Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/d8dbce54-f51f-3e8b-acfc-f762646f8380.roa
File:                     d8dbce54-f51f-3e8b-acfc-f762646f8380.roa (raw, json)
Hash identifier:          B2e46N64vCr1lCLG7qOPZRaI4kG3glB6niIvCXle3Bg=
Subject key identifier:   26:5F:D4:75:F7:43:08:3D:B9:F2:3C:03:32:2B:A1:87:ED:09:72:B3
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584E66DA49278C4D66364279AF00
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/d8dbce54-f51f-3e8b-acfc-f762646f8380.roa
Signing time:             Sun 05 Jul 2026 21:00:11 +0000
ROA not before:           Sun 05 Jul 2026 21:00:11 +0000
ROA not after:            Sat 03 Oct 2026 21:00:11 +0000
asID:                     396608
IP address blocks:        192.42.173.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 26 Jul 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:66:da:49:27:8c:4d:66:36:42:79:af:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Jul  5 21:00:11 2026 GMT
            Not After : Oct  3 21:00:11 2026 GMT
        Subject: CN=59d3556e-7f30-43fa-bfba-407edeb991c6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:b1:e4:2c:b5:27:54:62:f7:c1:9b:47:ce:e9:
                    68:2f:6b:35:7c:82:28:c0:69:e7:69:6e:da:77:f5:
                    3b:3d:1e:07:3c:b2:ce:7c:f8:2a:58:96:df:a8:17:
                    35:a1:16:a8:5a:61:4a:1a:e4:ea:63:92:18:93:5e:
                    f7:55:9f:99:c3:b3:ee:81:a2:c0:d0:42:94:fd:9c:
                    1b:c5:28:71:ab:60:46:0f:ad:97:dd:79:95:3c:24:
                    24:07:8e:a6:35:ef:2c:bd:5f:ca:13:1b:8d:2c:f8:
                    7e:5e:8b:27:04:07:38:83:f3:03:6d:9d:19:86:76:
                    45:ea:f1:71:f1:92:c7:27:62:be:1b:88:7b:ee:a3:
                    39:02:47:f6:48:26:d6:7a:0f:ee:84:d4:18:a2:18:
                    df:9a:26:f1:3b:ff:eb:10:e4:2b:50:59:b0:b5:13:
                    b1:3c:f3:66:72:ce:96:31:e1:c5:a3:08:cb:6b:81:
                    77:45:da:97:d4:cc:1b:37:63:de:1b:06:43:09:7a:
                    b0:25:28:cb:41:96:b9:4f:d7:c6:25:0d:5c:9c:d7:
                    5a:44:d2:d2:24:8e:73:7c:a0:10:dc:73:7c:d4:36:
                    98:c1:66:78:38:4f:83:20:f9:93:07:20:c7:ea:26:
                    71:85:a3:c5:83:c8:9f:7c:16:9e:45:7e:a3:50:ed:
                    b9:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                26:5F:D4:75:F7:43:08:3D:B9:F2:3C:03:32:2B:A1:87:ED:09:72:B3
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/d8dbce54-f51f-3e8b-acfc-f762646f8380.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.42.173.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         41:11:73:d7:15:f0:5a:2c:93:a2:2f:7e:74:99:6a:cb:22:db:
         9b:9a:bc:12:9a:78:27:12:4d:f8:3f:c3:3d:7b:1b:68:49:60:
         24:fb:08:49:e6:9e:19:43:74:40:38:83:d8:a1:3d:9d:30:31:
         8f:e2:10:42:33:3a:81:c6:1e:76:11:e4:16:a6:0a:82:57:66:
         ac:98:09:c5:b1:3b:b2:29:5c:6a:52:d8:fe:31:37:35:3d:c6:
         35:33:d7:71:99:db:8d:e4:2b:a5:b2:56:ae:3b:5a:73:a8:5e:
         45:56:57:ca:75:e4:23:88:2a:64:e0:17:66:7c:ec:7b:f2:a6:
         4e:92:76:4c:53:e9:5a:43:64:4a:e7:eb:6c:7c:c1:94:4f:36:
         05:45:60:d5:a6:1a:98:c6:4c:87:0c:fd:28:2c:65:a9:d8:3d:
         67:76:a3:1b:35:bb:37:cd:76:8a:ea:1d:c4:ce:fb:c4:66:b7:
         74:d0:f7:06:5f:7d:b5:15:0e:ba:f2:1b:48:d1:8a:75:42:ba:
         cc:c9:44:b8:c1:cc:49:25:7b:38:31:c6:5b:7f:d7:dd:a8:35:
         45:80:17:bc:cd:81:f1:14:8f:a7:26:6c:93:a2:a4:0a:32:c4:
         23:2d:8f:0d:b0:f8:fa:db:a3:85:d3:e2:30:3c:12:bb:fb:76:
         e3:6b:79:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 16:03:03 2026 by rpki-client