Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c51050f2-23af-3dec-8d4e-1f3b91704e16.roa
File:                     c51050f2-23af-3dec-8d4e-1f3b91704e16.roa (raw, json)
Hash identifier:          6ZGCoWxX/GbDcY+C7TCT4vs166jXO5qSFy0QG7Ywzrk=
Subject key identifier:   6D:EC:33:E3:09:23:BC:B1:4F:AD:4C:BB:63:4D:52:C3:E3:0E:32:A9
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584E7634F2501CDDF6BE65C6A1B0
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c51050f2-23af-3dec-8d4e-1f3b91704e16.roa
Signing time:             Sat 11 Jul 2026 09:00:12 +0000
ROA not before:           Sat 11 Jul 2026 09:00:12 +0000
ROA not after:            Fri 09 Oct 2026 09:00:12 +0000
asID:                     7342
IP address blocks:        209.131.185.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 26 Jul 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:76:34:f2:50:1c:dd:f6:be:65:c6:a1:b0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Jul 11 09:00:12 2026 GMT
            Not After : Oct  9 09:00:12 2026 GMT
        Subject: CN=4fd3e909-0d55-4e47-9d4a-8ffd13662b6b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8b:58:4c:ed:f4:04:71:b9:13:77:99:e2:1b:07:
                    de:d7:c5:70:a4:cf:ba:aa:61:a9:58:58:f8:d9:dc:
                    52:01:8e:c6:4a:b0:88:2e:dd:1e:1f:b0:f2:42:c3:
                    0b:98:ae:57:76:0b:56:c3:fb:c0:5e:81:8b:3d:b7:
                    2f:ae:68:23:54:32:a9:35:c8:15:f1:d6:5f:10:a1:
                    b6:c2:16:9a:d2:70:16:df:e0:f8:b1:18:60:00:08:
                    33:d5:69:db:73:19:0e:0d:50:50:bc:bd:9c:b8:4d:
                    f2:25:9d:2a:52:f4:c2:00:31:79:78:e5:65:e0:a6:
                    f8:92:9f:f2:41:50:c2:a2:af:6d:31:8b:71:6e:f4:
                    a8:cc:2c:f2:80:25:a1:92:15:42:1a:e8:7a:39:2e:
                    85:99:e4:67:d4:e8:9a:8b:91:06:ec:ba:74:80:69:
                    73:22:28:4c:ac:39:ac:4e:f7:8c:db:2e:f8:6c:17:
                    86:5e:ff:76:f5:15:38:83:7d:80:c8:1e:a2:1e:64:
                    f2:fe:f7:5e:78:37:93:69:61:cf:a8:bb:c0:e4:8f:
                    6d:e8:76:72:c5:10:d0:48:00:39:5f:de:3f:d4:45:
                    dd:68:44:79:dc:08:cf:52:e7:ab:42:79:dc:33:72:
                    02:7c:b7:95:df:5d:4c:0a:84:0c:f7:e7:ce:5e:e6:
                    ca:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6D:EC:33:E3:09:23:BC:B1:4F:AD:4C:BB:63:4D:52:C3:E3:0E:32:A9
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c51050f2-23af-3dec-8d4e-1f3b91704e16.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  209.131.185.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1d:b3:69:5b:ea:de:5b:79:cc:4b:b0:32:ea:f5:ca:5f:87:7c:
         f5:fe:9e:b7:8f:ec:9b:9f:38:d1:00:f1:d9:6b:f1:d3:34:8f:
         f0:30:9b:0c:c3:aa:2b:9f:35:53:f0:06:f5:97:53:6d:2a:02:
         0a:0d:19:c0:7c:00:06:a7:4f:31:a2:7e:2e:e8:5b:48:a7:e9:
         2f:9c:a3:20:d3:1e:27:13:a6:89:be:46:45:49:07:ad:22:ed:
         aa:c6:48:d4:4c:85:10:83:b5:aa:17:94:de:c2:37:6c:5f:89:
         69:3b:ed:48:e2:48:d8:f4:c0:1f:cb:92:52:50:34:28:fc:83:
         9f:f2:14:f2:21:db:58:79:13:8e:34:a2:2b:38:fd:50:cc:90:
         ad:a3:28:a8:d8:ae:39:31:f0:e1:39:83:70:27:94:80:28:02:
         66:de:23:e5:b3:ce:45:10:d5:d5:74:fb:57:ad:02:10:57:48:
         f2:b0:62:41:6e:ef:89:15:a4:02:18:f4:48:4c:18:39:6e:72:
         38:38:c7:50:d0:64:ae:46:b1:85:03:c8:f7:a8:bf:65:a9:50:
         4d:fc:80:a6:84:3d:a1:15:04:fc:01:7f:69:e4:cb:43:1f:14:
         b6:e3:07:c1:1a:5c:d1:7e:a7:fe:f0:f7:71:2b:b3:34:62:1c:
         1b:64:62:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 13:56:04 2026 by rpki-client