Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c24225fe-57bc-3d00-a02c-bc76a2d751a8.roa
File:                     c24225fe-57bc-3d00-a02c-bc76a2d751a8.roa (raw, json)
Hash identifier:          BC4gFwtTpW5+v8b7ZJl6mtYHqbMaUGZRZHMbFnvvT5w=
Subject key identifier:   DB:FC:B2:F8:41:A2:74:2E:0C:02:A8:47:5C:36:33:63:DC:77:BF:64
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584DAAE022106F2B06E0F3442E80
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c24225fe-57bc-3d00-a02c-bc76a2d751a8.roa
Signing time:             Wed 29 Apr 2026 13:00:31 +0000
ROA not before:           Wed 29 Apr 2026 13:00:31 +0000
ROA not after:            Tue 28 Jul 2026 13:00:31 +0000
asID:                     25485
IP address blocks:        192.81.185.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 15 May 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:aa:e0:22:10:6f:2b:06:e0:f3:44:2e:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Apr 29 13:00:31 2026 GMT
            Not After : Jul 28 13:00:31 2026 GMT
        Subject: CN=b771b9c0-b826-4487-99aa-11abd493fbc3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:85:29:81:f6:57:17:ab:0b:92:45:0c:0a:e8:3a:
                    9e:0a:e4:5a:ff:98:5c:23:7d:7e:ed:62:ef:da:3e:
                    da:54:fa:8c:ef:8b:95:60:9f:62:79:9a:e6:e7:bf:
                    80:11:59:c1:9e:c8:97:c7:9b:f2:40:07:3c:b3:09:
                    dd:f2:70:d7:fc:48:c2:b0:ab:d3:e3:e9:13:a8:4d:
                    28:7a:7a:88:d3:e9:59:71:91:b3:41:26:73:1e:47:
                    df:07:78:cb:ae:7b:36:1f:20:b4:0d:b6:f5:72:8f:
                    08:5f:3a:c3:0b:a0:15:6b:fb:b0:1d:ef:87:22:f3:
                    c7:be:d6:36:82:63:fe:e7:00:86:a1:50:5a:d3:6d:
                    ef:b0:fa:1e:d2:d7:c7:a5:e4:7e:3d:5f:38:70:a6:
                    d7:43:61:26:86:d5:9d:db:ba:5f:44:e3:dd:de:a5:
                    23:b6:5f:b3:54:27:2a:b5:a4:9d:e0:44:5c:2d:16:
                    cc:f7:65:ca:6e:5c:46:39:d3:6d:85:90:92:6a:fa:
                    64:19:9e:2f:61:c7:2b:29:04:9a:81:98:d6:dc:12:
                    a8:99:95:01:01:20:45:ca:d9:53:63:3e:5a:75:80:
                    f9:4c:c8:e1:f2:24:33:ab:fb:49:0f:82:e0:b6:ad:
                    02:f1:a7:8d:30:5a:f1:50:61:72:1a:e2:e6:55:70:
                    48:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DB:FC:B2:F8:41:A2:74:2E:0C:02:A8:47:5C:36:33:63:DC:77:BF:64
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c24225fe-57bc-3d00-a02c-bc76a2d751a8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.81.185.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         33:91:4c:5e:69:12:7e:c3:77:3d:8c:f3:14:79:75:91:2c:52:
         d8:83:fb:7f:4e:36:b4:76:e2:d2:6f:40:3f:d9:ce:74:fd:24:
         f8:68:40:e8:49:49:be:b9:55:12:1a:ad:64:94:e1:6e:72:8e:
         93:9a:c9:15:e0:cb:bc:12:69:b3:a1:06:6b:59:fd:bc:68:15:
         58:25:70:38:c0:be:ac:ae:cb:3a:19:5e:60:00:98:d4:7c:85:
         1e:dd:f4:97:65:95:51:29:72:5a:3b:e3:31:cf:bc:a9:4c:a3:
         47:41:d5:63:50:aa:e9:5b:fa:ea:a3:da:f6:43:db:3c:8a:a8:
         eb:b6:e2:09:49:51:d8:99:6c:d5:94:2f:5a:4e:08:8a:ec:70:
         07:a8:fb:dd:68:0f:ac:ee:6e:d9:aa:6b:48:e2:e2:f4:28:bf:
         71:e7:01:59:bc:36:94:fe:5a:24:ef:e9:f1:74:9c:16:09:3c:
         95:a3:49:eb:64:8c:36:7f:56:f7:18:70:53:4d:1c:fc:c0:00:
         27:6a:54:00:72:e8:57:fd:d0:0d:16:3a:ed:20:01:73:cc:85:
         8f:f4:b9:a6:60:6d:62:ca:d0:ce:10:0b:14:40:80:81:60:a6:
         35:d1:82:55:f9:3d:e4:02:57:37:14:22:64:a8:8c:0d:3f:14:
         1c:ca:2e:7d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 08:58:51 2026 by rpki-client