Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/fa8ebb64-b098-33d0-a3db-845f0a8e5311.roa
File:                     fa8ebb64-b098-33d0-a3db-845f0a8e5311.roa (raw, json)
Hash identifier:          9JMBdEyESzUHCtfJ/QowVsIZj6sVrGD2MVSQIVUFspw=
Subject key identifier:   43:1D:D4:41:C2:90:B6:B3:E1:D9:2F:0F:87:ED:8D:F3:A9:9A:5B:B4
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584D300A3757197B145F5649BF60
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/fa8ebb64-b098-33d0-a3db-845f0a8e5311.roa
Signing time:             Mon 16 Mar 2026 13:00:40 +0000
ROA not before:           Mon 16 Mar 2026 13:00:40 +0000
ROA not after:            Sun 14 Jun 2026 13:00:40 +0000
asID:                     397211
IP address blocks:        192.68.126.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 28 Mar 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:30:0a:37:57:19:7b:14:5f:56:49:bf:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Mar 16 13:00:40 2026 GMT
            Not After : Jun 14 13:00:40 2026 GMT
        Subject: CN=24432e9f-726c-4f81-aacb-dcaa9190d1c9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:ab:09:78:d0:68:56:80:e1:79:85:81:cd:28:
                    d1:15:56:07:13:6b:e4:39:61:b2:3e:78:51:f4:c8:
                    f0:f7:76:fb:68:15:5a:c4:7e:be:10:a8:c4:50:13:
                    47:40:ce:57:ef:55:95:8f:87:ac:c8:21:0a:72:51:
                    d6:73:7a:5a:58:31:9c:9b:c0:6a:88:a1:e4:7e:f2:
                    b6:7f:6b:21:a9:a8:8b:95:38:72:84:ea:2f:6e:18:
                    d2:d2:41:0e:b5:7b:c6:46:52:0e:24:d2:7f:78:95:
                    15:e3:e9:60:e4:0f:4a:2e:da:64:50:60:d2:df:f3:
                    82:7d:fc:76:65:5a:df:8d:c2:f4:f3:4b:98:c2:57:
                    f7:04:54:78:84:08:f6:77:8d:ac:a3:80:4e:36:61:
                    fb:09:c4:42:a7:65:f0:6d:2f:ae:ec:73:67:95:60:
                    4b:67:ba:66:25:9a:ea:f8:37:9e:8d:dc:8b:ec:a2:
                    be:df:e4:cb:11:d3:c6:53:51:02:9f:ac:6b:06:3f:
                    fa:bb:3e:9a:4a:dd:ff:ac:8e:0c:2b:75:2c:ad:3a:
                    11:bf:e1:f6:1d:79:07:14:b5:5f:a7:76:29:e9:4e:
                    94:b7:10:5a:3b:1b:ea:94:21:b1:de:de:ad:25:09:
                    9b:51:04:65:6e:d9:47:29:d2:b1:2a:89:fd:4a:80:
                    9c:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                43:1D:D4:41:C2:90:B6:B3:E1:D9:2F:0F:87:ED:8D:F3:A9:9A:5B:B4
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/fa8ebb64-b098-33d0-a3db-845f0a8e5311.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.68.126.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         73:34:76:2c:eb:4a:ba:f8:e0:0c:46:3f:dc:26:92:4e:73:c2:
         49:0e:1c:db:16:e3:e3:49:8d:08:8c:8e:3e:2f:ac:1f:bf:08:
         f0:72:23:6b:af:cd:17:e7:bd:50:fd:39:31:fe:5d:a4:5c:ae:
         65:4a:2e:ab:ee:d5:07:3e:76:da:d0:f9:c3:bb:44:f9:67:0b:
         e1:c0:f8:be:02:55:85:63:2f:1a:24:20:b8:38:5f:c8:ea:80:
         27:f8:4e:50:4e:4d:66:a5:42:dc:a3:81:20:96:d2:03:fd:72:
         8e:02:6d:ee:ac:3f:c3:bd:c2:ad:34:3a:20:d3:cd:a1:5f:34:
         d7:79:0d:38:86:82:70:a1:62:f3:2c:d4:9a:05:46:89:98:16:
         e1:af:ee:1e:95:cc:47:60:45:f8:16:0b:d3:f6:59:64:22:40:
         04:d4:c5:a5:60:f0:49:50:1e:f7:4e:c7:00:a1:ab:89:4f:7f:
         47:f9:5d:b8:ed:29:1f:a7:17:88:59:dd:c0:f7:e8:58:b5:c9:
         81:21:a0:5f:4a:1c:3e:ef:e6:bf:5e:61:f4:c2:3d:a8:ad:92:
         0b:47:e5:20:ba:7f:32:ff:c4:b1:2e:1b:6c:10:68:1f:a5:51:
         45:68:bf:4f:ad:c9:de:4e:77:82:8e:b0:64:89:ab:6b:85:2f:
         01:02:a2:55
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 09:07:56 2026 by rpki-client