Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/f9df2622-d736-3cff-a9e9-857ddacac872.roa
File:                     f9df2622-d736-3cff-a9e9-857ddacac872.roa (raw, json)
Hash identifier:          Yrk/8uJ+m/ReXNHIO/oxCx7IfMGUYlDrHBKNR9f9Nns=
Subject key identifier:   BE:74:03:B3:2E:DA:7C:18:10:14:D8:2D:FD:F6:79:05:BE:E8:30:D5
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584D46B1170EE356646167D6FD40
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/f9df2622-d736-3cff-a9e9-857ddacac872.roa
Signing time:             Tue 24 Mar 2026 15:44:58 +0000
ROA not before:           Tue 24 Mar 2026 15:44:58 +0000
ROA not after:            Mon 22 Jun 2026 15:44:58 +0000
asID:                     396541
IP address blocks:        192.42.174.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 28 Mar 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:46:b1:17:0e:e3:56:64:61:67:d6:fd:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Mar 24 15:44:58 2026 GMT
            Not After : Jun 22 15:44:58 2026 GMT
        Subject: CN=0d3b6d6f-8b6e-411f-a75a-73f13218dd82
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:e0:8a:d9:68:77:56:07:e8:f5:a2:b9:2e:51:
                    c1:63:3f:d0:d9:bf:11:d6:75:b8:ee:78:47:a0:bd:
                    79:32:a7:f3:db:80:9c:e3:c4:6e:1e:bb:c0:36:35:
                    4a:f2:2d:fd:aa:65:49:cd:bf:c7:0a:99:7e:16:c4:
                    25:b7:b3:9a:ac:08:f7:77:46:d0:d8:3a:74:c0:f4:
                    81:09:08:dd:b8:d8:32:a4:b0:5f:26:4c:55:12:1a:
                    29:c7:5f:da:4c:8d:d8:8c:dd:8d:4b:f0:bc:0c:28:
                    8f:b2:55:bc:ef:17:55:4d:95:61:51:db:4d:9f:c6:
                    6a:ae:a1:d8:a8:b1:bd:d8:51:bd:bf:60:6a:f0:45:
                    ce:05:74:20:99:b2:b5:1f:b2:d6:b6:ea:13:de:18:
                    b7:cd:1a:92:c4:7a:29:c6:36:ca:a7:03:f9:e2:5f:
                    2f:68:da:6b:77:98:c8:56:45:63:ec:f2:0a:69:02:
                    3c:55:1e:4a:1b:aa:15:52:a6:ee:7a:b0:b7:8d:83:
                    a6:b9:23:cf:0f:80:eb:7f:0f:c8:9f:34:23:bd:71:
                    89:21:be:8b:87:23:95:b2:e7:b1:8e:cc:d5:86:72:
                    a3:5b:a7:97:08:30:a6:54:bc:f8:e8:73:7b:eb:21:
                    d2:c6:62:b0:5f:c7:da:84:56:2d:26:cc:8a:b7:6f:
                    8c:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BE:74:03:B3:2E:DA:7C:18:10:14:D8:2D:FD:F6:79:05:BE:E8:30:D5
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/f9df2622-d736-3cff-a9e9-857ddacac872.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.42.174.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3b:56:14:75:de:f4:03:f3:af:48:41:26:ac:ce:a9:ff:41:b0:
         53:0a:86:fb:86:f9:c8:98:ff:8d:ce:c0:db:f6:09:e8:08:b1:
         e1:d6:a5:a4:d4:5d:b1:e1:31:2e:cb:1f:3e:b1:e2:2d:ba:fb:
         b5:83:bb:34:7f:6f:72:98:63:bd:c6:a4:25:90:e6:d7:8c:3a:
         3d:47:bc:65:a2:4f:8c:94:79:5b:0d:1b:37:4d:75:bd:7f:c0:
         6f:ed:14:e0:4b:da:d6:93:3d:31:77:ad:84:3e:10:c1:04:6d:
         7e:a8:cd:0c:fb:90:d8:0f:31:24:8a:17:9b:d0:7f:af:91:2e:
         51:6d:83:af:45:8a:c7:ee:76:71:c0:21:f4:af:9a:bf:aa:19:
         fb:2c:eb:42:46:4f:25:16:4a:36:11:01:9a:22:00:6a:88:9b:
         97:51:58:16:95:8c:b2:c7:6e:25:bc:44:ed:79:96:df:9a:d9:
         58:0e:85:55:8e:8b:a3:60:42:47:b3:70:ce:72:5c:9b:c9:65:
         d5:8a:47:19:af:66:60:cb:ec:6a:3c:ea:c2:06:3e:ec:3c:ff:
         d2:ad:df:f5:0b:bb:4e:99:85:04:40:73:4c:a8:ad:c6:d1:3e:
         98:4c:2f:c7:e4:6e:0a:ff:c0:a3:b5:62:f1:51:4c:eb:e2:97:
         84:a4:6b:d0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 08:40:24 2026 by rpki-client