Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/f4367e91-8d61-3a4e-8aec-7aa515c7850c.roa
File:                     f4367e91-8d61-3a4e-8aec-7aa515c7850c.roa (raw, json)
Hash identifier:          h3srj+KrInDXD/TwO/c7kqbPBXKvq3pf/fg+AT6C8/0=
Subject key identifier:   AF:A4:BF:F8:A8:75:6D:92:43:D5:DC:F4:01:8F:AD:70:16:DD:A3:B4
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584DFC143AB60D084C44793A6480
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/f4367e91-8d61-3a4e-8aec-7aa515c7850c.roa
Signing time:             Thu 28 May 2026 15:06:02 +0000
ROA not before:           Thu 28 May 2026 15:06:02 +0000
ROA not after:            Wed 26 Aug 2026 15:06:02 +0000
asID:                     397200
IP address blocks:        192.30.45.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 14 Jun 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:fc:14:3a:b6:0d:08:4c:44:79:3a:64:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: May 28 15:06:02 2026 GMT
            Not After : Aug 26 15:06:02 2026 GMT
        Subject: CN=7b2b7ee4-c5a0-41c5-9edc-ca70968a6873
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:91:97:9a:94:ee:27:19:a4:99:8e:ee:54:63:3e:
                    e8:fc:63:75:00:0c:70:92:bd:5f:17:5c:06:78:99:
                    88:01:aa:1f:24:4a:a3:70:df:59:2e:c3:c8:b5:01:
                    23:74:a8:3e:71:92:a5:1c:d8:15:5c:81:56:b4:3e:
                    a3:cb:21:51:77:6d:29:ab:ab:60:7d:76:70:e7:d9:
                    52:51:35:a7:9d:c6:f1:3d:8d:4c:b4:4c:e4:b0:45:
                    b3:51:3d:38:9f:68:7b:a4:f9:dc:56:85:5b:ed:e4:
                    6a:18:14:73:55:46:5c:05:91:a6:52:60:9a:35:7a:
                    9a:65:3c:8d:5c:a6:d9:98:22:25:d1:ec:a3:03:87:
                    b0:40:00:75:23:b8:02:bf:33:66:4d:ca:b8:65:9e:
                    a9:22:ae:84:07:72:80:dd:c3:30:de:8f:4a:2f:d0:
                    3b:15:3c:5d:d2:e6:40:c2:da:eb:5a:b8:91:02:fc:
                    d3:1d:84:00:ac:f6:81:f4:81:8e:3b:ab:3b:b8:ae:
                    6d:03:31:1c:bc:c2:c9:3f:a4:da:11:7a:99:62:6d:
                    d3:9e:82:05:13:ea:03:ef:f8:b7:37:4a:a7:71:2e:
                    d8:66:f0:b3:4a:cd:5e:92:56:d1:0f:50:4a:b5:21:
                    88:6a:33:fc:69:a9:4e:41:00:ad:c9:47:a8:3b:71:
                    34:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AF:A4:BF:F8:A8:75:6D:92:43:D5:DC:F4:01:8F:AD:70:16:DD:A3:B4
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/f4367e91-8d61-3a4e-8aec-7aa515c7850c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.30.45.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         b4:89:bd:c6:9c:fd:c8:f4:f7:74:a3:ee:ea:79:c1:56:af:ea:
         a6:b1:47:8c:db:fe:c0:dc:ef:b9:6e:7c:22:41:30:a1:c1:40:
         70:8c:ce:c0:c9:88:55:ee:7b:0f:d4:b0:eb:d3:f1:61:96:06:
         41:bc:0c:59:73:20:04:8c:87:f0:ef:24:6e:1c:11:58:76:13:
         79:ec:df:de:12:2e:3a:14:7e:8e:b6:72:04:38:51:82:6f:92:
         7c:8d:c2:fb:cf:4d:98:0e:6a:17:f1:a0:a8:fb:af:d7:28:9a:
         50:aa:7b:85:87:f6:34:d8:f7:7b:89:fd:4a:12:bd:16:7b:58:
         86:b3:91:85:bc:24:6d:9e:00:6c:6c:01:86:07:61:ef:75:a4:
         01:f4:4f:f9:a9:37:0d:df:da:0b:d0:5c:e5:02:15:b5:ce:ea:
         99:e6:8f:93:dc:d6:97:59:79:46:a3:03:23:8f:0c:4a:98:89:
         46:e0:af:25:b1:c7:f6:46:bb:68:6e:e1:1c:2a:87:98:cd:38:
         d7:06:f3:f8:40:de:7c:33:eb:1f:3e:a6:1e:2f:e9:8f:be:6e:
         23:c5:21:56:af:c0:95:9f:b0:e8:94:a5:48:d7:4f:91:0a:10:
         1a:0f:8b:8c:8b:da:70:26:fc:79:03:07:0c:a1:29:fe:5a:e8:
         61:d3:df:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 15:17:11 2026 by rpki-client