Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/79979c43-17d4-3319-9b66-378e95047f31.roa
File:                     79979c43-17d4-3319-9b66-378e95047f31.roa (raw, json)
Hash identifier:          MEJyrJnzCKwv7ChsUk7a6nDqzCighqmWhLBSNgDwc9A=
Subject key identifier:   87:D8:57:C5:82:16:AA:BC:52:CC:F0:3E:D0:3F:0F:C1:93:35:E2:84
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584D3E001212B5D3B0E0CC685A80
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/79979c43-17d4-3319-9b66-378e95047f31.roa
Signing time:             Sat 21 Mar 2026 13:00:39 +0000
ROA not before:           Sat 21 Mar 2026 13:00:39 +0000
ROA not after:            Fri 19 Jun 2026 13:00:39 +0000
asID:                     396706
IP address blocks:        192.58.128.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 28 Mar 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:3e:00:12:12:b5:d3:b0:e0:cc:68:5a:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Mar 21 13:00:39 2026 GMT
            Not After : Jun 19 13:00:39 2026 GMT
        Subject: CN=2bcc8ddb-ba00-411a-a0df-0c85ccdede42
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:80:e0:c7:05:ca:c5:ac:d6:1d:74:67:25:f6:1a:
                    52:37:be:b3:4c:ad:51:6e:29:a0:12:ae:e6:40:38:
                    19:a0:b5:49:d3:d2:bd:4a:78:ff:cc:97:bb:94:11:
                    5b:a9:8f:7d:75:e6:d3:07:fa:ca:ef:df:22:7f:e9:
                    e7:61:bc:a5:19:6a:84:a1:ed:63:b4:a3:1b:a4:fe:
                    96:a4:a1:8c:13:22:f0:87:97:40:7b:4e:8c:b7:ed:
                    ea:8d:b4:3e:e0:1a:17:75:6c:a7:ba:b6:4e:7f:93:
                    70:78:ca:04:c5:5b:27:13:5c:ba:a0:48:fc:d3:1e:
                    22:30:6a:b2:21:21:28:ef:61:4c:87:ad:22:1a:f8:
                    a5:fb:01:63:50:55:f6:69:11:9b:c7:14:d9:bc:0b:
                    00:83:98:c7:b2:75:da:d0:38:a2:43:88:97:ce:9e:
                    95:88:a9:7f:8b:d5:d9:56:cb:97:7e:81:1c:ce:33:
                    81:7f:88:78:26:cc:1f:d4:7c:d5:97:a3:93:93:18:
                    88:c8:f4:33:1f:eb:35:de:82:f7:aa:88:f1:37:22:
                    95:88:94:4a:92:b8:08:c6:4d:3f:ed:ed:56:b8:24:
                    df:36:16:31:8e:47:b7:4c:15:04:3c:07:66:f5:e9:
                    13:13:da:af:0d:d1:1f:03:6c:3c:10:1b:de:24:4f:
                    38:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                87:D8:57:C5:82:16:AA:BC:52:CC:F0:3E:D0:3F:0F:C1:93:35:E2:84
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/79979c43-17d4-3319-9b66-378e95047f31.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.58.128.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         40:2c:7e:a7:96:ca:a9:23:1f:70:36:6c:0e:2b:d7:27:ef:09:
         1c:cb:67:76:88:69:de:b9:26:e1:f8:b1:4d:16:e2:88:9a:f5:
         c8:b5:d1:0f:aa:0b:1f:ca:ee:ea:e9:72:82:b4:da:4a:d3:ae:
         d9:77:da:b5:02:4d:92:98:e2:85:4c:27:d9:05:7e:8b:9d:8c:
         05:6d:dd:3a:a0:66:ac:88:b3:0e:4e:eb:fd:44:9e:ea:dc:22:
         34:b8:88:af:c2:98:3c:91:ad:9f:b6:6e:f7:1b:42:32:48:96:
         46:7e:a0:5a:fe:6a:2b:6c:83:e2:80:73:b7:87:c5:b6:c0:f9:
         0e:4b:7f:40:7a:c8:cc:a3:c5:7f:16:7b:99:b3:da:6f:92:49:
         a5:8b:d9:4d:8c:c4:a5:7f:bd:5e:b1:e1:ad:2f:b5:ee:95:6e:
         46:5d:dc:67:0a:87:ab:8f:8c:39:f4:ad:57:8a:cb:6f:51:43:
         3d:5a:38:e0:74:3e:05:19:45:5d:f8:15:3e:ed:26:e3:5c:7d:
         ac:62:57:bc:10:06:88:fd:b2:29:20:01:09:01:6a:f8:30:a3:
         9e:40:6f:0f:21:a9:36:96:d3:f8:e4:f4:99:b9:f3:97:0a:6b:
         ab:f0:a6:e1:29:b1:8d:6c:70:6f:00:4b:7a:2f:03:96:49:18:
         61:45:75:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 17:10:06 2026 by rpki-client