Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/a27d8876-7c29-30f8-9548-e0891b9636c8.roa
File:                     a27d8876-7c29-30f8-9548-e0891b9636c8.roa (raw, json)
Hash identifier:          nVOXW6rzxWKc0IRi79xBKMlcZG7tT4qp72MuqsRAgN0=
Subject key identifier:   F0:FE:A2:EE:9C:07:41:31:08:B8:36:58:BD:5D:96:EB:39:11:99:D2
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584D300A3EBB0B81BF2EB4BF0E40
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/a27d8876-7c29-30f8-9548-e0891b9636c8.roa
Signing time:             Mon 16 Mar 2026 13:00:40 +0000
ROA not before:           Mon 16 Mar 2026 13:00:40 +0000
ROA not after:            Sun 14 Jun 2026 13:00:40 +0000
asID:                     396584
IP address blocks:        192.68.126.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 28 Mar 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:30:0a:3e:bb:0b:81:bf:2e:b4:bf:0e:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Mar 16 13:00:40 2026 GMT
            Not After : Jun 14 13:00:40 2026 GMT
        Subject: CN=84afc8c7-55a2-4bbb-9604-f27ec6d32258
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:5e:32:11:18:2f:db:7e:e5:62:ae:c5:58:69:
                    57:3d:09:bc:ec:90:a3:a0:d0:8f:a0:2d:98:d2:68:
                    18:40:1a:39:1f:c0:5d:ff:54:59:85:fa:b3:35:2c:
                    86:ac:94:36:73:0a:46:4e:36:1d:bd:2f:f9:0f:a6:
                    55:e2:dc:57:7b:46:8d:3d:7d:62:e7:71:ea:f1:4d:
                    7c:6e:70:ad:92:5b:cf:4a:b7:d8:fd:bd:79:16:71:
                    00:b4:d9:30:79:d2:85:d2:4a:32:44:c6:45:6d:24:
                    72:e7:6a:7a:39:79:8d:cc:cf:8d:6d:2a:df:14:f9:
                    3e:e3:7d:70:ae:fb:16:b5:c3:a2:be:c4:b8:9d:91:
                    ff:05:28:b2:d1:85:99:b0:e9:8b:c2:45:4b:d0:e9:
                    0c:96:76:c6:12:69:60:9c:93:29:8b:e0:e0:53:70:
                    63:6e:c4:bd:ea:4f:1f:a5:d0:9e:de:5c:ef:25:7f:
                    cf:ad:f8:a6:f9:6f:fa:6c:69:47:f9:27:75:ee:53:
                    34:88:c7:09:2f:25:93:38:de:25:90:1b:de:cf:88:
                    b8:e1:b2:35:51:ee:a5:54:fa:d7:fa:bf:f1:3c:ed:
                    b5:49:c7:50:8e:22:ed:c6:b8:ac:d8:c1:6e:e2:2b:
                    a0:16:97:4d:dc:48:e6:8c:ac:2a:77:0d:7b:de:0b:
                    03:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F0:FE:A2:EE:9C:07:41:31:08:B8:36:58:BD:5D:96:EB:39:11:99:D2
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/a27d8876-7c29-30f8-9548-e0891b9636c8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.68.126.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         30:c4:4f:03:de:73:12:9c:f9:b4:08:9d:d8:af:30:3a:ee:78:
         a8:33:c3:3c:2e:da:92:6e:18:04:59:3a:2b:4a:58:a7:60:eb:
         49:72:90:f6:18:e8:45:ff:97:e9:48:0f:46:6a:9b:93:ab:c3:
         eb:d8:3c:c3:41:3e:b2:38:14:ff:aa:3b:f9:6b:24:42:5e:f7:
         45:ee:59:6d:c2:6a:82:f0:19:71:4d:28:9b:71:a4:93:18:f6:
         a7:34:9e:70:12:26:39:a0:ee:0f:ff:ea:6b:9b:38:cd:89:55:
         1e:1c:6b:84:96:10:63:db:50:10:74:e8:95:43:19:61:62:c5:
         fa:75:c6:d4:13:d0:66:02:41:f7:a5:7d:04:51:68:88:22:e0:
         0c:84:ca:0c:de:8a:4e:3c:90:d5:9f:f2:b7:98:47:fa:6d:fe:
         47:ae:e4:c3:ed:68:f7:4e:aa:9f:c2:2f:28:db:0e:5b:a1:ab:
         72:26:a4:c7:ab:4e:d3:ab:81:55:d2:a7:16:7f:64:4b:e9:e5:
         f9:10:6b:8b:e5:2a:83:b5:1a:54:e2:6b:88:58:47:ef:64:23:
         28:f2:b4:4c:40:e7:af:6f:1b:82:7e:32:38:a9:cd:b8:72:06:
         6c:30:fc:ae:7d:aa:72:60:8d:ce:63:d6:49:b1:54:b5:6c:db:
         4f:45:f4:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 13:55:25 2026 by rpki-client