Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/a8c0246b-6f5e-3d5c-bedd-4c56f10f2ca3.roa
File:                     a8c0246b-6f5e-3d5c-bedd-4c56f10f2ca3.roa (raw, json)
Hash identifier:          NLhflxc1GCoNvMb3h1Oja7LSvFp/Y4WinP/ivRr7U14=
Subject key identifier:   E0:CA:98:F9:12:35:9C:8C:40:19:40:90:F6:0D:9B:46:4E:C7:2B:94
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584D46B114A4EBC30DABBA711D80
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/a8c0246b-6f5e-3d5c-bedd-4c56f10f2ca3.roa
Signing time:             Tue 24 Mar 2026 15:44:57 +0000
ROA not before:           Tue 24 Mar 2026 15:44:57 +0000
ROA not after:            Mon 22 Jun 2026 15:44:57 +0000
asID:                     32651
IP address blocks:        192.42.174.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 28 Mar 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:46:b1:14:a4:eb:c3:0d:ab:ba:71:1d:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Mar 24 15:44:57 2026 GMT
            Not After : Jun 22 15:44:57 2026 GMT
        Subject: CN=83ab4c8d-0016-4783-9bd0-61754687624f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:4f:be:43:44:9f:dd:38:62:4b:5f:4a:ad:a7:
                    12:16:84:a8:74:94:ff:bb:79:3d:c5:cf:8e:97:08:
                    3c:3a:83:e0:ae:91:1f:fb:17:25:af:c6:37:94:22:
                    5f:b2:c9:6e:a5:88:ff:a9:97:61:68:6f:a0:3e:7a:
                    da:89:b1:8c:c2:83:16:85:77:96:2b:b5:0b:74:bf:
                    9f:74:50:ca:d3:5a:a3:91:a1:6a:61:75:22:b3:12:
                    ea:e1:8e:ae:3c:48:3b:a0:00:69:c4:00:5e:10:51:
                    7d:23:90:a8:b8:d0:45:0a:aa:64:cd:ad:75:fd:6d:
                    3a:8b:05:83:0a:ef:d1:6f:4f:be:e5:92:e8:d5:c9:
                    a7:b3:1a:4a:85:2b:e0:ca:e3:ec:29:9c:41:56:53:
                    87:c1:ce:9a:a4:3d:af:65:9a:9f:f5:57:c4:29:11:
                    82:e3:9a:7d:3a:86:4e:85:90:d1:ff:3c:05:ca:bc:
                    1a:a7:bf:14:2d:e0:30:d8:af:78:e1:f0:08:11:a8:
                    53:52:67:71:9b:29:32:bb:7e:5f:1f:7b:49:4f:fc:
                    38:e8:c1:13:08:ec:c5:ac:51:35:a1:2c:20:4a:64:
                    f6:25:a7:ad:40:4e:47:04:1e:ec:33:91:0d:77:f6:
                    d4:b2:04:f1:a2:85:d4:c1:96:ff:f2:42:bd:86:d6:
                    f2:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E0:CA:98:F9:12:35:9C:8C:40:19:40:90:F6:0D:9B:46:4E:C7:2B:94
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/a8c0246b-6f5e-3d5c-bedd-4c56f10f2ca3.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.42.174.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         54:91:6a:ba:1f:86:7d:22:ee:ac:55:8f:2b:2d:cd:24:ac:40:
         f1:98:cd:a6:cb:b5:9b:e1:15:9d:f2:3e:53:46:65:7a:60:93:
         98:65:ef:29:40:01:ba:4b:41:aa:3e:da:ce:35:45:ab:38:e0:
         d7:cd:aa:f6:c0:39:99:d5:71:33:35:60:1d:7d:98:e9:34:0f:
         33:ed:6c:56:b3:7b:9f:1a:c3:a2:64:e0:3b:34:d0:58:a6:6d:
         d8:ce:cf:1f:d2:94:70:7a:28:bd:24:40:ee:a5:c5:bb:e1:07:
         58:f3:1a:a3:be:13:64:23:f1:e9:0b:da:82:98:96:51:aa:73:
         c3:5c:27:1c:21:7d:e5:09:d0:98:bd:53:e3:57:c4:5f:14:0e:
         e8:db:3f:d9:8b:53:49:96:8d:ef:61:fc:09:f5:3a:2d:11:43:
         b5:5b:86:e1:ae:23:54:7d:ca:90:67:d1:38:67:9a:d9:01:0c:
         8b:77:42:25:d3:49:25:30:fe:91:8c:4f:c6:9a:c7:fa:09:36:
         72:9d:6e:00:01:2c:9f:c2:8a:15:50:4f:24:01:42:27:d9:bd:
         7d:08:76:fb:9c:a6:92:f9:37:28:c8:79:f6:61:ba:a0:b6:42:
         f3:4b:9c:4c:d1:8f:2a:0b:2d:d9:92:20:ed:dd:cc:ac:e7:be:
         a6:38:66:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 14:01:14 2026 by rpki-client