Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/f824264e-53be-3084-bff3-a1f87bd0ff03.roa
File:                     f824264e-53be-3084-bff3-a1f87bd0ff03.roa (raw, json)
Hash identifier:          xwAvOUCknRrO/g5YxQrX1NS3+MOLwA20bYIMB9608l4=
Subject key identifier:   A3:11:AC:6F:D7:AE:52:AD:35:0D:6A:AB:85:D5:C7:9F:56:5B:3F:AC
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584DE84B4BE24BC24A4B6F655F80
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/f824264e-53be-3084-bff3-a1f87bd0ff03.roa
Signing time:             Thu 21 May 2026 13:00:32 +0000
ROA not before:           Thu 21 May 2026 13:00:32 +0000
ROA not after:            Wed 19 Aug 2026 13:00:32 +0000
asID:                     397211
IP address blocks:        192.68.126.31/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 16 Jun 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:e8:4b:4b:e2:4b:c2:4a:4b:6f:65:5f:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: May 21 13:00:32 2026 GMT
            Not After : Aug 19 13:00:32 2026 GMT
        Subject: CN=3786eebe-37ec-4147-a6be-32bbeda4175f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:5e:60:6b:65:c1:44:3c:8d:17:16:9b:08:53:
                    15:0e:a4:44:d5:97:74:b2:f7:1c:54:b0:82:e0:52:
                    60:6d:d9:67:6e:98:ba:e4:40:4e:23:e3:94:db:2c:
                    86:97:27:fa:28:5e:75:1f:94:cf:5a:ae:69:4c:9b:
                    b2:01:30:25:e6:c7:f4:36:18:c1:71:05:2a:8e:bb:
                    b5:d6:03:82:57:a8:db:9f:aa:41:18:12:a4:2f:b0:
                    5f:27:8c:1a:02:0c:f3:a5:4c:79:1e:82:36:16:17:
                    40:51:1c:90:8e:23:65:6f:55:2c:dd:8f:d7:ea:78:
                    77:41:41:f6:90:0f:b9:35:4c:dd:0b:37:21:1b:cf:
                    cb:bb:56:2f:39:fa:7c:d3:81:1e:99:9d:28:40:a3:
                    3c:d1:e5:a3:b7:bc:53:c6:37:79:81:32:e3:5f:e0:
                    50:66:3d:e3:19:d8:13:da:2d:90:4f:3c:ca:96:49:
                    5d:36:0b:17:27:37:e2:19:43:19:a3:52:cc:b7:b1:
                    bb:d5:3d:da:2f:19:e4:bf:d3:77:49:cd:b2:62:68:
                    9e:94:7a:3a:8e:30:f7:26:c9:ab:85:ce:c0:17:a1:
                    3f:0e:50:2e:0a:53:31:d8:b2:ea:b4:ee:da:57:25:
                    a8:47:1a:3f:96:93:80:0c:ef:d9:28:f7:62:fc:f5:
                    1d:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A3:11:AC:6F:D7:AE:52:AD:35:0D:6A:AB:85:D5:C7:9F:56:5B:3F:AC
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/f824264e-53be-3084-bff3-a1f87bd0ff03.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.68.126.31/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         33:05:15:ac:dd:66:d5:2d:bf:da:f0:9a:31:36:fb:47:4d:10:
         d8:ba:0c:9a:47:fa:9f:2d:7b:5b:df:16:4f:7e:c1:14:3f:f8:
         cc:c8:97:d5:3a:6b:04:0c:04:94:2b:10:09:4e:bb:b8:09:f0:
         87:fd:57:48:41:e7:2d:f7:f1:55:8d:77:d4:87:fc:28:28:0b:
         db:8d:0a:ca:c8:92:3d:0f:e6:af:64:e9:ea:5a:92:53:d2:40:
         56:aa:57:4e:1e:3b:d8:c6:fb:52:40:30:c9:f6:8f:85:9e:fa:
         45:a6:18:89:30:74:08:0c:c9:94:96:15:50:c5:b7:91:e8:02:
         ca:88:65:bc:9a:55:2e:05:03:ef:9f:3d:c3:a9:1d:12:c8:5a:
         e3:79:cc:12:75:9b:cb:61:3a:72:a8:c9:c7:2f:d5:87:cf:80:
         8e:07:60:00:d1:40:b6:3c:e4:f2:30:7c:d8:de:9b:ab:11:f4:
         3d:f5:fe:95:36:0e:dc:d5:33:3d:cf:0d:20:e1:e2:f3:83:c9:
         e6:28:f2:31:57:15:f6:74:eb:a1:e8:7f:53:6a:5f:73:ff:63:
         1b:71:2e:32:34:a2:c0:8d:57:80:c5:80:04:5c:53:da:57:29:
         ad:a6:72:a1:18:90:af:da:e3:28:ae:af:4f:0d:ab:f4:8d:2b:
         ba:65:4d:9a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 19:26:14 2026 by rpki-client