Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/639b4004-7760-3437-b48b-6106852c55e7.roa
File:                     639b4004-7760-3437-b48b-6106852c55e7.roa (raw, json)
Hash identifier:          42FIbyo8ajJqD16XP5gFD7eCyEVDJAEeBAmJ5XLinoQ=
Subject key identifier:   DF:C2:5D:DC:89:8E:65:82:FC:31:4C:17:09:90:FD:9E:0A:C8:F6:B6
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584D46B116031CA97A064270B280
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/639b4004-7760-3437-b48b-6106852c55e7.roa
Signing time:             Tue 24 Mar 2026 15:44:58 +0000
ROA not before:           Tue 24 Mar 2026 15:44:58 +0000
ROA not after:            Mon 22 Jun 2026 15:44:58 +0000
asID:                     36622
IP address blocks:        192.42.174.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 28 Mar 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:46:b1:16:03:1c:a9:7a:06:42:70:b2:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Mar 24 15:44:58 2026 GMT
            Not After : Jun 22 15:44:58 2026 GMT
        Subject: CN=08220df9-0740-420a-a750-23dcdddae9e9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:54:35:f0:5c:67:3b:73:c8:49:a5:aa:c9:22:
                    2c:a7:46:86:4c:59:e8:43:f7:08:23:8a:45:cb:22:
                    27:79:4d:f7:57:aa:15:fc:11:d4:0b:37:95:7a:b6:
                    61:74:09:7a:75:9c:16:0b:e6:c6:86:95:fa:b2:89:
                    c0:68:32:51:53:e0:36:e5:f5:0c:53:84:49:8d:f8:
                    7a:27:ce:d4:3e:d0:1f:8c:b3:1c:92:73:42:72:37:
                    91:0f:77:ed:86:57:ab:71:12:84:f4:69:65:fc:2d:
                    3f:3e:2f:13:9e:df:1a:98:90:a9:c6:84:1d:69:5a:
                    f6:b1:e1:02:74:d4:84:a8:88:1c:72:cd:40:d9:67:
                    d7:db:3b:6c:89:82:c3:61:7d:47:c3:43:0a:bf:2c:
                    83:4a:ae:1f:21:e6:dd:3f:d6:ae:a5:e8:7c:cc:62:
                    64:23:2b:3c:ae:e4:a4:32:e7:d4:26:d3:97:52:c4:
                    2f:b1:5d:fb:40:2a:2f:f3:69:f6:94:7c:24:b8:d3:
                    43:d0:c1:7e:14:48:ba:ff:45:fb:b3:92:a6:0d:03:
                    55:a5:98:a8:33:ea:7d:27:e1:81:10:fc:dd:b7:10:
                    27:c5:10:27:d4:b8:ff:58:a9:2d:df:50:2d:37:96:
                    8a:57:a2:a2:21:c7:15:e2:79:a7:23:e6:2a:7c:7d:
                    ce:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DF:C2:5D:DC:89:8E:65:82:FC:31:4C:17:09:90:FD:9E:0A:C8:F6:B6
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/639b4004-7760-3437-b48b-6106852c55e7.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.42.174.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         8c:88:86:c5:87:6d:78:77:6a:a0:c2:e9:94:85:ca:02:74:06:
         ed:88:e9:1a:60:21:dc:68:0a:64:c9:59:e4:92:2e:7b:4a:72:
         b7:f0:35:c9:d5:d2:d0:85:e7:1d:d6:ae:73:74:66:47:12:c1:
         29:f5:af:e9:8c:26:03:51:8a:2f:c4:75:5e:ef:77:8d:06:69:
         91:2c:0c:d4:21:3a:29:10:66:28:24:44:e4:6f:65:45:52:08:
         02:8b:f7:02:47:73:69:49:cb:e5:44:00:bd:ab:98:7e:e0:6d:
         6f:11:45:2e:b1:45:06:d3:ff:99:82:73:0b:d6:03:79:7b:94:
         e2:f5:71:b0:6d:8d:f1:88:75:3a:53:2c:a9:38:d2:eb:64:00:
         e6:a2:be:6b:8e:fa:ea:31:7a:7e:e7:98:ce:61:02:73:75:eb:
         1c:6c:cb:2f:d5:76:6e:43:23:f7:b2:eb:3e:12:84:d6:f3:49:
         c3:21:b1:b2:bd:a6:60:ee:be:c5:88:e6:33:c8:20:ea:a6:e3:
         74:48:eb:ba:9c:64:a4:80:57:91:87:eb:b9:8c:6d:19:1f:3a:
         e8:53:60:08:cd:f1:ce:10:10:9a:f9:f7:0c:34:2c:fe:40:3d:
         a8:5d:d4:3f:35:d1:ff:aa:a4:72:c4:79:44:71:85:be:24:63:
         31:ef:66:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 16:42:48 2026 by rpki-client