Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/6897c674-92ce-32b9-8bfd-10c051e70305.roa
File:                     6897c674-92ce-32b9-8bfd-10c051e70305.roa (raw, json)
Hash identifier:          pcwtsb/0ql64sNjuAOic3hCNAnwmUKBC3sDv2fYfK08=
Subject key identifier:   C9:8D:07:C7:94:CB:A1:52:49:8A:01:E9:6B:C7:41:46:0B:96:F8:B2
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584DC157707D3275D73430F66F90
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/6897c674-92ce-32b9-8bfd-10c051e70305.roa
Signing time:             Thu 07 May 2026 14:08:46 +0000
ROA not before:           Thu 07 May 2026 14:08:46 +0000
ROA not after:            Wed 05 Aug 2026 14:08:46 +0000
asID:                     396611
IP address blocks:        192.42.93.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 15 May 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:c1:57:70:7d:32:75:d7:34:30:f6:6f:90
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: May  7 14:08:46 2026 GMT
            Not After : Aug  5 14:08:46 2026 GMT
        Subject: CN=416dc2fb-c907-4aa8-8d65-d70a3e5422d5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:80:f5:b2:bd:0b:a7:b8:7b:d3:d0:ff:81:e6:02:
                    a8:48:ee:5b:53:57:58:f8:21:96:3a:e5:08:f7:d3:
                    d3:93:29:a5:82:5b:b4:1c:ff:9a:57:83:b5:04:85:
                    1c:2d:54:b6:5d:0a:6c:ec:b7:30:1e:48:77:bb:b9:
                    d5:da:9d:09:31:d4:59:88:24:8f:f4:fd:bf:b4:a2:
                    8f:6c:5a:fe:b7:b4:37:8c:83:2f:59:b0:b9:5c:36:
                    bc:53:a0:f0:3b:19:6d:bb:22:5d:74:59:bc:90:ef:
                    60:9b:90:66:1f:68:c0:1c:5d:a3:bc:46:6d:44:91:
                    69:7b:b0:b5:57:e7:c7:9a:85:1e:93:6d:81:7c:3e:
                    3a:eb:68:03:87:93:a9:c6:b9:cb:be:ca:c5:88:49:
                    d7:ea:21:a6:aa:a2:1f:7a:84:67:f7:27:39:2e:28:
                    82:0b:22:71:b3:13:13:40:40:47:6b:34:e9:64:b2:
                    f8:17:74:b7:1c:e6:b3:22:1d:08:8f:ea:bb:b1:b0:
                    04:f3:d0:07:40:9b:47:7e:ee:5f:01:53:d6:c1:ac:
                    94:19:c1:10:10:7a:55:0a:f6:dd:ae:1f:f7:90:15:
                    cc:47:34:2d:1d:8f:33:f9:4d:41:0b:89:b6:a6:8e:
                    07:e6:b6:e2:77:bb:d6:a6:29:32:41:fe:84:4f:f2:
                    20:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C9:8D:07:C7:94:CB:A1:52:49:8A:01:E9:6B:C7:41:46:0B:96:F8:B2
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/6897c674-92ce-32b9-8bfd-10c051e70305.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.42.93.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         95:9e:e2:57:51:f3:e3:70:95:a4:88:a3:7f:a2:13:ba:37:5a:
         45:b9:ea:69:51:4a:ee:2e:3c:15:c4:a0:9b:ab:8d:98:41:3f:
         dc:f2:7b:0a:f6:95:56:df:6f:7b:8f:56:16:c8:ea:c0:12:83:
         43:14:6a:e6:2b:77:19:79:3c:6e:b1:e9:4d:2d:ee:60:c6:de:
         75:94:71:87:28:ef:c5:d7:7a:c7:4d:a5:b7:d9:17:5c:04:d1:
         b1:60:20:73:7b:63:32:d2:4d:53:91:8d:68:b5:5e:ab:45:58:
         dd:cb:c2:8b:8b:d5:5a:dd:88:ae:f5:d2:95:0b:23:45:a8:60:
         35:c5:0f:a6:a8:53:38:92:39:88:03:bf:e9:34:9a:05:fd:2e:
         76:a5:bf:af:ae:2c:96:79:4e:2d:49:47:57:0d:33:2b:dd:45:
         f9:26:de:d1:ab:61:2c:4c:bb:bc:65:e5:ec:cd:aa:ec:87:16:
         d7:ff:2f:9b:59:07:1f:30:b0:63:4d:25:d8:b5:29:df:09:1f:
         73:b3:18:41:0d:b2:2f:9b:be:bf:2a:72:35:bd:a5:95:a7:07:
         cd:09:4e:3b:b4:73:04:9a:09:d5:65:db:d8:45:0a:2b:81:05:
         14:3b:f0:92:e0:35:2c:d6:e4:0f:a3:38:14:23:a3:fc:36:92:
         7d:9c:f1:05
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 10:54:23 2026 by rpki-client