Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/e6fcd71c-e7d4-31a1-adde-c74342d3fdf0.roa
File:                     e6fcd71c-e7d4-31a1-adde-c74342d3fdf0.roa (raw, json)
Hash identifier:          gTZViSI6PT2IK5X0pFOLqvOFuln6DZKQsdJ+oFB8glg=
Subject key identifier:   F1:E6:17:9E:94:09:68:4F:90:A2:53:90:46:EA:97:84:A9:14:55:17
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584D9B8554D1592E6114C473B480
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/e6fcd71c-e7d4-31a1-adde-c74342d3fdf0.roa
Signing time:             Fri 24 Apr 2026 01:00:23 +0000
ROA not before:           Fri 24 Apr 2026 01:00:23 +0000
ROA not after:            Thu 23 Jul 2026 01:00:23 +0000
asID:                     397195
IP address blocks:        192.54.112.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 15 May 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:9b:85:54:d1:59:2e:61:14:c4:73:b4:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Apr 24 01:00:23 2026 GMT
            Not After : Jul 23 01:00:23 2026 GMT
        Subject: CN=54094e89-c60e-4f56-995f-b761c2aa4b42
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:83:b7:c0:69:c9:5b:17:66:e1:f1:06:71:9f:2e:
                    9e:4f:67:1a:f9:b5:f7:87:85:52:3a:7e:8a:c8:f1:
                    50:cf:c3:74:cc:eb:78:1b:c6:e8:8a:da:fd:c7:79:
                    16:b9:0a:6f:31:5b:6c:3c:c1:d0:f8:3d:90:92:49:
                    11:3d:aa:ee:da:91:96:4e:ca:bd:df:f4:29:e6:28:
                    f5:b2:ec:c1:1c:6e:7a:8e:45:2f:83:65:ea:e6:97:
                    c4:b1:60:e5:3c:ed:03:ab:9f:6f:50:f3:9e:26:04:
                    17:17:d3:24:58:2a:69:97:90:0d:43:03:40:fa:db:
                    39:bd:47:cd:58:ba:11:e6:f9:33:1a:ec:07:d3:88:
                    99:57:2e:01:01:82:4f:8b:8e:32:4d:1e:6c:d5:f6:
                    90:b3:dc:4a:91:e7:04:08:62:d0:e9:b3:3c:86:17:
                    c6:08:ee:6c:80:91:7b:38:14:ac:37:cd:4b:3c:d1:
                    11:65:96:0a:de:21:9a:e5:e0:55:c9:d1:2f:4f:7a:
                    2a:68:4c:04:c5:a3:67:2e:48:c1:ab:3c:f4:c0:3d:
                    af:72:69:88:d9:d9:81:74:0b:77:75:03:7e:44:ae:
                    cc:5b:95:d7:21:74:c5:ab:ce:47:e2:c4:51:03:89:
                    75:11:d1:eb:a9:86:82:17:f2:c9:96:16:9c:a1:12:
                    c8:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F1:E6:17:9E:94:09:68:4F:90:A2:53:90:46:EA:97:84:A9:14:55:17
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/e6fcd71c-e7d4-31a1-adde-c74342d3fdf0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.54.112.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         85:d6:36:44:1a:9a:0f:4b:9f:36:c6:6a:bf:b1:07:92:79:74:
         72:63:c2:2c:16:ea:c5:fa:0c:d0:d8:90:0f:b5:44:84:6f:c6:
         d5:c0:a0:da:03:ee:fd:48:c6:ee:3a:aa:1c:58:95:b5:e7:03:
         a6:de:d7:a7:d1:76:e9:ad:9f:d8:63:84:bf:de:41:28:a8:88:
         4a:7c:1d:38:15:f8:f6:b6:74:64:ca:7e:fd:ff:f1:b2:69:be:
         5c:5b:3b:e9:18:e3:77:2b:4f:7d:fa:0b:2a:b7:f5:65:31:34:
         38:2a:2b:7a:db:1f:b9:00:3b:b3:90:e2:85:3f:6e:b4:d4:d5:
         ce:61:86:1f:e5:83:d9:cd:69:29:a5:43:6c:8e:7c:cc:03:7c:
         89:44:ed:50:c2:2b:1d:41:b6:c7:fa:7a:e0:d7:c6:48:55:0f:
         8a:41:f3:b5:41:88:99:e9:d8:77:4a:a1:05:84:b5:3b:92:f4:
         67:88:99:5c:ee:df:b3:d5:3e:90:05:14:68:01:2c:3f:7e:86:
         37:01:70:11:d9:74:17:29:1a:fe:13:5b:e7:a0:d6:eb:02:17:
         d4:61:0f:ad:9a:43:b3:33:0b:d8:e5:de:e0:67:1e:f7:0d:2a:
         a4:be:cc:af:65:f5:ae:dd:94:6f:9b:49:25:5b:26:c3:c7:9d:
         cc:a8:02:3d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 02:52:47 2026 by rpki-client