Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/cb06b0e1-2d95-35ee-99a6-a67672c85e82.roa
File:                     cb06b0e1-2d95-35ee-99a6-a67672c85e82.roa (raw, json)
Hash identifier:          CIB/bXSqp35Xg2u0GrG9feJHLSZuEh0N8aeSJZoUDUY=
Subject key identifier:   DB:CE:D3:F2:21:D8:8E:96:68:5B:49:24:F8:38:26:10:06:28:80:83
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584DC1577509A93820F58A716A00
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/cb06b0e1-2d95-35ee-99a6-a67672c85e82.roa
Signing time:             Thu 07 May 2026 14:08:48 +0000
ROA not before:           Thu 07 May 2026 14:08:48 +0000
ROA not after:            Wed 05 Aug 2026 14:08:48 +0000
asID:                     396551
IP address blocks:        192.42.93.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 15 May 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:c1:57:75:09:a9:38:20:f5:8a:71:6a:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: May  7 14:08:48 2026 GMT
            Not After : Aug  5 14:08:48 2026 GMT
        Subject: CN=694bd964-280c-480d-82cc-87b83e69956f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:82:57:3d:f2:44:35:c0:d0:a3:d6:22:00:e1:20:
                    d4:c8:23:8d:52:cc:e2:eb:65:28:93:35:6a:69:e9:
                    73:be:28:44:b1:83:5e:2c:ae:1b:b6:12:91:96:6b:
                    11:49:c6:24:5e:ff:3f:08:e7:64:71:e7:5d:36:ce:
                    ac:06:e4:26:e4:7c:0a:70:e1:33:97:32:ce:5c:15:
                    52:d3:e0:24:1e:e3:6c:aa:2e:e1:75:a0:7a:a1:0a:
                    ec:05:83:d8:e7:bb:5a:0e:07:7d:98:ff:d2:12:15:
                    0f:74:35:2f:01:ac:5c:48:d5:30:ee:b6:c6:15:f9:
                    0f:3f:df:b3:86:cc:8c:ef:f3:fc:36:cd:41:3a:bf:
                    27:ba:33:8f:ea:bd:c2:5c:09:28:25:10:68:9e:8c:
                    9d:72:f8:77:b9:c1:60:98:89:cf:77:42:7c:2f:78:
                    23:1b:f0:64:4d:2b:bf:8f:83:ca:48:25:73:a4:e6:
                    56:fb:b1:ec:3c:55:18:ae:d2:c7:4b:90:4d:31:6d:
                    55:15:19:68:fa:0d:78:73:e1:5a:95:3a:7f:94:dd:
                    db:9f:38:4d:da:be:f2:3f:74:0f:db:74:50:8a:24:
                    7a:76:4b:22:7b:b9:60:d1:3a:78:81:f2:39:7f:7b:
                    2d:55:1a:f6:48:08:a3:a8:7a:27:c9:95:45:8d:61:
                    3f:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DB:CE:D3:F2:21:D8:8E:96:68:5B:49:24:F8:38:26:10:06:28:80:83
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/cb06b0e1-2d95-35ee-99a6-a67672c85e82.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.42.93.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         17:f3:e2:c4:97:5e:e9:4a:ea:ae:f6:06:f8:7d:40:a7:ff:f4:
         60:78:33:61:f7:3c:66:9a:7e:e2:98:39:ad:da:07:d6:15:bd:
         23:7f:0b:67:9d:16:a0:72:75:ba:0d:66:b8:21:ad:31:17:31:
         39:6f:f0:ef:bd:c4:f3:04:84:d2:92:fb:2b:f6:a4:35:38:09:
         bd:97:8e:af:42:14:7e:5b:cd:ce:f7:e1:95:a5:f3:6b:4e:ca:
         a5:21:84:42:fd:88:7a:0f:13:cc:76:9d:6c:8e:5e:eb:d6:6a:
         0d:3f:72:e7:1a:f7:f5:19:f2:1c:0a:32:2b:98:ab:b0:dc:1f:
         7b:b5:d7:cf:0a:4f:32:06:f6:26:4b:fb:2d:08:e5:71:87:51:
         84:44:61:4f:01:21:e3:d5:b0:87:89:39:8b:e8:bd:b3:95:82:
         ba:ed:7b:c2:b2:a5:ec:67:89:25:04:3c:1c:cd:6f:96:57:64:
         50:12:ac:15:22:8a:26:ee:5e:61:f5:7e:9d:c7:23:ce:32:7c:
         b6:11:7b:e5:cf:d7:f5:b7:e3:87:e6:49:94:73:d7:f8:a0:1c:
         df:43:c9:4a:8b:72:04:9f:5c:24:c6:d9:93:ff:a2:e3:61:cf:
         fe:31:ea:c8:e4:96:2f:b9:2b:67:b7:ce:b9:3f:61:e5:3d:7d:
         04:08:d1:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 04:53:27 2026 by rpki-client