Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/f1f1b25b-87f4-3257-b0b4-d598e34f58cd.roa
File:                     f1f1b25b-87f4-3257-b0b4-d598e34f58cd.roa (raw, json)
Hash identifier:          SR2UsFtga3MvTDxQxCT6GQJs0sybrYyQRC33QAhpUOM=
Subject key identifier:   AE:8C:C8:FE:85:CB:76:5A:F4:6F:33:AE:8F:7D:9A:C9:7E:C1:F9:E4
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584D3E001517C3D6D6968FFDBF80
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/f1f1b25b-87f4-3257-b0b4-d598e34f58cd.roa
Signing time:             Sat 21 Mar 2026 13:00:39 +0000
ROA not before:           Sat 21 Mar 2026 13:00:39 +0000
ROA not after:            Fri 19 Jun 2026 13:00:39 +0000
asID:                     396580
IP address blocks:        192.58.128.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 28 Mar 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:3e:00:15:17:c3:d6:d6:96:8f:fd:bf:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Mar 21 13:00:39 2026 GMT
            Not After : Jun 19 13:00:39 2026 GMT
        Subject: CN=1735ec8e-9a17-4a27-9587-caafc271ebb0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:51:ec:fa:e4:76:df:6a:6c:38:ef:45:19:6e:
                    ca:23:d3:82:8b:96:84:b0:f8:36:8e:ab:86:ca:a3:
                    89:ee:65:6f:34:55:b6:69:59:7c:c4:36:15:89:c6:
                    be:e9:a9:f5:79:09:ed:ec:0b:6c:cb:b0:5d:e0:88:
                    ed:9a:5d:7d:3c:44:fe:07:76:94:ea:ba:bd:9e:ef:
                    2e:48:1c:5d:19:11:7a:6a:9a:db:3f:c5:f6:65:be:
                    52:56:e3:79:39:ef:21:8b:e4:7e:9a:09:c9:07:ca:
                    83:aa:fa:c9:db:ae:2d:fc:4f:c5:09:69:ca:b7:9b:
                    f4:2b:19:43:bb:7e:8c:c3:81:4a:d8:67:86:fe:74:
                    d5:eb:11:d8:2e:f3:0e:5c:29:96:3b:ea:8a:40:e3:
                    2a:79:ab:4c:21:7e:39:13:29:52:8e:52:bf:c9:d6:
                    5d:95:0d:84:99:3f:16:8b:5b:05:27:a4:b0:47:b4:
                    39:56:0d:3b:d3:e8:35:a4:12:36:f2:0e:11:35:7d:
                    6d:3e:e4:25:d2:89:fe:04:70:96:5b:38:61:a8:80:
                    69:e9:54:b7:e5:9c:58:71:ef:14:d4:2b:11:8c:b3:
                    69:7c:bd:8f:f0:a8:06:91:c2:d2:9d:92:83:61:63:
                    77:97:88:fa:39:0a:43:91:ff:fa:53:bc:47:ba:aa:
                    eb:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AE:8C:C8:FE:85:CB:76:5A:F4:6F:33:AE:8F:7D:9A:C9:7E:C1:F9:E4
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/f1f1b25b-87f4-3257-b0b4-d598e34f58cd.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.58.128.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7d:0c:08:bf:5d:b4:76:4f:2f:5b:26:18:f3:7f:8c:cb:a3:d3:
         31:57:2f:bd:8b:8b:59:4e:5c:89:51:75:cd:5b:f3:e5:6a:62:
         f5:f5:1b:4b:61:7b:0a:eb:e1:b3:81:ce:f5:d3:80:de:80:85:
         1b:74:3f:2a:d6:da:62:4b:10:75:ba:45:2d:e6:ed:2c:7a:fa:
         1f:55:f0:04:77:7e:ef:76:1a:99:e0:1c:a0:79:f3:da:57:24:
         a2:8d:0d:ec:de:c8:00:76:1f:a0:8e:61:31:ac:f0:0a:e8:07:
         7d:53:f8:2f:f7:a0:48:1d:ef:ed:0c:3c:4e:41:92:83:50:54:
         e6:7b:f2:2c:6f:ec:e6:d6:92:01:6e:96:0c:37:91:4e:c0:58:
         55:09:37:51:b6:7a:ba:41:a6:30:57:17:7b:41:ea:4b:7e:5e:
         b8:64:3e:a8:ba:d8:c7:40:5a:1d:68:4c:20:ef:ba:7a:11:82:
         b5:25:55:9a:30:67:1e:f8:6a:6e:37:14:63:a9:51:59:df:42:
         63:5c:90:d5:f3:9e:1d:45:27:d2:14:15:8f:8f:f3:1e:e3:23:
         12:c7:26:4f:aa:98:a1:a9:8c:b4:97:c0:a1:05:a9:0d:72:5a:
         55:b5:7d:c7:fc:4d:3c:de:05:3b:14:c2:f0:16:35:00:34:04:
         81:e7:2d:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 13:55:09 2026 by rpki-client