Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/0760fd04-0589-398c-a66e-c3a5d66c10f4.roa
File:                     0760fd04-0589-398c-a66e-c3a5d66c10f4.roa (raw, json)
Hash identifier:          x32ohaX8a+8ENIBUskgG1zMDqQ8C9K7zpegvHJPEYWw=
Subject key identifier:   93:81:A9:C3:FA:76:8C:36:30:8D:5B:06:6D:02:5A:7C:F9:F3:AE:24
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584E66DA4844E905F4BDFF8C1818
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/0760fd04-0589-398c-a66e-c3a5d66c10f4.roa
Signing time:             Sun 05 Jul 2026 21:00:11 +0000
ROA not before:           Sun 05 Jul 2026 21:00:11 +0000
ROA not after:            Sat 03 Oct 2026 21:00:11 +0000
asID:                     396595
IP address blocks:        192.42.173.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 26 Jul 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:66:da:48:44:e9:05:f4:bd:ff:8c:18:18
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Jul  5 21:00:11 2026 GMT
            Not After : Oct  3 21:00:11 2026 GMT
        Subject: CN=55041e58-b5ef-4e8a-b2d5-69454cb2bac6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:00:a7:1c:78:ae:3d:e7:3d:24:4b:01:f7:dd:
                    f7:48:c5:ba:e7:85:bc:98:cb:da:db:96:3b:5b:63:
                    15:e5:d3:c6:ef:4a:a4:bd:59:9f:e2:fa:06:8b:38:
                    b2:46:39:db:9f:87:ea:50:37:d0:75:e3:30:46:0c:
                    8e:df:34:df:be:29:a4:d1:16:9b:08:7e:c0:86:2d:
                    26:34:c5:f6:af:d2:ea:7b:6d:92:ba:45:e8:ea:a4:
                    07:df:cb:30:d0:04:0a:e8:9d:7a:d6:11:3e:7f:3b:
                    81:28:15:db:b4:c4:eb:78:3b:96:46:fd:3a:ac:cf:
                    a5:85:27:18:2c:84:27:5c:3b:e5:ff:6f:64:51:38:
                    b7:06:29:8f:70:87:e1:eb:13:2d:be:79:9b:b1:a5:
                    75:fe:92:90:54:46:3b:d2:2c:e8:62:8e:b2:c6:58:
                    12:cb:3c:08:c3:d0:f5:96:41:f0:d6:e0:c9:7e:14:
                    0b:80:ac:bc:98:a3:ed:ff:e4:92:fe:78:a0:76:5e:
                    fb:21:44:03:64:2d:6f:ec:03:e1:2d:69:82:e3:f3:
                    a7:91:a7:2f:04:71:40:4d:96:53:cc:2f:e4:2e:82:
                    a3:b8:da:47:ed:e8:d4:e7:71:37:77:e1:9a:71:0d:
                    3d:3a:a3:a4:95:11:c0:2a:9d:3c:da:d8:18:3a:db:
                    a3:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                93:81:A9:C3:FA:76:8C:36:30:8D:5B:06:6D:02:5A:7C:F9:F3:AE:24
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/0760fd04-0589-398c-a66e-c3a5d66c10f4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.42.173.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         23:93:ab:c5:bf:2c:51:2c:93:90:79:c0:49:c6:d5:1b:1e:b7:
         b6:c9:e9:72:74:39:60:e5:d2:7e:ae:08:b1:67:52:c9:84:29:
         39:51:61:de:d9:a5:ca:15:ca:d8:59:e0:0c:77:0f:08:af:5d:
         ee:4e:91:bc:b2:c3:20:f9:ab:6d:d3:2f:3b:ed:e5:45:36:ab:
         fc:5f:35:05:2f:7f:ad:55:12:65:f9:3d:9a:9d:13:1e:bf:41:
         c0:44:c0:8d:ea:22:fe:48:f0:10:2b:db:3f:18:ee:d0:de:59:
         80:84:2e:bf:71:7b:0e:43:a1:33:72:e3:53:bf:e4:1e:ab:2c:
         9e:71:b6:0e:50:e3:36:1d:cb:bd:2b:98:b9:ca:9c:d7:0c:e2:
         e5:92:a2:20:ca:b6:a4:f5:11:35:8a:15:2f:f0:c0:a7:71:f9:
         b3:55:bd:b4:62:02:7f:01:e5:35:12:38:7b:0f:40:c1:e5:e6:
         18:af:46:63:35:5c:7b:d9:c1:54:ae:8c:6a:d5:0a:fd:0a:54:
         52:3d:8a:71:d4:0e:1c:98:4c:60:d9:53:3b:13:01:34:da:21:
         f8:45:7c:12:12:6f:21:2b:ec:6b:9e:25:bf:40:84:14:cc:c6:
         d4:14:99:6e:fd:bd:80:f1:34:bf:c6:69:0b:de:7a:c2:d4:90:
         52:14:29:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 18:41:37 2026 by rpki-client