Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/00a3df76-9d81-3014-8c83-859363a56681.roa
File:                     00a3df76-9d81-3014-8c83-859363a56681.roa (raw, json)
Hash identifier:          JGlI7GOkigFVyacHYxECNmM4RhyhllHSab7Nn6X+19g=
Subject key identifier:   D8:4F:64:AE:D8:07:FA:1F:5A:69:19:DC:7C:CE:AA:D7:88:71:6E:BA
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584E8B2510085B3FB7CE661CFD00
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/00a3df76-9d81-3014-8c83-859363a56681.roa
Signing time:             Sat 18 Jul 2026 21:00:11 +0000
ROA not before:           Sat 18 Jul 2026 21:00:11 +0000
ROA not after:            Fri 16 Oct 2026 21:00:11 +0000
asID:                     396606
IP address blocks:        192.81.185.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 26 Jul 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:8b:25:10:08:5b:3f:b7:ce:66:1c:fd:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Jul 18 21:00:11 2026 GMT
            Not After : Oct 16 21:00:11 2026 GMT
        Subject: CN=a832c4dd-2445-47fd-97a0-b0b261c08dbb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:81:f3:62:f6:df:ec:3f:07:e6:aa:b4:1f:20:4b:
                    d5:11:f2:07:03:8b:e9:b4:3b:eb:9e:f5:f0:04:48:
                    0c:8d:66:b3:a4:a3:ea:a4:4f:d8:97:d8:04:62:29:
                    62:2b:5d:52:ec:4a:76:5a:c6:ee:72:ec:db:dc:a0:
                    73:ba:46:87:6b:37:8c:bb:93:2f:7c:39:11:94:a3:
                    45:7b:f7:eb:32:65:2e:f4:88:89:5d:96:e9:78:a8:
                    47:dd:1f:c1:74:57:35:46:5a:4e:65:1d:af:71:fe:
                    20:53:8a:b3:b0:1e:0d:b3:d6:ed:e2:7a:d6:01:3f:
                    18:65:95:56:17:ff:51:98:31:f6:58:dc:5f:f2:90:
                    c7:ff:89:62:92:fe:ec:72:8c:56:87:d6:b7:f9:4f:
                    1a:a4:d1:1e:28:f5:fd:11:3b:80:96:41:94:4e:e4:
                    20:76:5b:ff:32:11:b4:5d:ab:8b:fe:cc:0e:37:47:
                    92:e6:a1:44:77:73:af:9f:92:c9:06:fe:f4:62:9d:
                    f1:a4:0a:b9:79:7a:92:bc:78:e5:1d:5b:08:16:ae:
                    02:4d:3c:5f:d9:5f:86:a8:a8:cc:72:bb:aa:27:2c:
                    41:51:f6:01:6d:6f:38:20:a6:2c:58:61:79:c9:c1:
                    c6:3d:ff:63:64:b1:a6:22:f7:6b:87:aa:85:a0:3c:
                    56:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D8:4F:64:AE:D8:07:FA:1F:5A:69:19:DC:7C:CE:AA:D7:88:71:6E:BA
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/00a3df76-9d81-3014-8c83-859363a56681.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.81.185.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         07:59:cc:be:c4:5c:5d:8e:5d:69:91:63:4c:7a:67:88:ac:31:
         53:66:91:b2:e8:b7:05:8b:3b:fc:57:c3:74:7f:0d:64:cb:7b:
         fd:3b:73:b3:68:59:7d:2a:8f:5c:59:9c:96:d4:3c:ba:da:b2:
         b6:0e:8d:57:0c:b1:51:d3:28:dd:e5:f6:f4:75:67:dd:e9:6f:
         de:ea:89:95:60:84:20:51:ce:4a:e5:f5:91:e2:c3:d8:66:92:
         6b:7b:92:0b:d4:2e:f1:00:21:b6:51:1a:06:9b:29:60:24:f3:
         5a:1e:37:ad:3a:60:42:da:65:5e:69:0e:33:48:0a:dc:da:81:
         51:46:f7:31:a7:39:33:6d:a0:2f:4b:45:63:41:aa:5c:3b:cd:
         97:00:43:ed:fa:53:b0:5e:80:b8:bb:39:77:25:70:5c:c7:cc:
         34:ee:f5:6f:65:7c:c2:d2:f4:52:62:b7:9b:9a:4f:04:9d:4f:
         eb:3e:a6:3e:93:0f:49:d5:65:ad:45:43:d2:a1:48:45:37:64:
         bb:19:20:2b:a7:c2:db:41:58:d7:6b:c6:44:75:39:fc:5d:a2:
         b7:2e:d0:0e:f1:55:1d:ed:d4:6d:22:3b:b1:e2:c4:1b:02:5d:
         00:d2:ce:d2:41:fa:b4:f7:2e:96:bd:93:df:f0:2c:44:c3:54:
         60:b6:a1:3d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 10:11:56 2026 by rpki-client