Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/518b4e47-ad5d-323a-b450-157c2ac5cd62.roa
File:                     518b4e47-ad5d-323a-b450-157c2ac5cd62.roa (raw, json)
Hash identifier:          pMrSEbkgPMZlVpvQGiyTtZo9jKQcdPegXDwf8SSPF7I=
Subject key identifier:   55:F8:60:B8:2A:DF:0D:10:93:B5:D8:F8:BB:F8:95:D8:E1:EB:16:17
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584E7BCA327404AD3FDEB07946D0
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/518b4e47-ad5d-323a-b450-157c2ac5cd62.roa
Signing time:             Mon 13 Jul 2026 09:00:12 +0000
ROA not before:           Mon 13 Jul 2026 09:00:12 +0000
ROA not after:            Sun 11 Oct 2026 09:00:12 +0000
asID:                     397206
IP address blocks:        192.54.112.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 26 Jul 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:7b:ca:32:74:04:ad:3f:de:b0:79:46:d0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Jul 13 09:00:12 2026 GMT
            Not After : Oct 11 09:00:12 2026 GMT
        Subject: CN=d6bc954d-3ea7-4c52-be0a-74334eafa2f4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:98:76:bf:b3:ab:e1:79:60:f3:f8:db:e4:6b:
                    0b:05:a2:32:a2:6d:01:47:c3:39:07:6f:f2:7b:9b:
                    59:e8:10:7c:11:17:2f:32:89:27:43:9d:51:36:c7:
                    23:e2:07:c3:c8:91:80:e2:0d:29:8f:71:2c:19:3c:
                    b1:9d:36:a6:0d:a8:23:91:9f:d4:46:80:f5:34:71:
                    16:f4:4e:a8:eb:23:92:2d:0f:4c:86:9f:e4:ad:1b:
                    71:29:ac:56:75:35:50:a7:bd:56:f0:08:73:f1:23:
                    3c:0c:95:2f:4a:3c:d5:8d:26:f2:10:6a:cb:5f:90:
                    3c:be:af:e0:a0:c7:10:d4:01:06:b0:67:ad:cc:7d:
                    7e:70:7f:4a:bc:bc:17:ec:83:d9:94:f8:00:6b:c1:
                    65:8e:af:5d:93:83:f1:a9:84:e4:34:63:f5:0f:3f:
                    ef:65:e4:86:b6:15:1c:ca:04:2a:6f:ef:bf:6c:1a:
                    32:85:7f:fa:16:58:02:16:e9:5a:4b:fc:38:ff:ba:
                    d4:2f:96:11:cd:b1:0f:f1:ba:7c:54:22:01:94:98:
                    7b:0a:b4:d8:a4:40:7a:10:35:cd:d3:b3:ec:d7:88:
                    3b:43:94:66:b1:fa:43:8e:c8:cb:92:0a:9f:be:40:
                    2c:56:16:ff:61:10:ba:cb:a7:e9:2d:ed:ef:35:17:
                    59:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                55:F8:60:B8:2A:DF:0D:10:93:B5:D8:F8:BB:F8:95:D8:E1:EB:16:17
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/518b4e47-ad5d-323a-b450-157c2ac5cd62.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.54.112.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6c:5f:6a:fc:a9:06:f2:2a:e9:0f:a8:f9:bc:1b:f9:0a:b3:da:
         68:b6:41:5f:ad:f2:71:76:c8:3f:bf:7a:5a:3a:20:31:58:b0:
         ab:2c:a9:5e:29:58:89:0c:b6:a7:a8:09:f7:65:56:a0:cd:8e:
         a3:76:74:58:e6:a6:9e:91:eb:04:ec:b6:ce:32:0e:46:db:0f:
         55:54:6e:c4:49:c1:92:84:20:4c:0f:31:df:5c:94:a2:0a:15:
         05:0b:9a:cd:d5:c5:0f:aa:45:c7:54:42:7c:74:63:d5:79:c3:
         66:55:ec:df:ea:77:86:06:95:f9:14:0d:63:72:6c:18:b9:99:
         17:f5:e5:72:8e:38:52:af:ee:b9:44:ff:9b:4a:aa:0a:c1:d7:
         61:b7:a4:a5:38:c0:9a:0b:97:6c:86:6a:cf:ed:ff:3f:76:ec:
         7b:c8:b9:6c:89:bd:81:82:e0:ce:77:e2:68:ac:c8:53:d7:5b:
         86:aa:24:b2:9a:8e:be:cc:ab:b3:d3:74:98:9d:8a:f1:33:ab:
         23:40:69:8b:25:b6:2a:7c:16:9b:74:39:a2:55:cb:be:49:03:
         c9:a5:d8:bc:60:24:ec:c8:06:64:ad:48:da:47:5e:eb:f5:91:
         16:37:79:dd:e7:33:01:a7:67:4d:b6:2d:76:17:42:68:6c:10:
         a0:08:89:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 07:55:09 2026 by rpki-client