Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/56fdbeda-efa6-3218-9bb6-57b3e9a333b0.roa
File:                     56fdbeda-efa6-3218-9bb6-57b3e9a333b0.roa (raw, json)
Hash identifier:          hTe5uaOiaDMPzUa5a3yvaKqY4R1QRarQET6Ah3ZfTrA=
Subject key identifier:   CD:8A:90:ED:09:CD:14:85:1E:70:80:43:A5:DC:B4:32:BA:F9:DF:5C
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584D3E001066FD8DC60DE5EB70C0
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/56fdbeda-efa6-3218-9bb6-57b3e9a333b0.roa
Signing time:             Sat 21 Mar 2026 13:00:39 +0000
ROA not before:           Sat 21 Mar 2026 13:00:39 +0000
ROA not after:            Fri 19 Jun 2026 13:00:39 +0000
asID:                     397193
IP address blocks:        192.58.128.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 28 Mar 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:3e:00:10:66:fd:8d:c6:0d:e5:eb:70:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Mar 21 13:00:39 2026 GMT
            Not After : Jun 19 13:00:39 2026 GMT
        Subject: CN=10213fc9-387e-42c2-9c52-c23789fd1cf0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:51:88:28:58:15:50:6a:20:d7:5e:bb:e2:f5:
                    ee:ad:28:46:cf:96:6a:e0:a4:d7:4b:30:51:25:8a:
                    50:c1:86:bc:59:ce:eb:36:85:19:10:0c:5f:b4:71:
                    6a:b5:93:a3:a4:48:66:3b:b6:8b:94:4c:9a:dc:a4:
                    00:fe:90:9d:1f:1f:ca:ca:35:33:a2:02:58:c0:a0:
                    d3:8f:1b:3f:8b:03:bd:84:11:b4:eb:6a:20:19:56:
                    6f:00:52:b6:ff:1c:9f:de:8a:25:9f:14:fd:4e:d6:
                    d3:c7:2d:c3:51:52:be:2c:c1:c9:0d:ef:39:f9:2a:
                    df:6f:62:68:95:77:80:e3:03:bf:70:1a:ae:3b:79:
                    7f:35:26:f6:02:22:79:0d:d1:7b:5a:3d:3b:03:ef:
                    bb:52:a1:14:8e:9e:92:72:5e:cc:ac:48:b4:dd:38:
                    58:ce:ff:57:8f:e6:f1:37:bc:29:e2:00:30:df:ad:
                    a6:87:3e:51:85:f4:51:23:12:97:b4:93:88:1f:8c:
                    aa:1c:a7:34:b8:82:15:70:ad:76:39:dc:70:64:63:
                    67:93:f3:eb:ca:3d:ea:c5:83:1b:34:d5:9a:44:46:
                    5e:db:54:ad:d1:0a:01:58:15:53:bc:14:2f:17:51:
                    15:5e:22:fe:f2:02:1f:35:b8:4a:59:02:6d:00:55:
                    72:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CD:8A:90:ED:09:CD:14:85:1E:70:80:43:A5:DC:B4:32:BA:F9:DF:5C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/56fdbeda-efa6-3218-9bb6-57b3e9a333b0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.58.128.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         40:6d:be:90:f7:b8:64:ff:d8:92:87:8e:02:4c:eb:ed:53:4f:
         7a:e3:27:6b:21:cb:2f:36:66:b0:8a:7e:c9:ca:34:38:46:d3:
         5d:f4:a9:cd:ef:ee:96:25:dd:f0:2d:d4:b5:9f:e2:d5:97:44:
         a7:95:24:a0:fd:7b:c4:0b:64:b8:73:14:a2:fa:5c:fd:62:d2:
         c9:52:8f:98:85:c7:b0:6b:8d:fa:9d:2b:74:e4:56:e0:d4:9d:
         2e:09:07:c7:dc:d1:67:aa:df:f9:6f:c3:cd:5a:b1:f8:89:99:
         02:06:85:89:c0:01:f7:df:5c:37:41:79:1f:1f:cd:de:65:bf:
         e9:5c:6a:e0:06:db:82:da:c7:14:82:22:b5:88:38:a2:df:b1:
         14:07:43:7b:45:2b:73:68:4f:b3:0f:ee:f1:1f:be:39:ff:2c:
         3d:ae:ff:f0:f7:4b:c9:c1:ec:83:1e:22:25:19:ad:48:c4:97:
         b8:4b:4e:3d:9c:fc:9c:c9:51:d4:2e:9c:8d:6c:93:ce:38:58:
         b5:04:99:8b:33:2c:74:db:50:63:eb:7a:ea:ab:92:f6:47:e1:
         87:5f:d9:5b:19:4f:d3:63:ea:0a:b2:c5:20:73:5a:9a:2c:ed:
         98:93:53:e3:15:9b:cc:21:2a:49:58:87:23:e1:15:8a:a6:ac:
         f1:29:90:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 12:44:30 2026 by rpki-client