Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/a932ca08-106a-31a9-bd8c-e0aa3063e8a7.roa
File:                     a932ca08-106a-31a9-bd8c-e0aa3063e8a7.roa (raw, json)
Hash identifier:          SeI9Xx5SxhDC0HdpfeOU55BqI8d/P5BNr8CwtLXOq9s=
Subject key identifier:   B7:4D:BF:E3:C8:41:A7:68:F5:4E:9F:8E:82:A2:1C:6F:7F:BD:29:2E
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584E8B250CCFCDEC16401B6E98E0
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/a932ca08-106a-31a9-bd8c-e0aa3063e8a7.roa
Signing time:             Sat 18 Jul 2026 21:00:11 +0000
ROA not before:           Sat 18 Jul 2026 21:00:11 +0000
ROA not after:            Fri 16 Oct 2026 21:00:11 +0000
asID:                     397208
IP address blocks:        192.81.185.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 26 Jul 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:8b:25:0c:cf:cd:ec:16:40:1b:6e:98:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Jul 18 21:00:11 2026 GMT
            Not After : Oct 16 21:00:11 2026 GMT
        Subject: CN=c758aa96-b859-4f95-a79a-8571eae2104d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:ad:07:ad:31:3c:44:99:48:e1:26:7e:da:f5:
                    6d:97:b1:42:90:34:b0:07:e8:36:0f:98:95:7b:2c:
                    6f:e3:72:8a:99:51:4a:07:7e:bf:47:86:e0:8b:03:
                    d0:4b:9a:ae:4d:aa:ea:ca:fd:9b:af:69:11:d5:11:
                    76:79:00:61:ea:41:f9:f6:b5:3c:c3:b1:31:04:ba:
                    78:79:48:11:88:3e:d2:40:1d:4f:da:d2:ee:78:ba:
                    1b:4f:76:d6:1e:87:05:d5:61:e9:d0:6c:b6:06:6b:
                    48:a4:d0:04:cd:2d:03:68:93:e7:b0:ab:5f:b7:6b:
                    55:b8:9d:d3:6a:2f:10:db:d6:f4:8e:5a:76:0a:44:
                    e9:ee:5f:b9:87:72:b2:bf:ce:41:4f:d1:96:e3:e5:
                    d2:2a:39:13:ab:4d:68:c2:ff:66:17:fc:9f:a7:47:
                    4f:de:aa:ae:ed:ed:6e:ac:04:08:4f:e1:f9:1d:c5:
                    55:41:d4:7c:bb:c0:f2:39:0d:dd:64:64:d0:f2:b1:
                    36:25:1e:c0:0a:5f:62:b9:58:92:12:0e:e0:3e:f8:
                    9c:5f:32:3a:80:e4:d0:cb:93:68:b7:10:26:b3:b8:
                    5f:c6:14:1e:07:7e:ff:78:8d:89:1b:9c:77:ea:75:
                    da:72:11:27:8c:8d:fa:e2:c1:a4:b1:eb:27:7d:28:
                    7c:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B7:4D:BF:E3:C8:41:A7:68:F5:4E:9F:8E:82:A2:1C:6F:7F:BD:29:2E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/a932ca08-106a-31a9-bd8c-e0aa3063e8a7.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.81.185.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         07:85:dc:87:2c:06:40:ee:81:65:57:fe:47:84:e6:15:82:6e:
         38:af:5d:68:1f:ee:7d:40:42:d9:39:99:ab:cd:c7:63:05:d6:
         5e:30:31:58:2b:85:cf:ce:47:f7:45:ba:d4:fa:a8:95:3a:e7:
         86:f5:68:b1:2e:a6:6c:61:46:cc:6f:ed:ce:e6:f1:a7:74:4d:
         de:36:9f:4f:9f:65:74:9c:16:60:05:ec:d6:d7:1b:75:74:e8:
         25:f9:39:fa:08:30:10:9b:7e:e3:10:c1:d9:84:cc:64:2f:63:
         9f:b5:7f:ed:e6:fa:aa:37:6c:14:6f:47:2d:4f:f8:c7:cc:87:
         33:24:21:dd:cd:6b:fa:76:e7:56:50:d5:c3:dd:61:51:2c:3c:
         a2:98:8e:93:2a:25:b5:19:f0:a3:77:f7:81:41:63:3e:2d:38:
         55:4e:02:9e:ee:9a:08:fc:90:5d:4c:49:d9:b2:ab:fa:aa:c8:
         72:27:64:18:22:69:63:6e:db:82:43:27:d7:79:c0:87:3f:14:
         c7:df:d0:3f:66:5c:f2:1d:b9:95:d2:b2:58:c5:ac:7d:c3:73:
         33:c9:81:30:0e:ec:67:56:71:2d:1d:01:4d:60:d7:82:d3:2f:
         7d:f4:44:71:6d:42:d8:9a:9e:2c:7d:60:3d:67:4c:a3:fb:cc:
         f4:fa:97:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 08:55:23 2026 by rpki-client