Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/0a89b2ea-5bbb-382f-8a68-6039e6a5a328.roa
File:                     0a89b2ea-5bbb-382f-8a68-6039e6a5a328.roa (raw, json)
Hash identifier:          DH3IxB3yknKkYyEMkL5vqzLrn/TxZ9oFRZv8gQCZoYg=
Subject key identifier:   CB:32:C9:27:C7:29:6F:10:D9:32:C7:32:32:0E:14:4A:75:2C:19:CF
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584D9A4B91C739022089C56C9600
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/0a89b2ea-5bbb-382f-8a68-6039e6a5a328.roa
Signing time:             Thu 23 Apr 2026 14:28:19 +0000
ROA not before:           Thu 23 Apr 2026 14:28:19 +0000
ROA not after:            Wed 22 Jul 2026 14:28:19 +0000
asID:                     36621
IP address blocks:        192.42.177.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 15 May 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:9a:4b:91:c7:39:02:20:89:c5:6c:96:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Apr 23 14:28:19 2026 GMT
            Not After : Jul 22 14:28:19 2026 GMT
        Subject: CN=4b5605a3-edeb-49d5-8dc9-09cb7b3a25f9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:fb:3f:4a:f1:bf:b1:5f:a5:2a:14:55:df:37:
                    fe:62:77:77:99:a1:4c:4a:80:c2:bf:41:7f:0b:45:
                    73:c6:07:a1:1a:36:66:d2:7f:53:bb:ee:95:da:12:
                    8a:8c:b5:22:c3:bd:36:7b:b9:65:a5:a6:4c:4c:f1:
                    1a:c0:19:93:50:76:d6:dd:02:25:65:1c:97:89:76:
                    1a:f8:f6:5c:8e:fa:54:ed:ae:00:75:7a:20:ac:04:
                    d7:bd:e2:98:ba:5d:80:c9:d6:a5:e1:61:74:10:23:
                    7b:53:e2:1e:b5:11:90:3f:84:3c:e1:cb:7a:0c:5d:
                    24:51:01:4c:aa:ba:b7:ed:87:15:12:39:70:11:7c:
                    f0:79:4e:59:41:6c:04:9c:ee:b7:4d:56:55:ee:13:
                    d2:70:ba:d3:65:bb:b2:09:fd:bd:2e:b7:45:83:1c:
                    c2:3a:76:4d:f3:d3:30:26:5e:7f:5f:e4:da:a3:90:
                    91:30:10:e6:2a:b2:4a:dc:97:05:a0:af:4d:a2:d5:
                    86:4c:5d:58:4e:03:2d:53:33:ab:07:d9:c8:ce:f7:
                    78:be:16:91:20:22:e3:64:b3:24:44:6d:09:b2:cb:
                    de:bd:ba:7d:37:c1:af:cf:c8:20:35:89:3c:ea:82:
                    f3:a6:72:b0:6c:47:8d:78:e7:a4:c5:e2:87:8d:7b:
                    32:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CB:32:C9:27:C7:29:6F:10:D9:32:C7:32:32:0E:14:4A:75:2C:19:CF
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/0a89b2ea-5bbb-382f-8a68-6039e6a5a328.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.42.177.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7a:39:19:a7:2b:ef:b8:87:8f:ef:42:d0:04:b5:56:2e:a3:23:
         9c:33:c1:0a:04:29:19:7e:83:88:6e:83:3c:a4:8b:bf:0e:1a:
         cb:34:ec:28:44:07:81:23:39:4a:94:af:93:2d:36:79:1d:5c:
         3e:6e:a6:59:1f:ec:c5:49:80:0a:95:81:93:dc:61:70:15:8e:
         be:0e:b6:bd:43:fb:cd:a1:bc:96:a7:99:d5:44:e0:97:89:c0:
         fc:f8:af:49:31:2d:ed:cc:49:05:80:5c:09:43:38:b3:5d:e6:
         f9:ac:72:37:d4:7f:83:63:7c:fa:35:10:4b:6f:a8:66:ce:e8:
         42:50:b1:23:bf:19:06:4d:12:5b:56:da:a4:48:e2:9e:f3:11:
         48:35:44:a9:51:1d:ed:52:21:d4:be:31:91:18:7d:2f:c2:d6:
         60:f0:70:2e:e4:8e:88:10:48:f5:08:19:4e:94:d7:5b:e6:4f:
         62:78:94:e0:13:50:67:7c:bb:f4:71:aa:63:e2:62:da:9d:6f:
         a6:98:04:19:96:d5:bd:b7:a7:92:e0:68:5a:e0:16:2f:6a:91:
         8e:0c:8a:bd:89:2d:99:6b:12:fa:04:8d:a4:f2:2f:57:27:5f:
         3c:37:9c:b1:fb:d2:f4:37:3b:6e:fa:97:2f:07:ad:dc:33:e7:
         14:eb:52:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 04:48:18 2026 by rpki-client