Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/36a4e5d8-9d51-399f-8d02-aea8a20b83e3.roa
File:                     36a4e5d8-9d51-399f-8d02-aea8a20b83e3.roa (raw, json)
Hash identifier:          ZQBdSBHTmzH/KudrrnU1loUiVP69WXEVhl0LX6S4MO4=
Subject key identifier:   34:89:21:AA:59:5B:F3:9E:98:3B:13:6E:EF:EE:CE:0A:31:0C:3B:C2
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584D9A4B8690CA1517D2B17A9600
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/36a4e5d8-9d51-399f-8d02-aea8a20b83e3.roa
Signing time:             Thu 23 Apr 2026 14:28:14 +0000
ROA not before:           Thu 23 Apr 2026 14:28:14 +0000
ROA not after:            Wed 22 Jul 2026 14:28:14 +0000
asID:                     20431
IP address blocks:        192.42.177.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 15 May 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:9a:4b:86:90:ca:15:17:d2:b1:7a:96:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Apr 23 14:28:14 2026 GMT
            Not After : Jul 22 14:28:14 2026 GMT
        Subject: CN=874f5d8d-4290-4786-8275-2636f84ffdeb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:85:78:4b:3e:92:77:09:dd:55:9a:0a:0e:94:07:
                    8b:a3:df:fd:e4:2a:cb:69:b7:3b:70:70:75:56:29:
                    02:82:7d:cf:55:2d:84:1b:9c:84:50:49:15:c2:84:
                    3d:22:da:0f:19:d0:7c:81:54:a9:93:db:6d:23:b0:
                    57:f0:19:5d:16:2e:e5:bf:88:0f:6a:4c:83:80:40:
                    61:ce:09:49:78:f9:13:91:00:7e:54:ab:97:46:b8:
                    9c:33:53:f7:b7:9c:20:c0:82:b6:2a:63:e1:a0:0e:
                    d0:4a:c2:ec:f6:fc:c3:c6:bf:b2:1b:8c:13:d6:e1:
                    02:f0:99:a2:88:70:62:95:9f:5e:a3:74:58:95:f1:
                    2c:09:e8:5c:b2:6c:76:9f:1e:85:16:48:35:0f:10:
                    b5:8b:e4:a3:d4:c7:c8:3d:f7:b7:4a:d9:5f:09:22:
                    ed:cf:01:fa:28:c2:df:06:16:a3:6a:ad:56:84:bc:
                    53:5b:e8:c8:f8:51:a2:b3:90:e3:df:d8:70:f3:8a:
                    ff:b4:01:60:68:14:f2:2a:f8:61:f2:20:97:ea:b9:
                    2b:ec:43:2b:12:12:0a:0e:92:50:ee:c4:08:b3:c9:
                    01:40:5c:d9:b8:7c:92:3d:ad:45:db:a5:22:c7:16:
                    8c:42:3a:53:be:ea:1a:10:ef:38:98:95:c6:a9:f0:
                    e5:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                34:89:21:AA:59:5B:F3:9E:98:3B:13:6E:EF:EE:CE:0A:31:0C:3B:C2
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/36a4e5d8-9d51-399f-8d02-aea8a20b83e3.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.42.177.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7f:22:f2:84:28:77:b3:4d:64:7c:af:cd:90:3d:36:20:ee:f4:
         19:c0:2b:07:c6:fc:9f:25:e1:f7:82:c8:5f:10:5a:8c:b4:b8:
         46:98:ee:fa:c5:d8:e1:15:a5:03:c2:2f:eb:02:06:c5:ad:77:
         6b:b4:df:27:25:f7:bb:ce:52:08:16:31:1f:39:7a:86:50:fc:
         b9:6a:1f:81:ac:3d:d6:7c:bf:54:ea:c8:06:c5:d1:9f:01:62:
         e6:e9:e2:e8:11:64:41:35:72:c3:e8:2d:72:3d:0a:ef:80:b6:
         24:d3:6a:01:a7:d6:ae:b4:fb:3f:ed:89:85:18:d1:33:51:ed:
         bb:47:90:72:78:9e:d5:0b:b5:e9:b1:6a:1d:56:57:99:19:c7:
         c1:18:b0:b4:a7:5d:ed:fb:fe:ef:09:cc:f9:b1:a8:94:1b:5c:
         09:63:bd:e7:0d:84:c6:04:d4:52:58:ff:fe:d5:37:79:bd:c1:
         ea:ce:17:4d:87:b4:25:ef:4a:c3:9d:33:84:c1:1e:ea:ee:7c:
         af:15:29:be:80:4e:8b:d9:72:18:a2:70:27:3a:bf:f0:56:94:
         fe:b3:e5:b2:bd:fa:0c:0c:c5:33:17:ce:1a:04:f7:ca:ae:c1:
         f9:0d:74:1b:61:44:94:a1:de:ab:53:83:49:de:8b:63:e7:86:
         07:97:33:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 03:55:17 2026 by rpki-client