Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/63ba0ed8-381e-3ff8-bf9d-161052588828.roa
File:                     63ba0ed8-381e-3ff8-bf9d-161052588828.roa (raw, json)
Hash identifier:          aosccorXz9QMVNV6h9qYGSf0QHAMAqcj6p7q5qOeVmM=
Subject key identifier:   4A:C9:81:05:02:B4:8C:FC:63:33:4E:A8:55:AF:6C:EB:7B:49:73:27
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584DAAE050C8C95D04990675EF00
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/63ba0ed8-381e-3ff8-bf9d-161052588828.roa
Signing time:             Wed 29 Apr 2026 13:00:31 +0000
ROA not before:           Wed 29 Apr 2026 13:00:31 +0000
ROA not after:            Tue 28 Jul 2026 13:00:31 +0000
asID:                     20431
IP address blocks:        192.81.185.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 15 May 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:aa:e0:50:c8:c9:5d:04:99:06:75:ef:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Apr 29 13:00:31 2026 GMT
            Not After : Jul 28 13:00:31 2026 GMT
        Subject: CN=7e14cd3e-08af-415b-8004-eebabc4a5ed5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8a:10:3c:9b:e3:b2:c4:63:60:2c:82:12:ce:57:
                    13:ea:c3:f5:4a:24:f3:f3:61:68:04:16:5c:84:e0:
                    eb:c3:d6:1c:a8:13:90:50:c0:9f:e3:ab:60:38:9c:
                    e6:01:cd:54:7d:a3:1d:25:15:72:c8:10:cb:45:85:
                    6d:75:7b:bb:3d:d0:72:5c:40:ce:6c:d0:ed:24:0d:
                    de:c0:8b:5c:9a:9f:68:96:b6:d3:54:f1:27:2b:c2:
                    4d:98:7b:87:c4:f5:c9:d4:22:80:8d:44:4b:9c:4a:
                    a1:47:1d:85:a6:62:b8:da:a4:41:47:ce:e7:30:59:
                    a4:6f:f5:a0:e2:51:d1:70:79:6d:63:b7:29:e7:ce:
                    82:36:fe:93:8d:1b:49:31:82:45:a1:ec:28:9f:05:
                    c5:77:91:a0:3a:61:df:e3:ef:f6:b7:4a:ce:6a:d5:
                    97:4e:8e:22:83:7d:ad:93:c8:1d:14:3a:01:c2:00:
                    5a:a0:6b:49:03:08:59:c6:08:e5:68:93:74:b4:03:
                    6f:f4:50:75:24:e5:0e:74:6c:79:41:c4:80:e3:17:
                    6b:e1:25:a4:53:7c:d2:f3:f3:15:04:ce:da:1f:0e:
                    49:3e:c2:e6:b2:57:10:20:0e:a7:59:c9:94:3a:44:
                    4b:60:79:9d:10:db:1f:7a:90:ff:12:d2:d6:4b:9e:
                    a7:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4A:C9:81:05:02:B4:8C:FC:63:33:4E:A8:55:AF:6C:EB:7B:49:73:27
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/63ba0ed8-381e-3ff8-bf9d-161052588828.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.81.185.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         bd:1e:d0:f9:8f:69:84:c4:93:ce:54:5d:cb:60:b3:a2:82:2a:
         f5:bb:34:5b:0f:74:f4:42:2c:ea:75:f1:9f:15:89:2b:1c:ca:
         d9:4c:50:3f:86:ae:57:8b:20:64:39:48:40:c1:d4:a9:90:11:
         ec:d0:d8:76:49:16:d2:d7:a2:3a:a7:6d:7a:9a:52:5d:45:b9:
         50:72:2d:10:03:13:08:f3:2e:68:cf:5a:01:52:b1:e2:85:98:
         db:a1:e2:40:00:92:2c:c6:25:ef:5f:69:94:36:65:2c:f9:7d:
         92:27:af:1f:aa:86:c2:6a:de:7b:60:54:da:cb:18:4e:6f:17:
         f0:13:d9:8f:a4:e8:a3:c0:e9:ff:03:12:a3:40:d5:e7:4b:10:
         0b:0d:77:40:1a:f1:43:61:2f:5f:82:86:ab:2b:34:1d:4f:44:
         55:21:25:54:56:82:a2:8c:b5:d0:2b:66:8c:ce:c6:ea:70:b6:
         f1:01:a2:f1:a6:98:a1:4d:87:6e:82:3f:47:49:d3:b3:4c:d5:
         a3:e7:0a:94:7c:fc:e8:db:1c:1e:f8:7b:c1:f6:66:13:fa:74:
         20:9c:e2:32:ad:35:ad:86:db:74:f7:22:98:7e:15:2c:cf:a7:
         8a:c2:ed:2d:24:b3:e7:09:b0:e0:32:6f:f3:d0:16:46:0d:da:
         fb:27:ad:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 18:28:19 2026 by rpki-client