Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/ee910d51-32a3-33b5-8c34-544fd8d8730b.roa
File:                     ee910d51-32a3-33b5-8c34-544fd8d8730b.roa (raw, json)
Hash identifier:          m4i4NFc3Y/lZTFpsbWw5LN5MxlhPhzKM4pd0hxzmUlM=
Subject key identifier:   EC:96:9A:77:F8:84:51:67:B2:43:86:E7:A9:35:BE:CF:88:0B:4F:5A
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584D300A3ECD76A121228A176600
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/ee910d51-32a3-33b5-8c34-544fd8d8730b.roa
Signing time:             Mon 16 Mar 2026 13:00:40 +0000
ROA not before:           Mon 16 Mar 2026 13:00:40 +0000
ROA not after:            Sun 14 Jun 2026 13:00:40 +0000
asID:                     396544
IP address blocks:        192.68.126.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 28 Mar 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:30:0a:3e:cd:76:a1:21:22:8a:17:66:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Mar 16 13:00:40 2026 GMT
            Not After : Jun 14 13:00:40 2026 GMT
        Subject: CN=ef22cfb0-20b5-45e5-af5c-2fffe692da11
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:4c:e7:86:0e:81:1f:4a:ad:24:bd:a3:d9:6c:
                    6b:85:59:70:bf:5b:b3:bc:70:ef:cf:79:43:f0:de:
                    9e:45:9a:2a:b1:49:ea:95:e2:ae:aa:ce:7e:a3:4b:
                    46:d5:6e:97:b5:98:78:a1:aa:5e:8c:af:74:b8:e4:
                    d2:c9:a5:d3:03:1a:27:44:7d:e3:ab:c1:73:c0:41:
                    c3:be:16:70:de:b0:16:23:94:66:a4:2f:ab:b6:bb:
                    8b:72:09:bd:42:35:47:c0:67:5e:ea:8e:4f:f1:3a:
                    4b:8d:ee:3b:ed:16:59:38:30:49:35:0e:ab:f1:26:
                    e7:2e:ca:94:b9:6b:52:bf:fb:86:80:5a:3d:f4:07:
                    5b:44:3b:a4:35:20:fb:b4:7a:b7:e1:44:0b:ce:25:
                    e5:b8:50:f7:f2:1c:64:d0:4b:01:40:14:8f:a6:5d:
                    dd:bd:22:02:1e:07:2e:33:06:4b:13:09:ed:73:19:
                    5e:fb:75:a6:54:75:a9:14:31:db:03:f4:3b:cf:05:
                    d3:98:ff:54:d0:d3:bb:f6:f2:8a:2d:36:c5:6e:bf:
                    5b:c5:e6:a1:8b:cc:59:7e:8d:ac:89:73:63:8c:96:
                    9f:48:9d:65:e9:71:8d:92:fa:6f:9a:cb:b5:0d:8f:
                    08:55:b6:5c:8e:e0:36:c7:7e:ac:2c:1e:15:5e:ae:
                    1a:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EC:96:9A:77:F8:84:51:67:B2:43:86:E7:A9:35:BE:CF:88:0B:4F:5A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/ee910d51-32a3-33b5-8c34-544fd8d8730b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.68.126.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4f:2e:c1:19:55:83:f6:5d:e8:3c:38:78:ca:ac:4d:8a:41:c3:
         bf:a2:d1:d4:96:00:54:ce:8f:75:dd:d2:af:d7:07:47:50:88:
         07:9c:8a:d6:07:7c:73:a9:a4:96:d3:7e:9c:ee:64:e5:1f:cc:
         e4:7f:72:a7:d6:6b:06:94:cd:d4:f1:17:86:03:82:d1:e4:aa:
         f5:d1:5f:70:c8:c0:3d:90:80:9d:cc:21:d3:44:45:83:dc:3c:
         9d:52:25:4b:12:91:f4:c9:1d:f7:51:ad:96:a4:64:4a:47:92:
         a8:0b:6d:3f:ab:51:e8:c3:a0:fa:16:6c:e0:97:3d:aa:d6:a4:
         71:5d:5e:44:20:22:b5:46:b7:f7:2f:06:c2:9e:f2:e8:f8:b3:
         ed:ff:04:95:2b:8c:7e:d1:1f:ae:2d:06:1a:d7:3a:7a:d4:bc:
         98:ad:b5:51:fc:db:b4:d8:2c:a7:26:e6:56:ea:f8:5b:52:e0:
         56:37:90:ed:93:77:1f:9c:b4:43:87:92:dc:ea:55:d1:4f:ea:
         5b:55:50:7f:b3:f6:24:f2:d8:85:37:1b:b8:e9:c1:41:e7:f3:
         15:63:9b:8b:df:de:19:71:a5:1b:cd:62:31:12:f5:00:24:de:
         85:5f:6e:b6:84:68:c3:68:4b:69:29:71:3a:52:92:e9:3d:87:
         bb:8a:60:ee
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 19:27:09 2026 by rpki-client