Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/6b03e940-c8f9-3a39-90c5-b6e2a6367e34.roa
File:                     6b03e940-c8f9-3a39-90c5-b6e2a6367e34.roa (raw, json)
Hash identifier:          k8rKKzo+seNcHDptwDvo9r09wkbVmPxBGCcbmKKYC4Q=
Subject key identifier:   7E:BC:93:0D:A3:A2:48:88:4F:1A:24:22:91:B4:92:D7:23:D7:3C:41
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584D07AD0A2DF234C2358C7BBEC0
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/6b03e940-c8f9-3a39-90c5-b6e2a6367e34.roa
Signing time:             Mon 02 Mar 2026 02:00:31 +0000
ROA not before:           Mon 02 Mar 2026 02:00:31 +0000
ROA not after:            Sun 31 May 2026 01:00:31 +0000
asID:                     396542
IP address blocks:        192.68.126.31/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 28 Mar 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:07:ad:0a:2d:f2:34:c2:35:8c:7b:be:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Mar  2 02:00:31 2026 GMT
            Not After : May 31 01:00:31 2026 GMT
        Subject: CN=7ab62abd-c35d-4830-9681-12603cf4f8e2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:83:57:ee:d5:20:a0:a7:5d:d2:f4:cb:04:a5:7f:
                    9a:72:2f:33:63:91:bf:85:ae:0e:a4:38:3d:1d:16:
                    11:8f:f1:55:68:ff:80:8f:80:31:33:af:0c:0d:64:
                    22:fb:4d:f0:7f:3d:24:9d:84:16:07:e1:02:7d:9b:
                    d3:44:87:da:66:0a:e0:c9:a0:39:52:4b:ae:a3:34:
                    b2:67:dd:42:8d:79:db:c3:c2:57:79:1e:a0:59:a8:
                    5f:b5:ee:d8:88:32:38:b3:ec:1b:82:d5:e8:ef:0a:
                    d9:e4:01:75:20:f1:e3:43:27:c3:91:82:b4:e5:d6:
                    45:08:9b:08:60:5c:19:2e:a5:59:08:0e:7d:9b:18:
                    58:b5:21:85:9e:67:73:e8:c6:0b:4b:02:9e:7c:94:
                    0a:a4:7b:8c:04:69:4e:42:b5:d6:fe:1c:35:f0:c0:
                    e1:3b:c1:e2:89:ff:6f:99:f2:89:f4:db:5a:37:9d:
                    3f:0e:28:e7:b4:da:4e:0b:48:d5:ab:32:f5:47:24:
                    c6:d6:87:1a:06:17:b6:66:68:7f:62:f9:3e:76:8d:
                    14:2c:71:eb:ac:a0:b0:de:fc:ed:a1:67:d7:1a:d8:
                    de:06:71:3c:ba:3f:a3:16:3c:74:b4:85:62:17:93:
                    aa:28:4b:89:5a:95:02:24:55:d8:14:8c:c4:2b:9b:
                    04:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7E:BC:93:0D:A3:A2:48:88:4F:1A:24:22:91:B4:92:D7:23:D7:3C:41
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/6b03e940-c8f9-3a39-90c5-b6e2a6367e34.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.68.126.31/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4b:71:3a:b3:3a:ca:5e:8e:0b:d4:e1:9b:fe:f9:f6:b5:14:95:
         96:98:1c:f7:06:85:7e:b4:5c:33:c8:d6:3f:cf:91:e5:6a:4f:
         92:69:ec:29:be:a7:8d:cf:9a:c5:93:20:70:e6:d2:e4:a1:b1:
         5e:5a:67:90:6f:77:36:64:27:b5:a8:05:8e:22:da:b9:8e:55:
         2a:bd:f5:a4:36:7b:fa:48:55:7c:12:c0:f8:ae:14:3f:27:19:
         43:fe:c1:14:bc:72:ea:c0:02:7d:46:c5:0e:58:77:1e:fc:77:
         31:31:19:59:8c:e4:da:28:42:64:77:fd:14:f1:e4:2a:be:9a:
         24:5a:c9:9d:4f:f1:8d:dd:d6:3f:1e:1b:cb:be:51:d8:8b:8a:
         4f:6c:27:64:24:ec:b1:d4:13:55:6f:66:9d:94:0e:c3:59:a0:
         10:0b:96:b1:81:03:e4:1d:a5:1b:11:8e:fa:6f:a1:bf:d7:91:
         0a:82:d0:11:e6:b3:9d:98:9d:b7:b7:93:c4:b2:64:b5:9d:36:
         9a:fb:dd:5c:a6:9e:ca:72:68:b5:f7:76:96:a6:0b:a9:c4:de:
         f2:96:20:07:97:2d:d2:7a:40:a2:10:72:b4:b3:87:5e:0e:ae:
         29:0a:d6:41:72:d1:4d:a5:f6:c0:23:a1:2a:49:6f:05:02:aa:
         3c:d7:70:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 15:27:50 2026 by rpki-client