Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/f3a263b7-6c10-343e-9eb6-ddb5984d4ad6.roa
File:                     f3a263b7-6c10-343e-9eb6-ddb5984d4ad6.roa (raw, json)
Hash identifier:          nTsMdUaXn08/Kfe4MzCscwO/nwRJznSbhY/9b2YS7c0=
Subject key identifier:   FB:1A:93:2F:37:24:65:23:55:0E:A5:E4:AF:9C:56:B9:4B:4F:A4:19
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584DAAE051F0CB07C854E61B2380
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/f3a263b7-6c10-343e-9eb6-ddb5984d4ad6.roa
Signing time:             Wed 29 Apr 2026 13:00:31 +0000
ROA not before:           Wed 29 Apr 2026 13:00:31 +0000
ROA not after:            Tue 28 Jul 2026 13:00:31 +0000
asID:                     397212
IP address blocks:        192.81.185.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 15 May 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:aa:e0:51:f0:cb:07:c8:54:e6:1b:23:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Apr 29 13:00:31 2026 GMT
            Not After : Jul 28 13:00:31 2026 GMT
        Subject: CN=3f624724-b11f-47e6-9bd9-f498ea00b076
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:a4:8a:64:2d:77:9b:fe:8f:b2:4b:d3:4e:3f:
                    87:6d:bd:d4:9a:04:a5:c4:5d:a7:a1:68:dc:45:07:
                    5e:a5:71:9c:e8:60:ad:d1:d5:0e:f4:78:be:7e:78:
                    18:f3:e9:7b:b6:55:ea:ea:c8:91:dd:6f:b3:da:93:
                    73:ca:02:3b:7a:c2:83:ab:52:2d:a6:47:85:b5:5e:
                    06:21:5f:fb:e4:be:a6:59:41:11:74:aa:db:87:3a:
                    84:10:3e:07:f8:52:af:fe:c1:ea:e0:e4:11:8d:6d:
                    de:0d:98:75:c9:41:dd:29:28:85:1e:71:ed:49:94:
                    49:94:1b:6b:4f:98:e3:7b:4b:9d:38:e9:f6:16:54:
                    d5:3a:ee:b0:98:0c:f3:23:a5:83:e9:88:a8:8a:66:
                    1e:d8:02:14:96:be:4b:d8:92:d2:b9:12:3e:b8:84:
                    8b:26:c9:f5:f5:a3:b4:1b:54:65:3d:6b:3b:d3:23:
                    ba:96:88:79:f3:1a:89:7e:1f:b4:c0:b2:62:d0:78:
                    53:e7:7e:81:c0:a5:a8:02:80:be:e0:29:be:22:64:
                    ae:31:85:c4:9f:9b:1a:46:d1:7b:5d:59:c3:75:94:
                    f7:09:4e:29:17:c4:66:17:80:41:c3:59:a5:14:3c:
                    3a:a2:6c:c5:ee:6f:fb:8f:24:38:ed:ff:51:37:8c:
                    2e:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FB:1A:93:2F:37:24:65:23:55:0E:A5:E4:AF:9C:56:B9:4B:4F:A4:19
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/f3a263b7-6c10-343e-9eb6-ddb5984d4ad6.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.81.185.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         b7:fb:15:82:81:13:40:7c:7e:fc:c4:3e:63:09:42:cb:57:34:
         1c:5d:17:df:3a:db:4a:1c:e2:d3:82:57:72:df:32:24:58:cd:
         f8:11:f6:17:79:b7:1e:6f:e6:10:13:d4:35:51:b5:60:88:ce:
         ba:cf:23:38:4c:86:bb:24:14:83:17:0b:ad:46:a2:77:49:a7:
         18:ea:bd:53:e3:4a:1f:29:14:48:42:da:39:64:e7:53:25:1e:
         08:4d:d0:8c:40:20:4f:4c:3a:71:7b:4d:36:a6:ad:10:38:87:
         ea:aa:57:28:f7:8f:80:b1:59:15:63:09:35:5a:7f:b5:d1:03:
         c2:3c:2e:95:e0:36:4a:f8:8b:ee:25:6c:5d:b3:0c:d3:9d:72:
         c1:10:f8:e1:ec:79:65:07:74:f8:1c:0d:ae:21:11:34:04:39:
         6b:d9:8e:f1:89:5b:20:9e:da:69:6f:c5:4b:5b:88:77:8f:df:
         9a:ff:79:ec:82:0d:be:11:fb:f7:e8:9e:c5:27:c3:d5:fd:2d:
         fd:54:ff:71:d9:66:95:36:67:41:ba:7d:07:c3:02:6f:f8:7b:
         a3:33:76:e5:e6:9e:86:29:a7:a6:79:85:23:2f:40:88:02:20:
         b8:b9:fa:e5:62:71:fb:b4:11:aa:f8:f2:ab:62:23:bb:cf:cc:
         67:de:23:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 08:35:46 2026 by rpki-client