Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/48aa50c9-f07a-31ed-8d6b-9496a17bd240.roa
File:                     48aa50c9-f07a-31ed-8d6b-9496a17bd240.roa (raw, json)
Hash identifier:          ykOPdreOdqejg2V9PIX6rapn6KZ6ZvsHaqGIoy6FbiQ=
Subject key identifier:   29:D5:10:EA:C8:DA:98:40:3C:3B:7B:DD:6D:E8:5D:FE:D0:31:3B:B7
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584DBBC1EA6AF7BECEEB76C5B9C0
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/48aa50c9-f07a-31ed-8d6b-9496a17bd240.roa
Signing time:             Tue 05 May 2026 14:08:27 +0000
ROA not before:           Tue 05 May 2026 14:08:27 +0000
ROA not after:            Mon 03 Aug 2026 14:08:27 +0000
asID:                     397193
IP address blocks:        192.5.6.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 15 May 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:bb:c1:ea:6a:f7:be:ce:eb:76:c5:b9:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: May  5 14:08:27 2026 GMT
            Not After : Aug  3 14:08:27 2026 GMT
        Subject: CN=95399712-4aac-478b-9dc0-de95fbfb397c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:3d:a6:25:81:7a:f4:92:a2:24:dd:a4:b7:15:
                    75:82:ee:7c:65:fd:f0:a7:63:bf:88:bc:0c:3f:0a:
                    75:71:c2:28:b4:0f:90:bb:3d:78:55:90:6c:3b:5f:
                    3b:63:30:73:6c:29:9b:4f:f0:5e:3d:6e:b1:61:38:
                    a2:89:a3:53:0c:b6:8d:6a:cc:4f:10:a8:5d:e8:6c:
                    7a:c0:58:a7:a6:2d:64:c8:83:4f:aa:87:48:88:5d:
                    f2:cc:37:d2:83:b0:41:f3:a3:99:e6:96:57:9c:7a:
                    da:51:60:16:8e:a0:a3:84:9e:d5:f5:01:cb:71:48:
                    06:72:e8:11:78:35:fb:ee:e3:34:05:40:33:49:ac:
                    83:6f:a9:45:cd:0c:b7:96:2e:0b:06:b0:29:5b:8b:
                    8d:36:d8:e2:0c:97:4d:99:5f:3a:65:39:1b:c5:03:
                    c9:6f:a8:81:89:74:0b:4b:18:f2:79:d0:9d:2d:88:
                    90:a5:3e:b0:e1:72:a5:b9:70:9d:83:7c:ac:62:bd:
                    59:16:a2:fb:6f:b6:30:b6:81:89:7a:b6:64:c2:fd:
                    06:de:bb:4f:97:88:13:17:06:38:30:84:6d:40:c3:
                    e6:af:f5:b9:c6:06:5a:14:73:bf:b7:72:69:36:a4:
                    ed:1d:61:b3:29:42:08:22:cb:b1:77:cb:68:99:73:
                    e3:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                29:D5:10:EA:C8:DA:98:40:3C:3B:7B:DD:6D:E8:5D:FE:D0:31:3B:B7
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/48aa50c9-f07a-31ed-8d6b-9496a17bd240.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.5.6.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         90:51:57:bf:8e:a6:20:a5:99:e5:0e:39:d9:c6:2e:7c:8f:d6:
         6f:e2:73:e4:10:73:db:d9:be:c7:5f:15:99:a1:05:8e:b6:71:
         1f:fd:8e:f9:40:6b:cc:22:2a:fe:6e:87:58:46:95:32:7a:76:
         7d:98:ec:69:ae:66:29:de:7e:15:0d:f5:e9:aa:2e:2a:86:88:
         10:f6:7d:15:87:09:35:94:2d:97:cd:30:89:ce:ee:8f:f7:03:
         3b:51:0c:e4:80:79:fc:73:06:f5:2b:8c:a2:9d:23:e8:51:21:
         de:3b:e0:4b:34:c2:b1:8d:54:84:a8:05:4b:54:3b:19:82:2c:
         6b:96:e6:f6:97:0a:ad:2d:69:1e:ff:49:ed:f6:78:7b:e8:d3:
         fb:1e:08:be:a3:7b:56:32:47:51:cf:b0:20:78:56:0a:53:fe:
         e2:60:91:7a:c4:1c:19:81:32:2b:d6:64:f9:ba:e9:87:08:e0:
         b6:99:1a:f2:ae:70:9b:e1:aa:6a:97:c7:16:40:1d:b8:5e:61:
         b8:d7:7d:c0:89:1f:a4:e5:d3:ee:95:60:7a:63:8e:f1:11:c3:
         84:44:4e:b0:70:8e:cc:e9:87:17:c4:61:c1:9e:a8:90:04:b0:
         8e:ac:af:d8:b0:54:bb:5c:ff:94:cd:c4:7f:75:5e:e2:03:1e:
         ca:2e:59:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 12:59:54 2026 by rpki-client