Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/1fed8bf5-d796-3c86-9452-da6c3cc1bfec.roa
File:                     1fed8bf5-d796-3c86-9452-da6c3cc1bfec.roa (raw, json)
Hash identifier:          wQZyF4yA4JVhofw0Icxgxjyp4+Zq1irgFkhtyxhWRUo=
Subject key identifier:   2B:C1:E9:CE:88:A9:18:88:F1:25:FF:57:57:73:B8:3A:48:A9:BE:5D
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584E8B250F5A52BAE57549D256C0
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/1fed8bf5-d796-3c86-9452-da6c3cc1bfec.roa
Signing time:             Sat 18 Jul 2026 21:00:11 +0000
ROA not before:           Sat 18 Jul 2026 21:00:11 +0000
ROA not after:            Fri 16 Oct 2026 21:00:11 +0000
asID:                     36625
IP address blocks:        192.81.185.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 26 Jul 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:8b:25:0f:5a:52:ba:e5:75:49:d2:56:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Jul 18 21:00:11 2026 GMT
            Not After : Oct 16 21:00:11 2026 GMT
        Subject: CN=b32a1aba-8b22-4f61-ae67-1b361e5ba6a7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:95:32:4d:cb:e3:64:ed:f6:a9:d9:ed:cd:a9:
                    20:a4:22:63:95:a6:f6:40:85:90:62:fd:9d:68:96:
                    df:6f:97:0c:03:35:58:88:f3:9b:e9:ee:07:44:80:
                    7e:ad:66:a0:72:15:2d:0d:0e:e0:ae:bc:4d:6a:88:
                    3d:db:d9:7f:7c:2e:3c:00:f1:48:a1:cd:3d:cd:dc:
                    cb:3a:87:8b:9a:88:1f:bf:e6:21:3c:6d:70:f3:1a:
                    54:a3:07:b9:43:24:b8:a1:65:4d:3f:cf:e9:df:41:
                    16:77:94:ca:01:41:43:08:bd:f6:20:f8:c0:80:f6:
                    79:be:b5:55:78:3e:91:15:5b:e6:95:a5:c9:b4:09:
                    10:65:b1:d5:4a:63:22:d3:55:4d:ad:cb:7d:7f:ae:
                    05:fe:61:28:94:fd:b2:c8:bf:0c:27:e1:8a:c0:67:
                    95:06:11:c3:6c:5a:42:62:cf:d3:50:6a:ac:32:37:
                    99:86:a3:78:cd:1e:70:ba:f5:bd:ea:12:13:59:9f:
                    50:58:e7:a8:67:f6:a9:3d:aa:e0:e4:96:c8:49:e7:
                    09:59:a1:db:f0:0b:8c:58:fa:b4:0f:c3:c4:18:fa:
                    81:79:f8:66:2b:5d:3a:42:69:dc:2d:57:bd:e4:22:
                    e4:d8:3d:e2:f8:de:34:2a:4c:a9:57:27:a8:f1:47:
                    00:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2B:C1:E9:CE:88:A9:18:88:F1:25:FF:57:57:73:B8:3A:48:A9:BE:5D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/1fed8bf5-d796-3c86-9452-da6c3cc1bfec.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.81.185.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         91:27:a9:ad:24:f5:d2:30:31:9d:12:72:66:f7:9d:77:9f:67:
         28:77:5f:19:eb:b3:b5:8a:7c:37:a9:84:69:31:80:3e:29:3d:
         b8:92:c7:ad:ab:28:97:69:6f:71:a1:f1:78:00:cb:af:c1:7d:
         29:a6:8e:20:d1:b1:d8:4b:43:cf:03:1a:d3:b0:b4:2f:96:62:
         fe:cc:49:2a:ee:8b:50:72:c9:8e:87:c8:c2:b2:f7:ac:26:21:
         72:5f:9c:6e:77:7e:06:18:21:06:01:e9:37:5d:8b:e3:a8:a0:
         a5:30:99:ab:ec:75:08:13:11:e9:55:69:2d:79:17:ef:e4:79:
         3e:f6:bb:d4:fc:29:4a:f2:ba:f6:c0:11:e0:c3:8d:e3:09:97:
         f4:71:19:ad:4f:07:73:ff:2a:93:38:0f:3c:92:22:31:c4:9d:
         b6:4c:e3:32:a4:49:8f:85:7b:98:24:5a:29:4f:27:35:8d:5f:
         a6:98:ac:a7:bc:31:e5:a2:d6:76:6f:9b:36:06:16:59:84:d5:
         6c:3a:b8:bd:1d:bd:df:f1:f7:7a:7f:e6:91:77:23:ed:c9:1e:
         4c:88:b9:aa:cd:e6:94:6d:29:ff:09:fd:63:82:75:82:04:76:
         62:3f:8c:3d:10:f9:64:51:0e:cb:e6:14:4e:da:a8:79:e1:89:
         f9:a1:37:c6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 06:39:43 2026 by rpki-client