Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/bc847a09-17a6-3bb6-b8c2-dc92a5354374.roa
File:                     bc847a09-17a6-3bb6-b8c2-dc92a5354374.roa (raw, json)
Hash identifier:          44cIYdKfB7sj2Gpn4ENKTRa2/6y2FXsMorqNPZimDY4=
Subject key identifier:   3D:A3:CD:0A:74:07:F4:D1:FC:00:88:76:42:C8:D9:99:5F:AF:2B:B6
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584E7A65019894D74D7A20BB6400
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/bc847a09-17a6-3bb6-b8c2-dc92a5354374.roa
Signing time:             Sun 12 Jul 2026 21:00:13 +0000
ROA not before:           Sun 12 Jul 2026 21:00:13 +0000
ROA not after:            Sat 10 Oct 2026 21:00:13 +0000
asID:                     397197
IP address blocks:        192.42.177.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 26 Jul 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:7a:65:01:98:94:d7:4d:7a:20:bb:64:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Jul 12 21:00:13 2026 GMT
            Not After : Oct 10 21:00:13 2026 GMT
        Subject: CN=b7b4024e-3fe8-4b7b-9a6d-a7f24c988ebb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:54:05:39:90:0c:6d:0b:7d:50:cc:66:e9:f4:
                    45:71:c0:54:8d:5d:d6:4c:e5:f2:dd:f4:4f:49:92:
                    26:da:6e:f8:de:74:14:23:d7:d8:20:bf:d6:20:7f:
                    cf:f4:f6:ed:9a:81:c5:03:da:7b:bb:4a:b5:47:3e:
                    81:7e:9b:e6:fe:bb:a1:b8:9c:45:aa:82:81:36:af:
                    0d:28:37:8e:59:97:9a:e3:8f:8e:c8:96:8a:f9:7b:
                    ed:de:06:12:fe:62:e9:2a:33:08:52:f4:6a:56:c0:
                    60:dc:91:88:a9:f2:a2:26:ab:4c:a5:68:f7:a8:4d:
                    7f:7a:17:46:35:6f:a2:13:b2:0f:31:a7:9b:a0:1c:
                    23:5a:64:19:61:da:cf:f6:b6:b0:0e:1a:37:fc:49:
                    bf:9c:5e:46:ac:7c:cc:65:7a:b0:b7:df:29:18:7a:
                    ad:e8:c0:f9:14:87:31:9b:2c:89:be:66:f9:cc:f8:
                    11:28:4b:d2:5a:7e:d2:81:a2:4c:3a:6e:8e:db:19:
                    41:b1:a5:b9:cd:1e:ce:0d:7c:94:70:3d:b5:92:c5:
                    3d:c1:56:70:da:fb:a0:e8:fa:04:3d:52:77:70:8f:
                    0e:38:85:2a:75:18:c2:db:ea:a1:7f:9e:6f:89:d6:
                    19:1a:2f:7a:6f:ff:5a:36:08:c1:4f:35:b6:d0:ce:
                    9d:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3D:A3:CD:0A:74:07:F4:D1:FC:00:88:76:42:C8:D9:99:5F:AF:2B:B6
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/bc847a09-17a6-3bb6-b8c2-dc92a5354374.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.42.177.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7b:23:05:40:1d:f3:1b:37:79:00:1d:33:d6:79:42:f6:ca:36:
         23:e9:10:06:ce:19:df:40:1f:e1:a4:d1:58:8c:f8:c5:9e:f0:
         f8:32:cb:14:94:fb:c8:ef:34:20:e6:77:ee:f9:48:63:a7:39:
         f8:59:49:9a:93:ed:ae:55:06:62:4b:72:bb:92:d9:8d:0f:fc:
         e4:cb:a1:5d:83:cd:66:15:39:67:08:b8:e0:08:1c:a1:a9:5a:
         85:d3:21:0c:1f:89:fa:b1:7a:d0:4b:32:16:dc:ef:ac:c8:6b:
         cf:8a:d0:77:0a:0e:08:d9:cd:ea:20:2d:e9:98:2e:36:b9:50:
         5b:98:92:e9:c6:18:87:a6:5d:de:75:0b:68:07:5f:1e:1f:b2:
         ac:38:15:e1:7a:4c:21:9f:14:37:4f:9b:d1:c3:1f:5c:56:73:
         01:c1:b2:22:1c:b9:23:c7:6e:aa:9b:99:83:a4:d7:7a:83:76:
         5d:40:36:ab:46:a2:2d:a6:3e:df:ee:83:75:71:6e:5d:41:38:
         f3:a8:35:98:3b:fa:25:50:b8:a7:83:13:73:59:aa:6f:86:de:
         fc:cb:18:b6:40:b4:e5:5d:18:3e:8c:b6:4f:88:ff:60:bc:51:
         58:33:f8:e9:bc:5e:cc:08:c3:d7:f1:40:62:96:f7:a4:b3:5a:
         82:c2:09:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 09:06:22 2026 by rpki-client