Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/aa0df9ff-e7e2-3abd-bc11-e7c70c3ff563.roa
File:                     aa0df9ff-e7e2-3abd-bc11-e7c70c3ff563.roa (raw, json)
Hash identifier:          0mp+tp170fWsNEHD/3/4d0ZsfZOjm0OaFpp5v44m8Ws=
Subject key identifier:   B0:0D:2C:96:55:01:20:C0:6E:18:AA:12:F6:68:55:78:AA:90:7A:5C
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584DBBC1EB68A9F02EE796E948C0
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/aa0df9ff-e7e2-3abd-bc11-e7c70c3ff563.roa
Signing time:             Tue 05 May 2026 14:08:28 +0000
ROA not before:           Tue 05 May 2026 14:08:28 +0000
ROA not after:            Mon 03 Aug 2026 14:08:28 +0000
asID:                     36622
IP address blocks:        192.5.6.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 15 May 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:bb:c1:eb:68:a9:f0:2e:e7:96:e9:48:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: May  5 14:08:28 2026 GMT
            Not After : Aug  3 14:08:28 2026 GMT
        Subject: CN=fb6fa9d6-b996-4b6a-a0b4-4cc81e5de8a3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:8c:0f:fd:b3:50:d7:55:76:89:12:fc:06:c7:
                    40:89:8c:53:26:93:9a:1a:e7:ac:1d:a6:49:d3:ab:
                    6e:de:e3:b0:d0:02:53:2a:90:2a:6d:43:fd:f1:9d:
                    17:84:67:3c:28:3b:42:34:41:e6:e1:0f:4c:e8:fa:
                    9b:fe:66:d4:6b:d8:46:fc:c8:b8:73:98:bf:d9:bf:
                    66:f8:a7:41:0c:e1:76:83:6b:ca:5e:1f:6d:66:d6:
                    5d:d9:a2:3f:cb:67:ee:cc:7a:9f:24:47:f0:d7:46:
                    ab:78:76:c2:a4:8c:3c:a0:b9:74:d3:86:a3:1f:51:
                    2d:50:62:cc:0a:1f:b1:f1:88:e3:21:d3:32:21:d1:
                    77:17:83:6a:cc:c6:b0:08:4e:41:42:44:d3:b4:7d:
                    9f:ea:e1:54:7f:06:01:ff:ab:59:b0:ad:ac:45:67:
                    71:d0:ed:89:6a:a1:15:38:e3:8f:d8:b3:57:19:0f:
                    17:75:c4:a4:76:6c:c6:f1:23:3a:3d:0b:ae:2c:13:
                    3e:02:bc:75:9d:d7:e5:77:f1:40:27:0f:47:80:78:
                    21:c5:cf:ad:e1:3f:c3:00:02:df:cd:e3:68:94:90:
                    14:62:ed:ea:2a:d7:73:7a:05:d3:67:7f:cc:94:d4:
                    8f:65:ba:06:4f:be:8b:e9:b0:d8:0d:18:89:5e:ed:
                    7a:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B0:0D:2C:96:55:01:20:C0:6E:18:AA:12:F6:68:55:78:AA:90:7A:5C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/aa0df9ff-e7e2-3abd-bc11-e7c70c3ff563.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.5.6.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         85:52:df:0b:b7:6a:74:1f:cd:cd:07:6b:b3:08:02:69:bf:af:
         b8:c7:91:63:70:3c:ce:d9:19:b9:f6:99:8b:a1:0c:ba:e5:db:
         d3:9b:c2:84:b4:fa:04:53:da:de:90:8c:a9:c9:65:9e:c1:f5:
         9b:1c:f2:44:a2:55:01:7c:e2:0d:1e:52:58:4b:96:08:02:04:
         f6:e8:8f:27:4e:b0:5a:c3:e0:8c:81:8b:59:b9:b1:94:fc:57:
         64:f0:19:32:f5:f7:0a:5d:e5:8b:d2:4d:49:4e:4f:a3:4d:df:
         99:c7:85:35:bb:cd:9f:46:4b:0d:50:a4:4f:d8:78:2d:b4:89:
         61:58:c9:8e:25:70:37:01:b9:c5:45:44:83:09:b1:a0:5b:50:
         56:f1:45:3b:00:cb:19:cd:9b:15:37:f9:8d:a2:0e:f3:5e:6e:
         65:fe:80:48:44:4c:a1:8a:4f:2c:02:37:29:6c:55:47:3d:09:
         f1:95:38:0c:b0:df:93:a9:e7:ae:3e:3f:e5:cd:dd:d4:cd:2c:
         3e:6f:78:2e:97:2e:2a:62:0c:84:1b:45:f2:9e:d9:4f:23:b1:
         c5:d1:e9:70:24:d2:f8:0a:2d:11:6a:2f:59:39:7a:7f:9a:41:
         f5:cd:2a:66:02:e5:c5:42:1c:79:1b:65:6b:0f:c8:20:c3:72:
         60:ed:66:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 02:38:20 2026 by rpki-client