Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/a71dfc56-ac0b-3abd-be1d-82ef4fd04419.roa
File:                     a71dfc56-ac0b-3abd-be1d-82ef4fd04419.roa (raw, json)
Hash identifier:          nzdxcNFdgEfmPmFldjKuQ+1GVR7/3r06T5cJKwuwyT4=
Subject key identifier:   4F:A2:F0:FD:37:16:6A:0C:75:62:0E:BA:20:2C:AE:13:3A:C2:C3:B8
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584D9E501FE378B1B2E4C2FD9F80
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/a71dfc56-ac0b-3abd-be1d-82ef4fd04419.roa
Signing time:             Sat 25 Apr 2026 01:00:24 +0000
ROA not before:           Sat 25 Apr 2026 01:00:24 +0000
ROA not after:            Fri 24 Jul 2026 01:00:24 +0000
asID:                     7342
IP address blocks:        209.131.188.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 15 May 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:9e:50:1f:e3:78:b1:b2:e4:c2:fd:9f:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Apr 25 01:00:24 2026 GMT
            Not After : Jul 24 01:00:24 2026 GMT
        Subject: CN=47ebb095-0d81-482f-a415-e332c41c5b67
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:fa:c8:51:9c:d2:37:9d:41:0c:d9:a9:2d:9c:69:
                    d8:8e:4a:f9:c0:4f:45:cc:91:98:a9:93:59:0e:1f:
                    d2:8b:9f:2a:e8:d3:d0:66:3f:21:ee:53:52:1c:c9:
                    a1:fa:16:bd:1c:40:16:e6:cf:5d:7f:ce:bf:c5:3a:
                    19:52:1b:f9:a6:76:2a:38:6b:be:f7:db:aa:35:94:
                    5b:03:db:93:fd:71:66:25:0e:72:fa:30:48:ab:5c:
                    9a:a9:aa:3b:91:6d:c7:be:16:83:b2:35:4b:56:09:
                    f2:62:fb:89:bc:bc:e6:76:f5:93:2e:36:be:9b:98:
                    be:60:1a:0a:4d:fa:1f:a0:e3:76:ec:6d:72:a6:91:
                    7e:60:54:71:00:8e:3f:06:8a:92:ea:f0:bf:bd:09:
                    39:86:5a:ee:b3:60:cb:c3:3c:0f:1e:b5:af:ef:40:
                    eb:b1:20:f8:e0:d7:e8:42:81:92:25:af:72:cd:17:
                    26:8c:a4:b9:79:14:21:ac:fa:32:23:58:35:c7:42:
                    7f:fa:31:03:e0:9e:3c:62:c9:84:01:e8:38:38:28:
                    22:79:bc:32:06:22:a3:f2:3c:28:cf:ea:b4:c4:45:
                    33:1f:3c:5a:7c:2e:d1:e1:11:a6:7f:5a:65:34:ae:
                    af:aa:68:29:66:54:ab:a9:e3:7a:d5:55:14:92:5a:
                    46:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4F:A2:F0:FD:37:16:6A:0C:75:62:0E:BA:20:2C:AE:13:3A:C2:C3:B8
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/a71dfc56-ac0b-3abd-be1d-82ef4fd04419.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  209.131.188.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1f:53:39:20:65:a9:7e:52:e6:f5:7e:68:07:a1:e7:33:7a:aa:
         be:88:7a:2c:3c:9e:ed:8e:da:35:ef:7c:bf:05:be:f8:d8:74:
         df:52:df:98:00:b5:a0:e3:14:a6:11:d4:a4:ee:b2:da:7c:33:
         87:78:3c:e3:88:8c:2b:c2:45:e9:88:3e:06:7b:48:9d:7b:87:
         3d:f5:b6:80:a5:26:fd:7b:71:a7:cc:80:fb:41:37:8d:97:f9:
         18:8f:d2:0a:98:fb:5b:7a:d9:08:43:a6:a1:fd:63:f3:01:92:
         46:b9:07:e2:f4:2e:39:d5:56:da:97:62:da:96:cf:cb:1b:af:
         64:22:7f:8e:6c:3c:f0:38:ab:84:92:90:6c:56:d0:45:89:f4:
         37:f6:a5:34:be:8b:c2:d4:9b:33:15:8f:b3:b4:18:f6:90:e0:
         be:50:c1:e4:a4:72:10:da:3c:46:e4:d2:cb:0c:6e:55:be:24:
         e5:2f:09:7d:50:04:6f:55:cd:dd:1a:9a:12:6a:06:f1:b2:76:
         3f:bf:74:44:e5:5b:7a:57:78:58:b0:c1:ad:56:3e:a2:3c:93:
         ca:4f:75:03:01:3b:76:e5:39:8d:03:b4:0c:a3:fa:af:6a:ca:
         fe:a7:9f:ce:07:c2:93:ee:4f:46:9c:7c:28:33:c2:3e:eb:7b:
         10:92:ed:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 05:21:11 2026 by rpki-client