Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/7ebd2f38-57e1-3197-9e79-f75a0826a948.roa
File:                     7ebd2f38-57e1-3197-9e79-f75a0826a948.roa (raw, json)
Hash identifier:          ZzCJ/sSh5Wh0q2Bnl4k76dIP6h4LmIxjuhs4Wl//epc=
Subject key identifier:   D2:79:D6:CB:21:13:30:28:9A:83:E2:0F:07:47:03:31:43:BA:51:C9
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584DAAE04CBF07C519FC8BFF9600
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/7ebd2f38-57e1-3197-9e79-f75a0826a948.roa
Signing time:             Wed 29 Apr 2026 13:00:31 +0000
ROA not before:           Wed 29 Apr 2026 13:00:31 +0000
ROA not after:            Tue 28 Jul 2026 13:00:31 +0000
asID:                     396551
IP address blocks:        192.81.185.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 15 May 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:aa:e0:4c:bf:07:c5:19:fc:8b:ff:96:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Apr 29 13:00:31 2026 GMT
            Not After : Jul 28 13:00:31 2026 GMT
        Subject: CN=aa3531f4-36d4-4266-9a92-d6834fe95bbf
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:2e:a7:db:ad:ca:2e:87:32:70:a4:03:81:57:
                    55:d0:09:4d:b3:49:8c:81:92:68:66:73:2d:46:f4:
                    e2:e8:a8:0b:e7:ed:71:64:93:92:dc:1a:ca:fc:a0:
                    66:14:4f:48:0e:7a:4a:e1:b9:81:78:e4:af:f5:77:
                    37:03:ba:48:83:62:32:10:64:62:96:66:fb:92:03:
                    b2:0d:3b:02:95:e0:f0:df:e0:5a:be:cf:7d:c6:39:
                    e5:f1:1d:f6:5f:dd:d7:b0:4b:b2:b5:af:d9:0c:49:
                    ed:da:c1:92:e6:76:77:2a:38:02:cd:d0:5c:7d:82:
                    db:fb:68:16:7c:86:60:b2:16:33:aa:f9:7b:65:bf:
                    59:81:f3:b3:a4:8a:47:62:5f:73:61:24:c8:89:d6:
                    74:a4:b7:26:35:39:ea:31:13:5a:00:68:31:23:4c:
                    61:2c:70:8d:3c:c6:0f:d8:31:12:14:1d:ec:80:2f:
                    a7:38:d1:48:11:f8:6f:04:ac:ca:e0:76:1c:76:93:
                    37:b8:35:a4:92:e9:a5:cc:22:de:35:8a:34:59:fe:
                    4a:50:97:6f:38:31:b3:8d:5d:25:77:ec:7d:cb:96:
                    0f:95:41:93:d8:d9:f7:cb:b3:ba:bc:dc:9d:81:68:
                    e4:51:2b:d7:8a:e1:58:68:10:7c:60:23:0b:88:f7:
                    71:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D2:79:D6:CB:21:13:30:28:9A:83:E2:0F:07:47:03:31:43:BA:51:C9
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/7ebd2f38-57e1-3197-9e79-f75a0826a948.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.81.185.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         05:56:e8:37:66:7e:33:be:1b:15:16:5a:39:71:f6:86:7d:de:
         bf:a4:47:88:eb:e6:56:02:08:5e:cf:ec:8d:a3:8e:a6:6f:1a:
         8e:8d:ce:50:a1:72:d0:b8:76:0d:e1:33:1d:fd:d8:98:6a:53:
         cd:51:d9:1e:30:78:f8:d8:e4:d0:7e:e4:82:60:d5:e5:c4:1e:
         b3:bb:01:fd:3c:ed:9f:6f:8d:67:42:33:3c:04:8e:ca:08:12:
         44:ef:5f:54:6f:c2:75:b4:ad:6b:4a:38:2a:86:93:17:08:f7:
         48:1d:b2:0c:78:7e:77:b4:ca:f9:4c:36:de:65:cf:5b:56:a5:
         5f:96:04:5e:a0:fa:76:9d:55:db:fb:fa:83:d0:06:2d:7b:b8:
         63:6e:9b:88:c7:90:ad:eb:c8:bd:25:fd:20:08:ef:01:e3:12:
         d7:bd:bc:bd:54:ec:28:a8:23:f2:08:5e:f2:92:a5:b9:6c:1e:
         94:dd:86:59:b8:b2:78:dd:40:15:0d:b0:ab:3b:38:a9:59:b5:
         51:e5:3e:7f:ab:09:d3:d1:25:09:63:89:4e:12:59:1d:54:4f:
         0d:5e:eb:84:7c:99:23:6c:c8:26:a1:53:6b:cb:c9:55:bb:79:
         6e:6b:ed:06:e9:27:17:6b:14:30:93:31:f8:23:fc:3e:48:db:
         b9:c2:f5:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 19:07:22 2026 by rpki-client