Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/de40e0f2-f9bc-3e5d-995b-f32430c38462.roa
File:                     de40e0f2-f9bc-3e5d-995b-f32430c38462.roa (raw, json)
Hash identifier:          MQ3hjJLeQcREYmhlUrpcRyCK/wTfVx1DXiSx/zBXE+w=
Subject key identifier:   1B:A8:EA:21:CE:15:92:16:9F:76:91:10:64:EE:E5:F1:65:CE:A4:5D
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584DAAE050A8D333AA1A7501C400
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/de40e0f2-f9bc-3e5d-995b-f32430c38462.roa
Signing time:             Wed 29 Apr 2026 13:00:31 +0000
ROA not before:           Wed 29 Apr 2026 13:00:31 +0000
ROA not after:            Tue 28 Jul 2026 13:00:31 +0000
asID:                     396540
IP address blocks:        192.81.185.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 15 May 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:aa:e0:50:a8:d3:33:aa:1a:75:01:c4:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Apr 29 13:00:31 2026 GMT
            Not After : Jul 28 13:00:31 2026 GMT
        Subject: CN=9a14629d-d582-422d-ba58-af5a426f8c69
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:87:e4:dc:93:70:3c:5d:e5:2b:c6:28:9a:11:
                    04:a8:f3:5b:0b:46:e6:3e:6a:23:f1:fe:9e:4b:fd:
                    8c:03:e3:b6:0a:96:47:89:4d:16:84:ac:eb:f1:ed:
                    87:bd:4f:c4:ea:36:86:94:87:5d:09:38:6f:90:e1:
                    6f:58:7f:17:7e:5c:28:cc:ca:bb:14:57:71:b1:61:
                    96:10:ad:72:5a:59:36:8a:4b:04:e1:3f:70:0d:51:
                    c8:7b:9b:78:83:2e:bf:bd:c0:f6:7b:ac:4b:bc:dc:
                    52:98:8f:9a:a2:b7:d4:15:6b:d9:f1:48:f4:da:ce:
                    78:3c:5f:2e:17:5b:2f:e2:7b:cb:37:79:8c:58:5a:
                    61:50:0a:72:7a:a7:9e:c8:34:ff:22:88:11:7c:19:
                    e5:3d:36:b4:9a:ec:7b:2d:bb:7a:fe:ec:76:3c:e5:
                    b1:c6:5a:49:22:b1:12:43:4b:98:83:9d:99:67:64:
                    19:6e:ad:33:82:e3:de:db:6b:25:c6:d2:5f:30:cb:
                    06:1b:4c:2b:33:66:88:72:1f:6d:78:dd:26:6b:c2:
                    b6:eb:e5:f0:7c:00:40:96:ee:a1:5b:43:2b:60:5a:
                    27:9e:6e:cb:e6:72:41:69:06:7f:a0:82:b6:05:e3:
                    63:c9:ae:7c:24:d3:2d:fc:21:44:24:82:07:23:53:
                    65:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1B:A8:EA:21:CE:15:92:16:9F:76:91:10:64:EE:E5:F1:65:CE:A4:5D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/de40e0f2-f9bc-3e5d-995b-f32430c38462.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.81.185.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3b:49:99:3a:66:ee:dd:8c:0a:82:ff:3c:4d:af:3f:a1:42:9b:
         ef:4d:7a:6f:a8:28:3f:9d:31:33:71:0e:a5:c0:06:1b:c5:35:
         4e:f6:81:4c:3c:f1:97:86:84:ce:80:aa:bd:17:45:60:0a:7e:
         b5:20:3c:82:c2:e5:a2:7b:23:a8:27:43:6b:2c:d5:4c:8b:e6:
         b2:a5:9a:7d:87:ff:71:ae:e1:f7:39:c4:fb:66:c4:d9:5a:6a:
         4b:19:02:9c:1d:d0:84:c2:24:c2:c6:ab:f1:21:74:1c:4c:b8:
         12:e0:36:f0:13:f2:a3:bf:40:f8:0a:37:e2:03:a2:34:d4:45:
         e3:07:09:96:e9:3d:5b:2b:93:47:a9:50:ad:1f:03:28:6b:40:
         1c:8d:da:40:83:a9:d7:74:45:84:73:8e:cc:8a:97:49:ee:c1:
         3f:74:95:7b:8e:e3:a8:84:de:b6:51:5b:0f:f9:a2:32:7f:ae:
         82:98:2b:9d:6c:08:66:9e:55:45:30:78:33:59:5e:8d:59:82:
         fd:44:dd:7b:82:22:a9:30:77:38:97:88:fd:63:6c:b5:78:c3:
         17:ff:c3:f7:54:af:4a:0b:98:40:81:15:54:2f:cf:d2:1f:9b:
         af:d7:a9:e9:2a:56:8d:96:b4:f4:e3:6b:98:78:78:06:89:a3:
         d3:76:3f:15
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 15:22:04 2026 by rpki-client