Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/9d8b8f11-87f1-3da0-bc81-4efeff19aac2.roa
File:                     9d8b8f11-87f1-3da0-bc81-4efeff19aac2.roa (raw, json)
Hash identifier:          tgaKVas020E4YaOyw6wKeDVPizJ0q77e6c+ZGU83qFQ=
Subject key identifier:   22:A7:C4:9F:79:15:0E:7C:1E:F8:8E:75:59:E9:C4:18:9D:71:21:D8
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584D3DFF89984BC8E1BE89CD0040
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/9d8b8f11-87f1-3da0-bc81-4efeff19aac2.roa
Signing time:             Sat 21 Mar 2026 13:00:39 +0000
ROA not before:           Sat 21 Mar 2026 13:00:39 +0000
ROA not after:            Fri 19 Jun 2026 13:00:39 +0000
asID:                     396727
IP address blocks:        192.58.128.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 28 Mar 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:3d:ff:89:98:4b:c8:e1:be:89:cd:00:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Mar 21 13:00:39 2026 GMT
            Not After : Jun 19 13:00:39 2026 GMT
        Subject: CN=40588852-02ff-4472-81d1-f6ed1caa075a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:2e:d1:54:e0:34:7f:a8:c6:97:a2:77:9c:ad:
                    30:80:11:72:8b:32:65:0f:41:46:5a:91:83:da:83:
                    c0:93:f2:ac:00:8a:e7:1f:d4:5c:f6:25:2c:de:8e:
                    2f:78:e1:59:59:c3:43:53:cf:a2:ce:51:e8:94:69:
                    55:0b:53:df:23:23:8b:b2:62:5b:8d:0e:66:ae:db:
                    e2:a3:d1:25:23:ff:c9:89:74:a4:19:f6:bd:1a:fa:
                    51:31:57:ff:6e:04:6a:73:cd:0d:f9:dd:b7:5b:0b:
                    2d:bc:8f:f4:91:f6:41:dc:1f:f9:41:b3:47:79:ce:
                    53:49:41:26:1d:8b:6a:19:6a:3a:b3:de:1f:90:25:
                    ec:7e:b8:d7:62:78:1c:59:86:17:84:ee:7f:a2:d4:
                    a0:8f:d1:6f:af:0f:35:bb:1e:20:7a:fb:37:80:aa:
                    2d:f0:91:39:75:99:f0:1c:7b:2a:95:b4:c4:f9:7e:
                    79:48:6e:11:dd:c2:e8:02:4c:39:60:e0:b2:51:c9:
                    29:b6:6b:db:e8:f8:29:8e:a7:89:b1:ac:9e:be:13:
                    2f:14:c3:82:f9:da:46:65:e2:a2:01:bf:96:e2:57:
                    d8:1c:77:d6:e4:62:fd:f1:89:92:6f:f7:1f:8a:bc:
                    02:0a:01:7f:8e:a7:e4:bd:1c:2e:1e:3a:70:65:53:
                    6e:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                22:A7:C4:9F:79:15:0E:7C:1E:F8:8E:75:59:E9:C4:18:9D:71:21:D8
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/9d8b8f11-87f1-3da0-bc81-4efeff19aac2.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.58.128.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         bd:74:bb:61:6a:ed:6c:76:19:f1:f7:09:83:0b:70:71:93:61:
         66:44:fe:0c:83:7c:47:20:b5:71:d7:3c:14:bb:b7:f7:61:93:
         67:21:2d:67:0b:76:f3:d8:5a:20:b4:40:98:58:a9:cc:3c:ad:
         08:23:81:7a:ea:bb:17:95:0f:79:aa:23:90:3a:0c:de:01:c7:
         ec:57:33:9d:3e:ea:15:af:77:06:44:57:b0:aa:02:33:55:66:
         9a:68:ce:88:ba:4c:c8:2b:d3:77:55:dd:6e:60:77:16:63:4d:
         6a:10:b5:db:af:d5:89:3d:3b:c8:0a:ac:d8:af:01:a2:09:85:
         07:6b:0c:2c:1d:88:ce:38:8b:f5:8f:c5:e2:9c:ba:7a:0b:9e:
         e4:26:4e:61:d9:a0:47:34:df:46:bd:be:b6:9d:de:69:dd:1f:
         aa:d0:03:6c:be:a0:ba:14:e8:8b:d0:29:79:5b:46:cf:6b:29:
         1a:17:6c:f8:ca:e7:8b:c2:e6:dc:7a:12:91:96:2a:35:6c:c6:
         a8:21:61:82:2b:9c:e7:57:56:6f:37:44:5a:d9:c2:d2:11:ea:
         73:08:03:54:4a:5d:59:50:67:c1:d6:70:d1:4f:1f:20:10:77:
         72:b0:3e:98:71:26:dd:a2:b1:bc:33:49:4b:59:0b:35:f7:3d:
         56:cb:ce:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 10:37:58 2026 by rpki-client