Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/0e20e8ab-615c-3fe0-80e3-1a29e7b4b8c0.roa
File:                     0e20e8ab-615c-3fe0-80e3-1a29e7b4b8c0.roa (raw, json)
Hash identifier:          mR4RnljEitvcDBWhTknr8FdaPFWun6CtiaVhxu55IpM=
Subject key identifier:   F6:71:D8:0E:A3:C7:40:8B:34:2C:F9:83:B2:25:CE:7B:36:A6:FB:56
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584D300A2882390B6EBB499ABB80
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/0e20e8ab-615c-3fe0-80e3-1a29e7b4b8c0.roa
Signing time:             Mon 16 Mar 2026 13:00:40 +0000
ROA not before:           Mon 16 Mar 2026 13:00:40 +0000
ROA not after:            Sun 14 Jun 2026 13:00:40 +0000
asID:                     397204
IP address blocks:        192.68.126.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 28 Mar 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:30:0a:28:82:39:0b:6e:bb:49:9a:bb:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Mar 16 13:00:40 2026 GMT
            Not After : Jun 14 13:00:40 2026 GMT
        Subject: CN=648cfa34-a071-4a18-812e-67d14a3d39fc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:1a:33:6f:58:48:11:a0:2b:e1:6f:72:63:d5:
                    41:89:53:3a:71:57:1e:df:93:71:22:ac:d5:dd:f7:
                    0e:6e:4d:62:9c:e0:42:23:57:60:6c:b2:fd:58:ea:
                    84:1b:41:6e:38:49:52:d5:63:5b:c8:c8:3a:b0:c7:
                    8b:ea:ce:98:0a:55:ef:c6:46:29:5d:5d:f4:71:88:
                    03:9d:98:e5:0d:99:6c:62:be:db:fe:0d:7f:d8:a9:
                    f2:68:88:1a:7f:96:f8:95:e0:7f:75:ae:0c:99:17:
                    4a:07:c9:c9:01:56:bb:41:09:51:29:28:30:44:64:
                    27:be:ee:4c:c0:10:bc:bd:58:cf:1f:02:0f:17:b3:
                    7c:10:27:57:fe:72:a8:10:32:c5:a2:81:62:a6:f1:
                    f0:f4:cd:76:36:e2:28:90:cd:17:3a:44:ad:98:d7:
                    bc:5d:13:27:5f:64:97:45:06:35:92:36:46:cd:6f:
                    6f:92:05:6f:a6:80:81:22:81:d8:c1:92:16:01:e7:
                    90:ac:bc:34:b0:67:19:90:4d:aa:ee:d8:f5:b7:89:
                    fa:07:c9:de:3e:1c:77:43:80:23:d4:cb:49:4c:a6:
                    36:5e:f1:3d:89:f4:f1:57:d7:fa:dc:33:59:e5:74:
                    99:96:31:cf:25:eb:b9:93:06:94:5d:dc:ef:ea:35:
                    78:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F6:71:D8:0E:A3:C7:40:8B:34:2C:F9:83:B2:25:CE:7B:36:A6:FB:56
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/0e20e8ab-615c-3fe0-80e3-1a29e7b4b8c0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.68.126.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         bd:7e:16:6c:49:37:8b:88:a8:23:a4:0b:ac:aa:cf:ce:59:a1:
         be:48:70:42:1c:80:17:a9:8b:94:da:f2:f9:e1:8c:c7:8a:25:
         c5:a9:75:d2:31:ee:c1:56:72:2b:10:cb:ad:8e:3c:76:cf:4a:
         25:db:5f:df:61:bc:9f:1e:39:7b:5e:71:e4:c1:40:70:2a:e4:
         b9:27:47:7e:1c:46:99:40:2a:7f:20:ec:74:71:61:7b:e5:1a:
         43:f2:e5:10:4c:9c:3e:41:cb:5c:80:a3:21:62:4e:b5:95:4c:
         17:ca:d7:bf:27:cf:2c:f9:c2:aa:0e:74:af:ac:c7:f7:ad:42:
         18:65:af:3a:c9:d3:ee:ec:8f:33:5d:64:8d:bc:66:14:3e:a9:
         d5:b4:43:9a:28:17:50:e4:98:d8:57:47:ee:98:3a:64:66:aa:
         21:b0:2f:31:2b:52:17:12:13:3f:9a:a7:eb:aa:f8:0e:4f:f5:
         11:36:a4:4a:df:df:01:51:b2:70:aa:12:62:b9:9d:87:0f:25:
         02:eb:eb:6b:be:4c:75:fd:87:ba:bd:3f:10:4a:4d:03:0c:26:
         a2:6b:7c:0a:1c:c7:d8:bc:94:ba:03:80:16:c1:a4:71:f0:c8:
         7a:b2:db:24:18:3c:dd:7d:c5:ca:cc:14:62:ea:54:b7:dd:36:
         33:3c:d7:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 12:45:16 2026 by rpki-client