Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/8b4a201e-b0b5-352b-9e05-ced1e601fe35.roa
File:                     8b4a201e-b0b5-352b-9e05-ced1e601fe35.roa (raw, json)
Hash identifier:          8PnVuH6mNZHSi8DNyqgsb1GEWYoCpi6lMUNJy/gX8Jk=
Subject key identifier:   68:68:C9:CA:88:52:35:EE:74:DA:6F:5B:3D:9F:E0:0F:69:C8:1A:45
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584E8C8A4DF7DE651F1459CA2680
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/8b4a201e-b0b5-352b-9e05-ced1e601fe35.roa
Signing time:             Sun 19 Jul 2026 09:00:11 +0000
ROA not before:           Sun 19 Jul 2026 09:00:11 +0000
ROA not after:            Sat 17 Oct 2026 09:00:11 +0000
asID:                     0
IP address blocks:        192.68.129.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 26 Jul 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:8c:8a:4d:f7:de:65:1f:14:59:ca:26:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Jul 19 09:00:11 2026 GMT
            Not After : Oct 17 09:00:11 2026 GMT
        Subject: CN=a408015b-0978-498e-9ef5-4c4942334f24
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:81:4d:41:e3:5b:0c:53:6e:24:9a:28:8e:ad:33:
                    79:97:9d:ea:d7:11:39:30:9b:32:99:16:a1:26:41:
                    a1:fd:e7:03:d9:cd:46:82:f9:5a:15:39:cd:09:e7:
                    ec:74:cf:46:dc:96:95:4b:89:60:1c:91:3a:17:4c:
                    3b:9c:dd:e0:2e:79:d7:11:50:0d:fa:85:b9:69:86:
                    78:e5:9f:68:ce:b3:04:b1:46:7b:d8:32:31:90:f5:
                    33:88:56:aa:78:dd:da:23:f5:c4:a3:b0:ba:83:44:
                    2d:40:6e:be:ed:5a:2b:40:ca:7c:c1:9c:72:cd:da:
                    87:f6:3c:a5:cb:4e:53:8f:43:97:23:7e:e3:8d:9e:
                    13:09:06:4b:c7:77:83:7b:f0:ea:cc:4e:7a:e6:57:
                    90:e1:04:8e:c4:3a:e4:fa:88:d2:1f:9c:6f:48:1c:
                    64:30:d0:5c:99:70:1b:f7:34:06:2c:ba:90:4a:26:
                    39:04:fc:01:c1:52:ec:a0:a4:c9:b5:a9:31:62:e1:
                    ad:13:4c:c2:f1:21:c1:ab:d3:e4:60:e3:fe:a7:44:
                    cf:cc:4d:3b:25:26:12:d6:51:af:31:9f:7f:f1:e9:
                    e4:86:23:47:25:2a:2e:4d:11:54:be:fc:d9:26:59:
                    3c:d7:f7:20:52:c1:db:d6:99:b5:8e:7e:a0:42:e8:
                    d5:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                68:68:C9:CA:88:52:35:EE:74:DA:6F:5B:3D:9F:E0:0F:69:C8:1A:45
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/8b4a201e-b0b5-352b-9e05-ced1e601fe35.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.68.129.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         60:2a:83:0c:fc:01:69:80:a4:77:9c:b9:b3:f4:97:65:b0:00:
         74:ab:f3:b8:20:a6:49:63:e0:0b:c8:c1:4b:72:99:55:4d:f3:
         6d:f2:14:bb:50:c4:9a:1e:95:e0:fd:d8:c8:26:ff:2d:cf:e0:
         77:82:3d:5a:6e:b9:17:71:fe:79:2d:17:8c:28:1b:fc:a8:3a:
         2f:59:10:85:75:c1:f2:80:91:fd:01:1a:d7:ea:d5:c8:21:94:
         a3:3d:63:4f:86:1c:6a:9f:75:64:64:1d:80:33:ba:c5:cf:b6:
         29:b6:71:77:52:4d:73:f5:8c:5b:71:3d:bd:1f:b1:53:55:60:
         39:29:bc:95:7f:6e:05:52:31:29:c5:67:67:23:9c:a0:5b:e2:
         94:7c:ad:fd:61:13:b1:ad:52:34:ac:30:68:9f:18:ef:ba:52:
         65:d5:9a:17:fd:34:f5:64:cf:68:94:e8:e1:d0:37:8a:2d:f5:
         f5:ce:8e:42:78:65:cc:c0:6a:50:0a:0e:75:a9:d0:aa:ca:d1:
         47:af:15:87:8c:38:05:87:b6:f9:79:af:c5:45:4b:0b:4d:6f:
         16:3f:a3:e5:c9:e9:70:b2:ee:dc:3d:71:70:9e:ae:ac:38:22:
         d7:0a:40:e6:45:30:18:23:7c:7b:ee:03:2d:80:d4:b6:15:40:
         f3:8a:2d:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 09:32:28 2026 by rpki-client