Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c4fe1373-05bc-3fdc-9541-ab7813d12936.roa
File:                     c4fe1373-05bc-3fdc-9541-ab7813d12936.roa (raw, json)
Hash identifier:          /8C1i5P0M8MERnAI0jZQ9+hmjhF0MfVMFb2xkgZmU4I=
Subject key identifier:   CB:08:76:94:8F:69:DD:E9:7B:A7:87:9F:A7:CA:7A:8A:E0:FA:43:59
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584D9B855D0E1C4D799ECBDEC980
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c4fe1373-05bc-3fdc-9541-ab7813d12936.roa
Signing time:             Fri 24 Apr 2026 01:00:23 +0000
ROA not before:           Fri 24 Apr 2026 01:00:23 +0000
ROA not after:            Thu 23 Jul 2026 01:00:23 +0000
asID:                     396580
IP address blocks:        192.54.112.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 15 May 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:9b:85:5d:0e:1c:4d:79:9e:cb:de:c9:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Apr 24 01:00:23 2026 GMT
            Not After : Jul 23 01:00:23 2026 GMT
        Subject: CN=ea8070fc-99a2-4912-bbe2-842a4d542eab
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:90:eb:17:e2:82:56:77:54:49:0d:b9:1c:59:82:
                    09:ec:5a:fa:23:23:86:26:05:7e:ca:98:81:d5:26:
                    ee:bd:d3:e8:03:d6:a2:67:a4:f3:1e:b3:af:4c:d3:
                    e4:77:3b:f5:0e:3f:33:66:db:4b:4d:d5:df:a4:a9:
                    9b:26:43:f0:1f:75:2c:ed:41:2f:8d:d5:a7:f9:81:
                    9d:61:14:fc:6b:2b:09:01:d7:23:5f:16:31:56:09:
                    35:25:7f:b6:7f:88:be:87:0c:d5:91:ec:f5:28:a7:
                    7f:3d:cc:2c:bc:33:be:00:be:a4:4d:cf:b0:e9:7e:
                    c4:02:e1:a0:d0:a8:a6:9a:25:c1:7e:d5:52:92:eb:
                    b2:28:3d:d0:9a:b1:0f:d5:47:08:d2:45:d5:84:d7:
                    28:0f:e6:e8:01:ae:46:fc:bf:31:a4:39:86:3a:4d:
                    65:91:95:ba:93:80:d2:8d:fd:93:b3:a3:e9:5e:b2:
                    53:81:48:dc:f4:72:29:1d:50:b8:f8:90:4c:d1:3a:
                    c9:5f:df:ef:c0:ba:f2:34:46:90:3d:06:63:ff:18:
                    81:e1:c0:44:e2:27:bc:ae:1c:82:51:d9:44:15:b0:
                    0e:ad:90:e7:d9:05:10:dc:3f:ea:35:81:1c:18:15:
                    b0:0f:ae:e1:70:7c:bf:17:76:57:41:47:e4:0b:a0:
                    07:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CB:08:76:94:8F:69:DD:E9:7B:A7:87:9F:A7:CA:7A:8A:E0:FA:43:59
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c4fe1373-05bc-3fdc-9541-ab7813d12936.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.54.112.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         35:f1:2f:a9:de:6a:b6:54:7d:37:36:97:2b:dd:dd:c5:54:bb:
         12:40:5e:79:63:13:8e:e2:6a:8f:e8:71:40:1d:45:ec:d9:29:
         3f:a9:28:8e:6c:15:44:91:d8:ac:3b:df:9f:39:6e:b4:be:fd:
         af:ba:68:60:28:3f:c6:be:98:2e:7d:38:de:03:ea:f0:ba:9b:
         2b:f4:a2:15:31:9c:f4:09:49:bd:f1:68:40:03:06:17:11:2f:
         20:26:8c:98:74:3b:7e:77:b2:5c:18:61:71:95:f4:e1:22:b7:
         2d:e2:b2:de:60:2a:5d:c2:03:73:52:7e:9b:90:d4:05:bc:a4:
         a6:9a:e4:76:ce:95:45:7c:77:1e:10:46:45:74:f1:21:00:6f:
         62:31:0d:dc:25:e1:7e:bb:ef:54:65:18:5f:05:0f:af:fb:04:
         ff:cc:66:99:5d:b9:34:39:e6:f7:bf:6e:07:1c:88:9b:51:54:
         c6:f7:1d:75:f4:45:ea:c2:18:63:0f:49:a1:bf:9c:a9:6b:9e:
         06:02:73:7d:48:ae:5d:ac:f9:ea:2c:ab:95:7f:d8:f5:e4:6f:
         52:e4:42:d2:55:97:b3:ff:65:e9:5f:bc:09:57:83:b2:a5:26:
         82:c8:f3:05:5e:58:08:42:4b:96:b1:00:30:5a:cf:25:a8:98:
         60:3f:a1:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 12:48:34 2026 by rpki-client