Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/a8c81b7f-f82c-37fe-bd97-0de85b4eafef.roa
File:                     a8c81b7f-f82c-37fe-bd97-0de85b4eafef.roa (raw, json)
Hash identifier:          eQowMV/z91EE4+d3vXyQFNnY0SRg7wPCFHzvQRt1dvc=
Subject key identifier:   91:FF:44:1E:62:AF:9E:F9:39:EB:A9:05:39:05:FF:CF:6B:38:17:F7
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584D300A29BF585F144C0705B7C0
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/a8c81b7f-f82c-37fe-bd97-0de85b4eafef.roa
Signing time:             Mon 16 Mar 2026 13:00:40 +0000
ROA not before:           Mon 16 Mar 2026 13:00:40 +0000
ROA not after:            Sun 14 Jun 2026 13:00:40 +0000
asID:                     396604
IP address blocks:        192.68.126.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 28 Mar 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:30:0a:29:bf:58:5f:14:4c:07:05:b7:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Mar 16 13:00:40 2026 GMT
            Not After : Jun 14 13:00:40 2026 GMT
        Subject: CN=fd7cdbfe-c20e-4e22-bce0-ff9e60681203
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e7:d6:5f:6c:f8:ea:3b:47:74:a8:21:b3:f3:8b:
                    bd:27:fd:6f:ce:00:97:c0:46:83:7b:f2:48:a0:5d:
                    e8:61:09:61:45:a2:49:1b:d3:80:84:3b:1e:eb:30:
                    22:8b:28:ea:b2:f3:c2:1f:e4:19:c9:08:3b:05:be:
                    7e:f5:41:d8:fa:9a:0b:e3:f4:82:ed:d0:67:17:44:
                    23:54:c7:a0:bf:1b:88:01:03:f6:f7:c5:5f:34:1b:
                    a9:d5:50:b0:48:0c:4a:fd:f5:8c:db:ca:c0:a6:a9:
                    fa:db:43:b3:a9:12:4f:a7:38:7b:8e:5b:d6:db:f1:
                    cb:ab:2c:bb:bb:6f:7c:f8:46:8c:20:47:5e:a1:f2:
                    e9:e5:31:19:8e:6d:99:9d:19:d6:12:2e:98:51:89:
                    1d:30:5c:5a:8b:12:72:dc:ab:e2:37:58:13:26:15:
                    d0:fe:cf:0e:d9:e6:b9:c6:36:5e:ab:8c:a6:61:c0:
                    a0:47:1f:a3:70:c4:f6:9b:18:1d:38:ed:c4:1c:ec:
                    3a:f8:97:30:91:c1:54:9a:4c:d8:06:59:f7:85:8f:
                    90:86:42:50:a2:05:c5:54:22:c1:06:d3:bf:82:79:
                    c1:bd:76:78:88:fb:23:ff:72:69:6b:bc:40:94:55:
                    d8:d9:d1:07:e0:34:10:9c:6c:27:c1:9a:a4:16:9a:
                    48:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                91:FF:44:1E:62:AF:9E:F9:39:EB:A9:05:39:05:FF:CF:6B:38:17:F7
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/a8c81b7f-f82c-37fe-bd97-0de85b4eafef.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.68.126.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         16:66:e9:d8:89:2f:e7:fe:b7:b0:dc:18:4e:3b:59:57:3b:3a:
         51:dc:f7:b8:9b:0f:f8:4e:03:d7:90:1e:d0:2a:c1:20:0b:03:
         d1:f4:01:11:3f:3b:9d:86:f0:1e:e7:c8:03:de:4b:50:71:55:
         56:d2:63:d7:48:5d:1d:48:3e:0c:50:b9:01:08:b5:2b:a2:79:
         fb:f3:ea:76:f8:06:34:a1:55:57:0a:4c:90:f3:14:45:2b:40:
         4f:e8:68:5d:18:eb:b3:20:73:c6:a9:c8:ec:f8:56:b4:a7:ea:
         16:57:37:14:f9:04:b0:43:7f:31:35:58:89:37:0c:a6:80:31:
         0b:74:ce:95:37:51:d9:59:69:06:ee:68:7a:e4:76:48:a4:9d:
         6c:69:4f:30:41:65:04:70:46:39:39:13:e9:b3:0e:32:0b:1f:
         18:0c:79:3f:db:49:81:13:82:ec:7c:6e:20:1b:8e:cd:b7:d0:
         89:6c:91:05:4b:2f:7a:54:b6:05:85:19:b9:d2:57:44:08:f8:
         d8:b0:58:40:88:d4:aa:3c:57:aa:96:61:28:72:33:a0:6d:75:
         27:40:a8:97:da:5e:2d:7c:41:6e:f2:d7:57:8a:1f:c3:aa:39:
         ad:54:ab:6e:01:92:13:be:32:5a:55:b1:e0:ee:d7:8a:c4:13:
         26:21:9a:bb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 10:54:22 2026 by rpki-client