Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/19f85923-e65a-3c95-9103-e0067521e5ff.roa
File:                     19f85923-e65a-3c95-9103-e0067521e5ff.roa (raw, json)
Hash identifier:          Rn9KK5JjZGUedklf40Sv46fm2nsnURsHqxeqrKLetFo=
Subject key identifier:   5F:FF:D3:3C:88:26:85:E4:76:1B:29:45:18:4C:FC:6A:77:6D:95:2F
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584D9A4B8CE8EB15950E2EE30900
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/19f85923-e65a-3c95-9103-e0067521e5ff.roa
Signing time:             Thu 23 Apr 2026 14:28:17 +0000
ROA not before:           Thu 23 Apr 2026 14:28:17 +0000
ROA not after:            Wed 22 Jul 2026 14:28:17 +0000
asID:                     396614
IP address blocks:        192.42.177.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 15 May 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:9a:4b:8c:e8:eb:15:95:0e:2e:e3:09:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Apr 23 14:28:17 2026 GMT
            Not After : Jul 22 14:28:17 2026 GMT
        Subject: CN=4ff5c6fb-b7a8-4d10-a2fb-e6b1fb3ee953
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:ed:5d:3d:4f:46:90:ec:ed:ca:ea:bf:e8:ce:
                    ea:81:6f:2c:65:14:1f:e1:1d:e7:a6:ad:aa:08:88:
                    1b:3d:fc:69:5a:a6:08:aa:0b:9d:99:ef:ed:b6:e5:
                    c2:c6:0e:62:ba:2a:f1:cc:cf:10:54:f7:a0:ec:83:
                    d8:a2:c4:97:01:d7:ae:d5:85:76:af:2d:e7:1c:47:
                    13:15:bc:99:de:c1:3b:bb:8a:0e:cc:fb:73:70:ea:
                    a1:67:e1:e7:77:a3:7a:47:da:d7:04:c7:73:f1:7b:
                    40:ef:7c:28:a4:bb:c8:a3:e9:2e:d3:bf:08:ec:65:
                    d7:a1:87:ec:df:99:0b:b0:c2:7d:07:70:8d:5f:fe:
                    a7:da:24:fc:c9:7c:c8:79:ad:42:53:ac:a3:60:19:
                    01:38:37:36:76:6e:f9:da:2d:4c:f9:d4:e2:71:46:
                    ad:22:29:51:c5:aa:ed:0e:20:71:eb:e6:c0:25:d7:
                    e8:e1:9e:c0:56:1d:95:a8:7b:a6:75:92:7c:af:45:
                    68:10:0c:5c:88:6b:0b:9c:4a:72:72:75:72:73:1c:
                    86:11:0f:01:2d:cf:1a:f1:3a:d1:e3:0b:56:d5:18:
                    26:68:41:75:21:09:da:cd:94:2f:71:7a:ba:68:2e:
                    29:71:1f:6f:13:1f:68:14:37:80:0f:d4:02:3e:d8:
                    5e:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5F:FF:D3:3C:88:26:85:E4:76:1B:29:45:18:4C:FC:6A:77:6D:95:2F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/19f85923-e65a-3c95-9103-e0067521e5ff.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.42.177.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0d:df:24:84:2c:81:b5:be:57:17:66:ae:57:aa:90:7f:6b:55:
         d7:3d:d5:c5:2b:01:24:6a:98:4c:33:92:b3:c7:3f:8e:ec:49:
         f4:25:9b:63:94:20:85:2e:e0:8b:a0:6b:da:c9:18:68:9f:38:
         7b:e5:06:4b:a8:8f:80:4a:4e:23:74:c7:ab:ef:11:a1:3f:0b:
         ab:53:45:bf:c2:d8:73:40:50:b2:83:f4:a5:94:10:4c:c6:b1:
         46:07:2a:8e:9c:80:93:6a:6d:a0:76:83:1c:d3:63:0f:99:23:
         cf:2e:7e:e1:72:7d:3d:9a:3a:a8:df:41:8b:2a:de:df:fa:6d:
         44:65:8e:d9:28:35:52:58:b1:d9:21:e1:9b:cf:11:7d:eb:da:
         3c:43:e5:2b:9b:34:1f:fc:8a:14:15:7f:91:1b:02:66:ff:8b:
         28:0a:4c:fe:35:70:36:75:76:83:96:6e:cf:b2:13:71:44:bb:
         af:a3:2e:51:6b:69:0d:a7:2a:3e:c0:31:08:27:d0:d0:18:62:
         49:f1:e8:a6:f2:30:06:05:45:f3:43:06:ee:e9:a6:7b:a7:b5:
         4a:0f:1b:4d:b9:e1:1c:3d:b1:88:e2:6a:e2:4b:ec:00:02:ca:
         8b:02:26:90:10:cb:6a:e8:b2:75:a0:3e:fd:86:5e:94:a1:0b:
         c9:f5:83:b0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 03:23:50 2026 by rpki-client