a:d9:4f:e0:7b:70:
         a0:8d:8e:14:30:b8:a5:dd:5b:75:a8:c2:59:44:eb:60:9d:f3:
         8c:ae:d8:ba:69:07:e4:02:8d:f7:c4:7e:52:99:17:d3:4c:36:
         8d:a4:5a:7e:15:e1:b2:e4:f0:4f:97:b6:a8:b7:bf:f8:8d:e4:
         7e:15:71:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 03:11:35 2026 by rpki-client