Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/2610ac2e-4e62-3b98-bf54-88419a09199a.roa
File:                     2610ac2e-4e62-3b98-bf54-88419a09199a.roa (raw, json)
Hash identifier:          hVKbZK+vDjmnPh/MzHtVvg28cLUbSZVCK34+rpBRLpI=
Subject key identifier:   2D:38:B3:CC:5B:E1:E5:B0:3C:01:CF:1C:CE:1D:C7:01:9E:EC:8C:7A
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584D46B11B3C795A0A6F0AF39180
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/2610ac2e-4e62-3b98-bf54-88419a09199a.roa
Signing time:             Tue 24 Mar 2026 15:45:00 +0000
ROA not before:           Tue 24 Mar 2026 15:45:00 +0000
ROA not after:            Mon 22 Jun 2026 15:45:00 +0000
asID:                     20172
IP address blocks:        192.42.174.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 28 Mar 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:46:b1:1b:3c:79:5a:0a:6f:0a:f3:91:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Mar 24 15:45:00 2026 GMT
            Not After : Jun 22 15:45:00 2026 GMT
        Subject: CN=97ab2ea4-1b3e-42d2-9a0d-544e3cded515
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8b:96:a3:51:10:52:71:f0:16:3f:48:b5:51:d4:
                    41:89:3c:bb:14:cf:d3:2a:58:d1:4d:9f:c2:34:11:
                    37:94:a2:66:2b:fc:77:79:2c:2d:a4:28:83:3c:d4:
                    c7:f2:3a:c2:86:8f:4d:5e:64:7d:78:14:3c:81:87:
                    fa:d9:5f:55:16:51:65:6d:0a:07:3c:9c:c1:8d:60:
                    c2:da:cc:d8:52:cf:56:0f:e1:98:e1:34:b3:f2:f6:
                    dc:e3:70:1b:9f:a3:4a:20:03:d3:7c:d7:9c:56:99:
                    26:ee:d0:0e:17:40:d1:c9:c3:34:b4:9f:46:ca:5f:
                    4d:e2:e8:21:c8:bd:8a:fd:11:97:9b:b0:eb:eb:92:
                    6b:36:fb:ab:09:ef:91:e9:23:c4:03:e4:3f:b5:c9:
                    74:a7:b4:b9:13:62:dd:73:9a:f1:05:a2:19:b8:80:
                    08:a7:e4:04:a4:51:6d:0a:1d:55:41:67:37:25:12:
                    8e:0a:0e:a8:2b:bd:41:f8:18:64:fc:41:c9:63:0e:
                    4a:9d:ca:f2:a1:67:42:ea:c3:63:fb:f9:9f:3f:cd:
                    fb:0f:b4:d5:b5:5d:a5:08:03:c7:ee:30:41:99:24:
                    90:9b:09:f0:3a:b6:b1:20:78:1d:92:75:d5:76:38:
                    ec:e1:82:eb:50:f4:6b:eb:53:f2:19:f5:cd:8b:77:
                    f6:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2D:38:B3:CC:5B:E1:E5:B0:3C:01:CF:1C:CE:1D:C7:01:9E:EC:8C:7A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/2610ac2e-4e62-3b98-bf54-88419a09199a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.42.174.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         46:3c:49:c4:71:d6:7e:31:29:52:90:09:0d:55:ad:6b:d7:52:
         26:78:29:f8:99:a0:88:27:b8:fd:ed:42:71:12:a4:ff:98:3d:
         4b:ae:8b:9d:28:cf:52:fd:a6:68:06:46:38:00:3b:3d:79:f8:
         9b:1f:75:e2:34:c7:15:3f:1e:85:e9:a9:aa:42:03:9a:79:b8:
         5e:34:76:c9:10:85:28:5c:26:93:85:06:70:fa:bd:19:67:78:
         bf:d7:50:04:61:93:16:f1:c6:9c:1b:c6:37:09:ae:69:42:a5:
         a2:32:71:37:8d:4f:df:1c:c6:d9:fc:db:0f:c0:7d:c7:f8:15:
         7d:f2:33:8d:39:04:52:60:61:f8:6a:0f:6d:47:fe:db:70:0c:
         fe:89:c4:18:b6:a0:3b:4d:96:aa:aa:10:11:7c:50:4f:bc:49:
         11:5e:70:07:c4:8b:a9:6e:6e:99:e8:37:4f:30:60:50:7c:57:
         b8:72:86:32:62:0c:95:e5:0b:49:ba:2d:66:dd:26:27:5b:02:
         e1:32:b9:93:87:ac:da:48:98:c4:54:4e:72:23:2c:f9:25:70:
         64:f1:89:0a:21:1c:58:19:1b:e8:85:cb:4f:2c:8e:24:95:d4:
         dc:a5:29:bc:de:74:6a:78:a4:cd:78:11:9d:86:7c:88:43:20:
         21:17:d0:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 08:39:02 2026 by rpki-client