Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c337f1e9-c785-37d5-bd4c-dae35a25411d.roa
File:                     c337f1e9-c785-37d5-bd4c-dae35a25411d.roa (raw, json)
Hash identifier:          FpUQH1gj22LiP6gG4G5BxXn4qxKmQa1jRcJ0WcRIN18=
Subject key identifier:   3D:53:58:FA:39:46:18:B6:3D:7C:0D:0C:7E:3F:BD:D0:0E:17:B5:21
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584E815FBF549FD99329ABCEF500
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c337f1e9-c785-37d5-bd4c-dae35a25411d.roa
Signing time:             Wed 15 Jul 2026 09:00:13 +0000
ROA not before:           Wed 15 Jul 2026 09:00:13 +0000
ROA not after:            Tue 13 Oct 2026 09:00:13 +0000
asID:                     36624
IP address blocks:        192.48.79.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 26 Jul 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:81:5f:bf:54:9f:d9:93:29:ab:ce:f5:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Jul 15 09:00:13 2026 GMT
            Not After : Oct 13 09:00:13 2026 GMT
        Subject: CN=9f0ed335-5115-41f1-b7c3-61d0ef0beaac
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e7:7a:e4:dc:b0:0d:82:94:db:cb:70:f6:3b:4e:
                    eb:fa:60:e6:50:35:3d:ec:41:19:08:0f:d6:d5:6c:
                    45:16:1a:64:97:55:6b:4c:ca:5d:8a:1e:5d:c0:36:
                    87:55:4b:1a:8d:b0:f8:68:a6:70:d7:7d:01:c6:e8:
                    5b:8a:c4:90:c5:90:93:92:f9:bc:bf:c2:6a:ed:7e:
                    45:e7:0e:ca:ad:bf:12:80:d1:4c:ea:10:e8:8d:4f:
                    f9:2b:31:40:9a:1d:0f:b4:19:2a:8f:81:ce:44:c6:
                    29:17:9d:b6:39:e9:bf:88:d7:83:13:31:14:70:bd:
                    7d:13:1d:42:31:7c:6f:19:5b:fe:b0:cc:09:c6:99:
                    e9:70:03:9e:82:ec:3c:5d:f7:90:b2:e5:5d:0e:bb:
                    c4:fa:17:dd:54:38:53:72:26:74:10:a3:88:6f:fc:
                    2b:a7:60:54:45:9d:cc:b3:d8:e9:95:15:75:fc:98:
                    f2:d1:09:33:1a:78:8a:7c:5e:54:0f:00:b5:31:2e:
                    84:1b:5b:02:68:c9:9a:b9:0a:18:b9:de:64:e5:e3:
                    e6:bc:bc:4a:3d:0e:83:b1:42:56:61:df:7b:ea:74:
                    64:c2:a3:1b:82:a2:54:47:f8:a3:99:1f:7b:8c:6c:
                    d2:4e:d7:83:d1:2f:9b:77:1a:e7:37:81:b6:b2:59:
                    ea:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3D:53:58:FA:39:46:18:B6:3D:7C:0D:0C:7E:3F:BD:D0:0E:17:B5:21
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c337f1e9-c785-37d5-bd4c-dae35a25411d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.48.79.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6a:3a:ac:5e:49:73:59:42:84:c3:07:09:e2:44:aa:93:44:71:
         15:a0:80:59:83:8b:3f:3e:72:42:ee:62:22:29:f1:17:19:45:
         fd:5e:cf:8e:e5:74:ac:e9:1d:23:34:85:dc:53:fe:e9:f9:5d:
         67:c3:ec:c0:f6:a3:2e:df:90:ff:3f:25:b8:59:0e:94:7c:2b:
         4e:ef:31:f8:0f:7c:7b:12:b2:ef:a8:85:c9:ec:93:31:8f:9d:
         00:43:ea:cb:54:10:75:66:c7:2a:af:54:27:ca:74:75:db:51:
         1f:1b:ea:7b:68:41:5f:62:6c:81:58:a7:ec:bb:fe:a6:29:c7:
         73:94:44:cb:c1:6e:47:22:4c:f2:bc:d0:83:44:14:7d:46:5f:
         b8:e4:5b:cb:06:ce:98:4b:1c:13:3b:4e:2f:d1:8a:13:a0:02:
         df:bb:e3:91:96:6c:a6:63:40:56:df:03:0d:e0:bc:2d:34:4d:
         9f:df:d2:a4:88:a7:88:ae:ab:fc:98:28:1c:6c:37:be:93:d8:
         3d:6d:a4:d4:7c:9d:e2:1e:5b:83:94:6e:cd:e8:10:46:0d:38:
         6f:ee:5e:70:f6:63:4c:69:e3:18:6f:7a:fd:e2:7b:5a:9e:be:
         19:f9:09:d7:be:65:76:e3:a5:97:d1:33:a2:56:e7:dc:97:64:
         4a:90:6f:85
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 11:32:31 2026 by rpki-client