Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/b79986c5-242c-3149-8daa-5d96180c5e73.roa
File:                     b79986c5-242c-3149-8daa-5d96180c5e73.roa (raw, json)
Hash identifier:          IicQ2I6fnDGxdu+Sx8TCOcKAHZuMfU1MwKy9UHJBvP8=
Subject key identifier:   31:F4:92:52:84:72:F1:67:2D:C0:86:49:F8:FE:FD:17:C1:92:06:DD
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584D9A4B8DB5CE5101F61F516FE0
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/b79986c5-242c-3149-8daa-5d96180c5e73.roa
Signing time:             Thu 23 Apr 2026 14:28:18 +0000
ROA not before:           Thu 23 Apr 2026 14:28:18 +0000
ROA not after:            Wed 22 Jul 2026 14:28:18 +0000
asID:                     396572
IP address blocks:        192.42.177.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 15 May 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:9a:4b:8d:b5:ce:51:01:f6:1f:51:6f:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Apr 23 14:28:18 2026 GMT
            Not After : Jul 22 14:28:18 2026 GMT
        Subject: CN=726ca1fa-da41-4d3c-ae36-693d8fb2f00e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:c3:ca:d1:3e:44:f6:11:53:2c:d4:e5:58:52:
                    d0:8e:2f:30:ca:cf:9b:46:a5:32:30:7c:d8:d5:e5:
                    02:03:b4:a0:5d:77:77:51:14:e7:d8:c4:3b:e3:3a:
                    5c:be:0a:a7:34:34:8c:da:ab:34:29:61:98:49:ec:
                    8f:4c:a0:b2:86:6b:00:fd:c3:67:5b:c0:70:e6:3f:
                    ca:e4:be:ed:4a:ad:2f:62:2d:08:39:51:91:d4:66:
                    be:19:70:34:59:3d:41:84:5c:0c:ba:25:76:2d:50:
                    87:70:7b:1c:b3:4d:2a:98:35:34:c6:cf:54:8a:e0:
                    d9:ab:a1:89:d9:ac:f5:05:92:81:3f:ef:4d:43:36:
                    a9:45:a2:34:cc:35:01:7e:ba:c5:f4:a1:34:24:64:
                    97:d5:0a:2c:64:24:a7:01:62:06:65:43:c0:3a:b2:
                    66:2a:31:02:36:9d:36:2d:01:4d:d2:43:71:0d:84:
                    40:e8:57:85:99:72:63:55:3d:09:c2:b4:5c:7b:9c:
                    49:97:f2:93:e0:29:f8:7c:8a:c2:89:99:78:05:8f:
                    47:b2:24:b0:b9:03:2f:ef:5b:28:20:4e:91:73:df:
                    d5:d8:c3:0f:97:d4:27:5f:65:7c:a8:47:b5:90:57:
                    5f:86:02:bc:97:c4:85:9c:e4:75:74:58:6b:89:13:
                    7a:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                31:F4:92:52:84:72:F1:67:2D:C0:86:49:F8:FE:FD:17:C1:92:06:DD
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/b79986c5-242c-3149-8daa-5d96180c5e73.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.42.177.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0c:02:90:1f:53:62:8b:4b:b5:fe:35:f2:90:aa:57:31:ca:7c:
         c2:77:21:d3:77:39:36:9e:4c:40:70:8f:72:0e:f1:76:d0:45:
         65:5c:32:ea:97:05:ec:9d:07:91:12:89:8f:fd:ac:0c:b4:fb:
         d7:09:a5:c5:fc:87:19:e4:94:34:de:bc:62:68:3c:3e:8a:af:
         78:03:f2:56:8a:08:ff:7f:6f:8e:05:0f:cf:76:3f:38:a6:1d:
         45:41:fe:00:21:dd:75:d2:25:3a:36:80:ba:d5:4a:3a:ad:c3:
         91:2d:5d:d7:c0:73:2c:47:85:90:78:65:31:67:f8:17:52:5a:
         ef:cc:50:c0:8b:6c:83:12:2c:4f:73:51:d7:48:b2:80:4a:18:
         70:26:92:e8:15:bc:eb:f1:f7:3b:07:71:98:c3:36:47:f3:d4:
         b5:02:43:ff:f0:d8:6e:74:37:9c:55:0b:16:f6:8e:6c:9c:31:
         04:45:09:7d:62:0b:da:2c:cf:10:a4:64:62:13:94:45:e1:32:
         88:21:65:1c:6e:d3:75:e5:28:d7:b9:36:85:1e:1b:3e:d8:1f:
         d4:8e:72:1d:8f:75:1a:ac:0a:d2:32:c9:3d:a3:45:e6:b4:25:
         95:0e:61:04:7d:9a:be:b1:77:3f:d5:75:6a:fa:60:28:e5:7d:
         43:7b:51:a2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 08:45:19 2026 by rpki-client