Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/3977c769-a282-3526-9e00-ca3952012f4c.roa
File:                     3977c769-a282-3526-9e00-ca3952012f4c.roa (raw, json)
Hash identifier:          axXpVWqjpmInXeJ0Yi5NfSQ9zbmbYmWkfHz9NwTv0Ds=
Subject key identifier:   BB:79:65:D7:33:AD:8C:38:19:99:34:92:E4:72:B0:6E:A8:58:C2:CA
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584DCC606F516AF0A8CE7E66C380
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/3977c769-a282-3526-9e00-ca3952012f4c.roa
Signing time:             Mon 11 May 2026 13:00:31 +0000
ROA not before:           Mon 11 May 2026 13:00:31 +0000
ROA not after:            Sun 09 Aug 2026 13:00:31 +0000
asID:                     396603
IP address blocks:        192.12.94.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 15 May 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:cc:60:6f:51:6a:f0:a8:ce:7e:66:c3:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: May 11 13:00:31 2026 GMT
            Not After : Aug  9 13:00:31 2026 GMT
        Subject: CN=28479976-786c-48b5-b63d-3b3fd47c17a1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:3d:46:82:d8:36:05:df:ac:53:a4:f7:f1:0e:
                    6e:e5:c4:ea:f5:09:e5:d7:56:5f:57:24:9a:ef:c3:
                    ac:9a:9b:0e:e1:b6:31:50:2c:80:0c:b8:6e:2a:4c:
                    c5:b6:4b:9b:fb:f3:7d:95:e2:b3:d9:b9:94:85:34:
                    10:7e:d5:2a:aa:98:ff:fd:e7:e7:29:9f:1c:3e:8b:
                    87:01:2c:ef:65:45:6a:32:1d:58:b3:a7:ca:b5:65:
                    4f:a8:40:6a:40:08:48:14:b9:0d:3f:76:61:26:4c:
                    40:a3:63:99:25:df:25:18:2e:f8:c6:94:55:27:8a:
                    1c:e6:ae:ff:00:bf:dc:68:f3:d7:cf:e9:39:0b:16:
                    74:7e:94:a5:b8:0b:7d:4e:23:de:d3:54:37:39:2d:
                    b8:7f:2a:c1:fc:bf:b7:56:78:5a:dc:07:9f:74:ad:
                    1b:0c:30:a4:d2:c6:75:67:b8:1a:19:18:b8:1f:5e:
                    58:97:63:78:3a:37:0b:65:3b:d5:10:89:03:36:c5:
                    b4:9a:07:e0:d1:a3:50:9f:7e:04:9b:99:0c:03:87:
                    f5:20:bd:fa:7c:e0:47:32:54:b7:33:f9:23:d1:6b:
                    b5:10:d6:12:6d:c9:38:54:5d:a6:d7:9d:4b:03:70:
                    72:17:df:82:dc:c5:d1:6c:1e:34:84:a3:39:a9:1c:
                    f5:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BB:79:65:D7:33:AD:8C:38:19:99:34:92:E4:72:B0:6E:A8:58:C2:CA
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/3977c769-a282-3526-9e00-ca3952012f4c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.12.94.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         15:31:06:2c:4d:bd:b4:91:c1:d3:13:62:59:88:e8:e3:0b:1b:
         ac:1f:5f:d9:86:37:80:29:35:8e:dc:5f:c7:3a:78:7e:2e:1d:
         71:fb:56:99:4b:13:8f:69:4a:f4:18:5a:35:c7:eb:c5:10:19:
         59:1b:f2:4c:a5:f1:fe:b0:ff:d8:c6:bb:89:0f:ec:d0:f3:08:
         69:cd:8a:cc:d4:72:30:ab:34:64:e0:30:42:1c:81:8a:19:53:
         20:18:57:1f:16:83:d0:39:30:c4:0a:be:65:51:ef:b9:f7:99:
         da:5c:16:a1:c2:a4:dd:c6:36:bd:9b:b5:d2:01:20:79:10:f4:
         d3:09:63:fb:5d:5c:45:d6:c5:5e:d2:a5:f1:69:19:04:1c:fb:
         06:0a:7e:f8:02:e7:e8:07:f7:89:ad:b1:dc:f7:c8:97:27:0d:
         57:36:e1:33:01:d6:77:c1:b5:8f:18:33:97:4e:c5:10:ba:12:
         9b:3b:1c:0d:51:8d:b4:d8:1a:11:62:fc:8e:0f:0f:5e:7c:ce:
         90:b6:41:34:af:80:45:ea:04:92:c3:75:99:5e:93:c6:3f:65:
         09:df:29:22:99:ef:29:92:bf:05:9d:89:31:e5:6d:91:42:e4:
         72:53:4a:b0:48:0a:a8:f5:4b:16:0e:b0:c0:21:35:ce:9d:08:
         eb:e0:c0:4a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 09:18:22 2026 by rpki-client