Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/b270dfc9-f3f7-334d-84bd-da2799dc4bca.roa
File:                     b270dfc9-f3f7-334d-84bd-da2799dc4bca.roa (raw, json)
Hash identifier:          kIyW19Tgphe68HmJVuUjwmINOkYgK4TFG2IuzCMboS8=
Subject key identifier:   6A:49:04:60:D3:26:EA:D8:97:F9:02:E0:EB:CE:14:61:E9:16:75:9E
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584D46B119B25D03587876FEFE00
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/b270dfc9-f3f7-334d-84bd-da2799dc4bca.roa
Signing time:             Tue 24 Mar 2026 15:45:00 +0000
ROA not before:           Tue 24 Mar 2026 15:45:00 +0000
ROA not after:            Mon 22 Jun 2026 15:45:00 +0000
asID:                     396545
IP address blocks:        192.42.174.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 28 Mar 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:46:b1:19:b2:5d:03:58:78:76:fe:fe:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Mar 24 15:45:00 2026 GMT
            Not After : Jun 22 15:45:00 2026 GMT
        Subject: CN=15224117-58bb-49f8-a902-7cbe283cc01b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:6c:bb:0d:5c:67:6e:27:55:5e:e1:da:10:61:
                    a2:f4:16:eb:95:ab:84:99:94:28:a3:e2:a0:b3:65:
                    17:9e:bc:eb:15:f7:4f:fc:ba:b2:02:2f:d7:94:d8:
                    31:26:2d:16:16:bc:63:ea:31:b3:28:b6:37:51:95:
                    19:1d:36:fa:24:bf:3d:27:94:30:3f:19:83:f3:a3:
                    13:42:e2:53:14:d3:85:66:56:fa:c6:0a:5e:10:9f:
                    ec:e9:45:8e:f2:3a:3b:2f:1a:8f:17:71:81:70:cc:
                    d7:a1:81:85:27:df:83:14:af:55:f5:ca:64:a2:69:
                    5d:5e:be:c9:ef:b2:4f:84:b1:74:8c:ef:6d:9c:5b:
                    e3:cd:ab:d4:ae:c9:10:ab:67:02:64:55:f1:eb:f1:
                    a0:ff:df:c7:c5:f9:da:00:16:aa:a0:30:02:55:f9:
                    57:10:72:d3:f2:13:ed:da:b2:42:45:a1:4a:56:d3:
                    43:17:26:2d:0e:d2:d6:0d:4f:4d:6a:17:d0:1c:08:
                    d2:66:08:6c:36:c3:85:f6:af:be:56:c9:d4:ae:3e:
                    52:a5:f6:87:6e:75:a2:5d:c1:ba:6f:5c:2c:c7:ad:
                    01:99:5b:da:73:c6:32:df:00:f1:fe:f8:13:c1:62:
                    57:33:f1:e7:1d:2a:62:95:4a:ea:10:f7:b5:67:0f:
                    b4:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6A:49:04:60:D3:26:EA:D8:97:F9:02:E0:EB:CE:14:61:E9:16:75:9E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/b270dfc9-f3f7-334d-84bd-da2799dc4bca.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.42.174.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         9c:b6:7c:b0:1b:f1:22:09:d9:df:1c:9c:2a:d6:f5:16:37:9b:
         88:76:c3:80:b5:ee:a0:97:68:96:96:ba:ce:94:ae:90:3a:65:
         2e:f9:6a:eb:63:dc:a2:a5:77:11:15:b1:77:f0:e2:a3:cb:a0:
         54:7a:87:d5:cd:7f:ef:75:3c:ed:62:54:74:90:7a:96:22:d5:
         24:74:d8:cc:c4:13:f6:97:f6:6a:06:67:ea:d2:23:1c:74:9b:
         49:f5:a3:52:7a:25:6e:65:ce:73:da:20:7c:07:46:00:4b:cf:
         b1:93:92:25:32:89:6b:3b:85:a2:ff:d7:71:60:44:69:17:76:
         e7:a0:13:3a:68:a3:59:f7:31:80:09:3a:8f:dd:8d:f1:0f:b0:
         bf:d3:50:43:9f:49:6e:54:0f:13:23:e0:9c:2e:fc:ac:f0:3e:
         1c:b7:00:7f:6f:c4:57:77:cb:25:3b:92:6c:d1:11:74:ce:31:
         98:de:18:53:3c:85:63:e3:7a:c9:cb:7e:7a:0a:ae:d2:b4:09:
         ad:7a:07:e6:ce:ff:e9:4e:d8:e0:cc:7a:f8:31:cc:2c:34:63:
         4a:ed:89:db:89:b9:e9:87:90:7e:30:df:41:0d:f8:62:f7:44:
         00:bb:b8:34:ca:58:fc:77:b9:8f:dd:ad:b6:de:f4:e2:a0:3e:
         e9:6a:f1:b1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 08:38:32 2026 by rpki-client