Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/2380a3b7-7bc0-337c-b62a-47b0bc04d2e7.roa
File:                     2380a3b7-7bc0-337c-b62a-47b0bc04d2e7.roa (raw, json)
Hash identifier:          GpYcpCA7uFYuXZ2uBBOsflZ5sJ7Ms/b+SByRj0xqCKU=
Subject key identifier:   59:A6:34:9F:88:82:BC:2E:CA:6F:AA:14:D1:D1:12:13:49:E5:2E:21
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584DA11AABE17D84470C6D051200
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/2380a3b7-7bc0-337c-b62a-47b0bc04d2e7.roa
Signing time:             Sun 26 Apr 2026 01:00:25 +0000
ROA not before:           Sun 26 Apr 2026 01:00:25 +0000
ROA not after:            Sat 25 Jul 2026 01:00:25 +0000
asID:                     36621
IP address blocks:        192.48.79.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 15 May 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:a1:1a:ab:e1:7d:84:47:0c:6d:05:12:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Apr 26 01:00:25 2026 GMT
            Not After : Jul 25 01:00:25 2026 GMT
        Subject: CN=405a1904-4d44-4947-b41a-7e02f8cba3de
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:83:b8:61:21:67:e7:0d:42:c5:03:9f:5f:3b:
                    77:90:5e:5a:fc:c1:1e:ca:08:91:d5:4f:0b:02:59:
                    cf:9e:43:90:18:67:57:29:2b:50:db:4d:3c:25:7f:
                    3e:5e:3c:b4:20:6b:cd:5c:36:26:31:ec:48:a0:ff:
                    80:55:7a:11:e4:fc:a7:c3:ed:86:1a:aa:a5:50:53:
                    60:06:60:bc:41:b9:07:78:86:20:fe:49:0b:c5:09:
                    2a:43:44:84:66:df:9b:5e:2e:ab:1d:17:97:36:6c:
                    97:d3:b7:9f:fc:b4:82:2f:42:8d:d5:19:0f:44:3c:
                    fa:d9:1a:e5:b8:56:f4:37:09:80:b0:c4:6f:0d:98:
                    8d:5a:2a:8f:c2:25:31:a9:a3:1c:a7:d9:f4:2e:f0:
                    e2:e9:30:d6:21:f0:af:64:15:83:de:5b:c8:d0:86:
                    56:05:f7:c1:f4:48:d8:ca:88:fb:41:f5:bd:79:df:
                    75:6e:fa:c8:fb:47:57:06:03:4d:a7:11:4c:22:4b:
                    cc:3c:1e:05:5f:80:bc:ac:53:85:66:6c:87:99:f5:
                    06:85:7d:77:2f:97:31:7c:77:f7:9b:33:9f:73:73:
                    1f:99:e1:5a:d2:e6:fb:df:5b:6e:60:3c:36:ba:e1:
                    8d:48:78:9b:4c:b8:9f:aa:9e:f6:c8:e6:2e:7b:6d:
                    df:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                59:A6:34:9F:88:82:BC:2E:CA:6F:AA:14:D1:D1:12:13:49:E5:2E:21
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/2380a3b7-7bc0-337c-b62a-47b0bc04d2e7.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.48.79.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         94:6b:64:da:5e:38:fe:66:49:5f:d5:e8:9f:12:e1:d0:75:5e:
         4b:0d:f2:e1:c1:69:0b:19:4e:fa:43:f2:9a:45:a3:dc:4e:e2:
         2a:2d:93:72:58:03:7d:61:cc:02:c6:0d:ff:97:d8:39:56:cc:
         f0:e3:80:71:c5:2e:08:3b:7a:72:ed:6b:1e:f4:be:58:7e:9f:
         0c:65:39:27:19:22:bf:6c:bc:a5:0a:36:c4:2b:b8:73:89:cc:
         c1:7e:83:ed:6e:41:44:35:a1:26:b4:3d:8f:ee:6b:9d:42:6f:
         fc:6b:8b:f4:0f:71:64:d9:5e:fc:80:cb:0a:14:3c:75:2d:1e:
         8b:1e:80:b3:ed:d0:30:cd:27:19:4d:c7:87:6b:d8:b4:b3:5b:
         fe:46:d3:69:43:94:d9:49:c2:83:98:2a:e2:6d:a3:1d:e8:b7:
         eb:c5:6a:76:41:d0:a4:26:88:52:0e:5a:86:dc:18:7d:a5:4b:
         d5:98:47:a1:2a:ba:ae:54:36:e0:64:03:20:98:88:12:37:e2:
         e2:e4:c0:bd:c8:41:4f:02:3b:09:37:b2:8e:3e:ca:73:6f:10:
         89:a1:11:64:31:19:52:87:72:2a:04:e1:f1:f3:d9:a3:17:3d:
         4d:b7:91:91:c1:f8:16:29:b3:e9:a5:7c:91:c1:bb:dd:fd:f8:
         60:1f:09:0c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 06:20:58 2026 by rpki-client