Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/46d41d39-ccde-3e1e-9275-e8e22dddb236.roa
File:                     46d41d39-ccde-3e1e-9275-e8e22dddb236.roa (raw, json)
Hash identifier:          ZgjN5OBiBJmwiaKzqIanBnxIuLh2MsbRUal9Ny6pUrs=
Subject key identifier:   8F:2E:CC:99:AB:04:1A:6A:24:EA:DD:9E:65:F7:09:98:21:F3:B0:5C
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584D46B120847A013EAE705BEB00
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/46d41d39-ccde-3e1e-9275-e8e22dddb236.roa
Signing time:             Tue 24 Mar 2026 15:45:03 +0000
ROA not before:           Tue 24 Mar 2026 15:45:03 +0000
ROA not after:            Mon 22 Jun 2026 15:45:03 +0000
asID:                     397200
IP address blocks:        192.42.174.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 28 Mar 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:46:b1:20:84:7a:01:3e:ae:70:5b:eb:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Mar 24 15:45:03 2026 GMT
            Not After : Jun 22 15:45:03 2026 GMT
        Subject: CN=b77cdf1b-1cd2-4442-ab79-16cb415af229
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:1e:ea:4c:04:c2:e7:03:5f:7d:f9:d1:33:fd:
                    09:36:c5:42:d0:c7:40:98:5f:73:cf:e0:d0:23:7b:
                    2a:60:84:24:94:67:af:34:59:03:12:ae:06:68:c3:
                    7b:9d:d4:d5:94:a3:02:0b:43:ea:50:b3:55:8b:42:
                    68:25:7f:0d:c2:3f:04:a0:f4:d9:d4:fc:bb:22:d6:
                    4b:70:ec:da:a8:b9:19:23:62:e6:6d:1b:0d:13:6c:
                    7a:9e:aa:37:24:03:a8:fc:75:d6:b8:93:24:4e:91:
                    08:81:d3:2c:e5:7d:71:6e:1f:37:98:ca:bf:cf:a6:
                    e3:d5:e3:a9:1a:43:da:01:e6:6f:8d:3a:9b:b2:eb:
                    d8:35:8f:f0:ab:cb:9a:0b:47:ae:f7:f1:47:99:77:
                    c1:09:b5:37:74:48:37:ff:5c:84:bd:5e:9e:38:88:
                    b7:b6:54:ce:4f:56:16:32:26:58:53:2a:14:ad:86:
                    c4:04:fd:16:7d:2e:26:7a:c5:7c:be:69:14:a9:82:
                    83:08:da:dd:9a:b2:0d:63:9c:1b:88:9b:c5:cb:03:
                    91:bc:bd:10:6e:11:e9:de:f6:9d:4e:15:24:40:23:
                    ec:e3:f2:17:79:d5:53:16:29:6d:26:78:b4:c5:5e:
                    70:55:f7:42:a4:f1:78:5f:ab:04:2a:5d:dc:c3:c8:
                    0e:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8F:2E:CC:99:AB:04:1A:6A:24:EA:DD:9E:65:F7:09:98:21:F3:B0:5C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/46d41d39-ccde-3e1e-9275-e8e22dddb236.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.42.174.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         b0:c9:2b:8c:ca:83:79:e2:dd:e7:d5:b0:db:98:4d:84:e9:7f:
         66:d6:f4:0b:33:14:33:42:d1:b0:33:db:5d:01:8c:bb:55:6d:
         f5:6d:2c:ec:d7:2d:35:bf:75:4c:0d:fe:a4:7a:58:ac:a8:6e:
         3e:75:2e:df:4e:14:e2:1e:2e:3b:5b:ee:1e:1f:9c:06:b3:d0:
         65:5a:ef:41:42:6b:00:36:b1:e7:5b:b9:43:bd:3b:68:c6:03:
         8a:de:84:45:06:79:a5:ad:ed:58:ae:93:5f:d4:69:7c:83:66:
         0d:4e:5b:97:94:13:24:a0:1e:f2:f3:37:23:fa:92:53:50:2c:
         5e:af:a3:d7:28:33:1b:79:30:c1:45:c5:0a:c1:5a:19:a7:87:
         de:dc:5a:a8:70:d5:dc:de:86:03:a0:7b:79:fe:d3:d2:54:6e:
         2d:02:18:de:d0:3a:26:dd:17:09:e1:2c:41:9b:09:fa:88:da:
         f7:a5:f8:93:8c:b5:87:d4:d0:06:b4:2a:fb:f7:e9:c3:c9:75:
         e3:bd:92:be:d9:c9:a8:b8:22:5c:88:bc:02:65:29:6f:5e:a8:
         36:ec:91:c7:e8:f8:9c:3e:62:6e:ca:d1:55:1f:47:b0:74:5a:
         c2:00:94:cb:2c:0c:f4:7a:83:28:08:39:f9:d8:c8:06:03:3e:
         72:e5:44:8a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 08:31:54 2026 by rpki-client