Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/9a72f1cb-004a-3f77-af2e-3df1f2069204.roa
File:                     9a72f1cb-004a-3f77-af2e-3df1f2069204.roa (raw, json)
Hash identifier:          u0KcZ78MN5bYeIq5VF5xMPRiBkGYPT/wNXQBr8D5m3U=
Subject key identifier:   68:DB:BE:9E:45:C4:16:F4:90:63:27:D2:04:A0:A8:E5:29:B0:41:C2
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584D9A4B9159264E8DB2130433C0
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/9a72f1cb-004a-3f77-af2e-3df1f2069204.roa
Signing time:             Thu 23 Apr 2026 14:28:19 +0000
ROA not before:           Thu 23 Apr 2026 14:28:19 +0000
ROA not after:            Wed 22 Jul 2026 14:28:19 +0000
asID:                     396589
IP address blocks:        192.42.177.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 15 May 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:9a:4b:91:59:26:4e:8d:b2:13:04:33:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Apr 23 14:28:19 2026 GMT
            Not After : Jul 22 14:28:19 2026 GMT
        Subject: CN=843e5f06-bf6d-4297-b456-461271c39310
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:1a:63:34:d9:f6:a7:f6:07:07:39:54:bd:4c:
                    11:13:3c:78:62:d4:e5:73:a9:83:54:37:ee:f1:cb:
                    37:91:c9:7f:cc:58:1e:c6:1c:96:a3:5c:ff:fd:f6:
                    5c:86:4b:f4:39:df:09:ff:e7:f9:e6:30:b2:18:6a:
                    1d:02:86:ef:22:59:d2:fa:ba:c5:80:50:d5:25:9f:
                    10:45:aa:7d:78:77:58:77:46:2a:e7:e6:85:b3:7e:
                    a1:b0:31:c3:55:ea:8d:60:a3:0f:ec:b2:39:ff:c2:
                    bd:94:c4:21:69:37:5b:a5:3f:7d:f7:da:41:44:9c:
                    d7:2c:03:89:c1:66:97:eb:75:ca:98:25:25:72:e3:
                    af:8e:6f:a3:5a:c6:91:ac:2f:c9:88:75:71:4f:4d:
                    f8:26:60:b9:fe:1e:af:4c:11:af:55:1c:8d:13:3c:
                    0c:f9:e7:54:90:0c:bf:0b:2f:f1:94:21:75:8d:ba:
                    31:58:7f:e8:37:21:0f:d2:cf:b5:2d:e0:2b:e8:0d:
                    6a:a9:1f:c6:39:b6:d7:81:24:47:66:46:1f:55:9d:
                    74:bd:44:af:39:07:0b:0e:00:7c:de:a3:60:e3:9e:
                    12:fb:2b:a7:23:55:56:f2:cb:dd:c9:af:ed:40:ae:
                    38:d3:54:b2:b5:3e:a6:38:82:cc:6c:2a:09:ed:89:
                    36:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                68:DB:BE:9E:45:C4:16:F4:90:63:27:D2:04:A0:A8:E5:29:B0:41:C2
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/9a72f1cb-004a-3f77-af2e-3df1f2069204.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.42.177.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         82:6b:a7:a5:fe:c8:ed:b7:56:33:20:93:ad:10:41:54:c3:1f:
         66:60:ba:4d:3f:aa:a1:d6:59:35:df:5e:23:3d:5f:cf:97:10:
         bf:e5:41:4a:27:75:a2:7a:c2:2d:0c:3a:07:61:0e:b4:ee:d4:
         48:5a:65:bf:28:ee:a2:27:6c:74:59:f0:2a:31:c3:b4:1d:da:
         f0:a5:17:92:6e:80:58:66:2a:58:ac:05:43:b5:a5:a1:8e:b9:
         82:a6:3c:71:22:5f:c8:5d:db:d9:76:f8:a3:81:71:ee:ce:63:
         11:d6:bb:5c:14:9f:a2:f8:92:9d:c1:7e:94:a8:9c:ce:69:84:
         51:93:d8:02:f9:c4:e7:7a:88:d9:dc:34:9c:ab:cb:84:86:26:
         7f:05:f4:33:e3:3c:46:18:5b:7c:b0:02:ab:86:59:42:31:ee:
         51:62:d5:17:10:dd:50:b7:8a:ac:f4:ca:89:5b:67:60:e8:1f:
         13:5c:6a:bb:b3:6b:ff:8c:39:67:e6:65:5d:18:ea:1c:23:0d:
         7d:80:eb:6f:18:7b:d9:01:50:1b:72:84:43:d2:94:7e:f5:63:
         e6:01:11:16:68:f1:df:47:4f:04:3c:9c:8f:93:38:54:c1:5e:
         6e:e0:a4:5a:23:95:47:a4:06:9c:ce:1d:71:09:88:7d:66:16:
         14:e4:b5:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 07:14:20 2026 by rpki-client