Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/ffb28a6f-2389-310f-b5d8-f0f7ad17f33a.roa
File:                     ffb28a6f-2389-310f-b5d8-f0f7ad17f33a.roa (raw, json)
Hash identifier:          fySJEOqCyC+MWK7vfrs5zZMRV0pqppxtq0nsoQnB61A=
Subject key identifier:   96:B7:B6:9B:6C:39:89:43:63:4A:3D:D0:AA:B4:92:3E:D9:AA:13:D1
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584E8B24E8B01B213F78E7946A40
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/ffb28a6f-2389-310f-b5d8-f0f7ad17f33a.roa
Signing time:             Sat 18 Jul 2026 21:00:11 +0000
ROA not before:           Sat 18 Jul 2026 21:00:11 +0000
ROA not after:            Fri 16 Oct 2026 21:00:11 +0000
asID:                     36628
IP address blocks:        192.81.185.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 26 Jul 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:8b:24:e8:b0:1b:21:3f:78:e7:94:6a:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Jul 18 21:00:11 2026 GMT
            Not After : Oct 16 21:00:11 2026 GMT
        Subject: CN=e92afd7e-8ea3-48d4-8f6a-4b850a0d9a11
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:44:63:86:a9:5f:29:7b:f7:4f:2b:a7:83:99:
                    53:0d:c8:a4:32:38:81:02:25:77:f9:f0:e7:c6:e3:
                    0a:62:88:93:ca:d6:f7:c5:9d:40:37:29:ed:f7:d6:
                    cd:9f:de:83:cb:e9:b2:32:a2:96:82:a4:42:33:8e:
                    45:f6:a7:b6:14:67:1c:5d:46:e7:d1:af:09:59:32:
                    fc:dd:35:d8:68:dd:69:6e:92:83:8d:0e:f9:a3:bf:
                    65:0e:9f:cd:ee:a1:90:e6:2f:6c:63:d9:b7:66:f3:
                    64:20:34:e2:cf:b9:99:49:d8:6f:78:14:ff:bb:9a:
                    39:a2:89:f1:f5:be:e7:6c:9f:f4:d2:7a:d2:55:a9:
                    24:18:02:41:5c:bd:d8:32:1a:8f:b4:7e:53:f7:fc:
                    d4:f1:42:04:75:a7:6f:20:70:eb:56:1c:49:01:09:
                    42:11:b8:9a:9b:da:2c:7f:25:13:0d:b8:88:75:93:
                    3e:1d:a4:59:8f:75:bd:83:67:00:2a:6e:46:0f:05:
                    b8:76:3b:0d:c2:0e:65:a0:41:be:57:35:af:4e:60:
                    86:b4:56:fb:19:a6:ba:d0:0d:4d:5e:68:2f:16:32:
                    b3:59:6c:4a:fd:e9:1d:b6:c6:2f:92:64:08:78:a4:
                    80:3d:bc:3e:45:3d:9c:34:03:d5:fb:a8:18:90:ee:
                    55:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                96:B7:B6:9B:6C:39:89:43:63:4A:3D:D0:AA:B4:92:3E:D9:AA:13:D1
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/ffb28a6f-2389-310f-b5d8-f0f7ad17f33a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.81.185.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         61:f0:fa:a1:13:c7:3e:e4:d4:f5:31:fd:0f:a4:f6:61:57:e6:
         26:29:93:89:1c:72:1e:72:12:8b:7c:9b:5c:20:a6:a0:39:65:
         1b:ce:36:84:a6:3b:7c:9f:2c:e5:1b:21:0c:a5:37:24:80:58:
         2f:1b:95:d1:1f:6c:01:c1:e8:95:29:ab:e5:86:45:f7:48:52:
         df:f8:1f:42:37:1d:18:a4:1a:7b:0d:7b:aa:0f:c7:7a:70:6d:
         20:6f:01:dd:28:9e:ad:f6:6f:5e:9d:fb:04:a2:1b:7e:66:4d:
         bd:1e:af:0e:34:f8:ea:b9:8e:63:49:8e:f1:d1:31:a4:69:f5:
         5e:02:56:66:ab:5a:a3:de:f0:18:f5:e8:1c:fb:68:15:9c:80:
         f7:3d:dd:c1:d6:9a:11:0d:e8:96:03:98:05:9a:f5:7e:0b:75:
         8e:e8:99:a2:d1:ae:3c:17:58:58:67:07:ff:eb:45:69:90:e2:
         31:1d:4c:6e:81:2d:b6:1c:b0:56:7d:21:7f:f1:27:26:cc:95:
         b5:40:32:7e:f3:28:f7:70:5d:e7:57:13:4f:87:e4:bb:ec:c7:
         92:f4:42:eb:bb:23:4c:89:30:ae:c6:d7:9b:36:bc:12:ca:bf:
         fb:2a:2d:1e:bd:54:48:96:11:73:4e:c2:a8:ee:b5:e0:79:97:
         ef:e5:bb:4d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 11:52:11 2026 by rpki-client