Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/21b9adff-addc-30b8-a15d-804492bd9627.roa
File:                     21b9adff-addc-30b8-a15d-804492bd9627.roa (raw, json)
Hash identifier:          YJxtrEZ0k49m9YhFCSWkHv+2qph57+/5v0oueFPFhNk=
Subject key identifier:   49:E6:6B:3E:EA:CF:A5:A6:61:2A:46:6C:01:0B:D5:0F:92:BF:39:2F
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584E8C8A4E0340DF2A7AC35D6480
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/21b9adff-addc-30b8-a15d-804492bd9627.roa
Signing time:             Sun 19 Jul 2026 09:00:11 +0000
ROA not before:           Sun 19 Jul 2026 09:00:11 +0000
ROA not after:            Sat 17 Oct 2026 09:00:11 +0000
asID:                     0
IP address blocks:        192.81.186.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 26 Jul 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:8c:8a:4e:03:40:df:2a:7a:c3:5d:64:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Jul 19 09:00:11 2026 GMT
            Not After : Oct 17 09:00:11 2026 GMT
        Subject: CN=ab636728-4415-4688-90f2-75585b9546af
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:3f:48:d3:91:c0:d3:a6:f0:21:de:4a:84:d5:
                    7e:5f:b2:51:85:6c:0d:8c:f2:41:ce:47:a4:19:90:
                    05:83:23:d8:10:ef:13:06:fd:ce:76:9b:c7:97:d8:
                    e6:54:ce:4b:58:77:f8:70:03:3e:5d:ee:bc:70:79:
                    c7:5e:96:c2:bf:e8:c1:ed:2e:f7:a9:c6:bd:78:09:
                    2f:c8:92:db:0e:0e:7b:e4:f0:db:5b:ed:7a:4c:44:
                    84:ed:ac:c4:99:d4:75:ed:34:20:28:32:ba:db:72:
                    6c:cf:05:aa:27:fa:e7:a8:fb:1b:df:5e:d5:16:97:
                    50:b9:eb:4d:6f:47:e8:87:99:b6:fc:25:ba:64:4c:
                    83:b9:9c:42:d7:9d:74:dd:64:25:50:12:21:56:fd:
                    8a:21:21:f1:c7:0b:20:a7:af:61:f1:00:a5:00:b5:
                    ad:1d:66:aa:cc:ba:b2:fc:77:64:8b:b4:af:b9:cd:
                    57:0b:18:42:9b:6b:8d:0b:03:16:e5:f7:08:29:be:
                    70:d2:4b:bf:a7:8a:e3:79:52:6e:fc:e3:70:4d:ac:
                    96:f2:df:bd:9a:84:65:6f:31:aa:43:98:57:dd:53:
                    58:22:23:9d:2c:d9:1c:f6:1e:e6:73:df:4c:72:18:
                    e4:bb:70:11:8c:a3:43:93:65:69:db:db:95:7a:42:
                    c2:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                49:E6:6B:3E:EA:CF:A5:A6:61:2A:46:6C:01:0B:D5:0F:92:BF:39:2F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/21b9adff-addc-30b8-a15d-804492bd9627.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.81.186.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         58:27:4d:f6:2b:90:71:67:4e:ba:6e:a0:9c:fe:04:f1:31:dd:
         de:f9:fa:f0:0e:0c:9e:a6:46:85:ef:5c:7e:ad:e1:68:01:2c:
         d0:41:0b:73:c6:25:32:03:92:bd:49:e9:f9:a9:4f:27:ee:7f:
         9c:85:c8:fc:78:d0:87:c1:bf:75:4f:88:12:a5:ae:96:bc:92:
         29:41:8c:df:a7:f6:2c:df:23:ed:64:46:6d:aa:62:12:16:a3:
         47:60:d2:61:3e:87:de:93:60:5d:71:91:f4:ff:09:1c:56:5b:
         de:83:12:91:de:01:f4:86:8d:2e:d3:c9:bb:50:ed:ac:22:68:
         ef:39:a2:cd:bf:d1:7f:dd:25:67:76:15:2d:d5:7e:4c:e4:56:
         ea:e9:1c:ee:65:c3:98:69:a9:f7:9e:32:c1:84:40:a2:5e:6d:
         aa:db:9f:74:4a:a2:4b:da:eb:d1:49:0d:4f:a5:9b:24:73:b2:
         8d:d7:82:34:a9:46:5b:05:9c:9a:4a:c5:ba:54:99:eb:a7:93:
         84:ee:e1:6e:8c:b0:02:be:7f:b1:f0:1e:61:7f:54:4a:12:ce:
         3e:2e:75:1e:1f:54:20:75:66:8f:4b:1c:96:d7:86:81:bf:73:
         e2:7f:b7:fa:59:c3:2d:a8:92:3f:24:ac:92:ce:ae:fd:00:bb:
         48:c1:75:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 02:14:04 2026 by rpki-client