Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/085b5802-60a5-3fea-9c2f-4caa718c6770.roa
File:                     085b5802-60a5-3fea-9c2f-4caa718c6770.roa (raw, json)
Hash identifier:          3bV1jOxGOhq8zii6sn85B9fjaSv9RioYG8yt4zyAFZM=
Subject key identifier:   D6:D0:51:46:A9:84:5C:CA:BB:30:E7:2E:38:58:06:97:54:60:78:AF
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584EC0A713BB93102663F5066200
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/085b5802-60a5-3fea-9c2f-4caa718c6770.roa
Signing time:             Fri 07 Aug 2026 01:00:12 +0000
ROA not before:           Fri 07 Aug 2026 01:00:12 +0000
ROA not after:            Thu 05 Nov 2026 02:00:12 +0000
asID:                     396617
IP address blocks:        192.58.128.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 21 Aug 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:c0:a7:13:bb:93:10:26:63:f5:06:62:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Aug  7 01:00:12 2026 GMT
            Not After : Nov  5 02:00:12 2026 GMT
        Subject: CN=2ca69c2d-3b75-4041-9a96-c43e6124d3a2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e2:70:2f:64:76:67:0c:a9:d3:7b:f8:ad:89:62:
                    3c:14:03:54:35:7e:7e:66:26:9d:1d:79:9a:16:5f:
                    68:74:82:92:a1:bd:5b:40:f5:bd:c1:2e:8c:a4:ae:
                    de:1a:4d:81:b1:af:ba:fe:62:9a:1b:e2:2d:4b:6f:
                    64:90:a7:ff:27:7f:e7:ad:4d:29:f7:f8:12:d3:5a:
                    03:4e:ff:38:c1:e8:93:7b:67:15:8b:c5:0c:10:64:
                    9b:4f:5b:3c:aa:ca:60:59:fb:96:6d:fc:7a:92:41:
                    51:57:65:bb:16:d6:9a:df:d1:4a:23:9d:f2:91:63:
                    17:3a:cb:4d:1a:b6:32:ef:e1:d4:50:cc:34:3c:2d:
                    13:67:27:15:aa:06:a5:b3:06:85:8c:04:36:18:b2:
                    52:6e:d4:74:8b:5a:15:b7:e6:67:04:aa:c4:6f:4d:
                    c7:ba:d5:4d:54:a5:21:05:ac:b9:df:d4:bf:13:36:
                    3f:14:3d:28:3b:0c:7c:8d:4f:ef:31:0e:94:1c:97:
                    df:1e:45:b7:03:14:6e:80:13:44:c8:86:ad:b2:06:
                    3e:b4:7f:c2:c5:cb:24:68:32:fb:b4:2e:ab:79:01:
                    12:20:b8:e5:59:62:96:d3:7e:56:6a:73:94:ee:bb:
                    3a:f2:f6:96:d4:31:d0:ad:79:43:a8:9c:3e:ce:ca:
                    2f:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D6:D0:51:46:A9:84:5C:CA:BB:30:E7:2E:38:58:06:97:54:60:78:AF
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/085b5802-60a5-3fea-9c2f-4caa718c6770.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.58.128.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         82:62:61:42:1c:17:4c:d0:bd:d8:56:8b:d3:2b:f4:2c:ae:41:
         06:1d:b2:3f:af:b2:38:c2:42:73:f5:6d:4e:ea:b1:a4:0e:6d:
         ad:4d:15:88:84:f3:7c:c6:db:f5:07:1f:28:de:15:bb:eb:18:
         b3:15:cb:ef:a6:85:25:e0:d0:cd:65:13:3e:4e:d3:a8:87:0c:
         0d:a8:8c:ec:a9:1f:24:52:3f:0b:07:8b:8b:40:f5:06:ed:79:
         66:64:83:63:db:bd:a2:50:84:af:a6:02:ec:a3:c7:97:62:f9:
         d8:77:2c:e1:19:d9:51:56:f2:df:85:b1:61:cd:78:13:f2:e8:
         df:62:f7:3f:86:81:81:d1:b1:90:15:9a:bc:70:8d:b3:88:d1:
         2f:c5:16:a9:6f:b6:2f:bb:8f:78:63:ee:d1:c7:6e:c5:72:5f:
         9d:1f:94:a1:07:ed:8d:f7:4f:a4:40:35:4d:01:13:56:f1:be:
         ef:38:ed:aa:8d:6f:3e:67:f6:11:cb:78:2d:b4:09:88:56:23:
         7c:4b:5c:a7:9b:68:ea:77:06:90:94:b3:8a:ee:51:3c:8a:a0:
         e3:48:11:4d:ad:cd:8c:6a:69:43:dd:c7:ac:8f:62:66:2a:15:
         22:67:ef:ad:91:f7:ea:b6:58:fa:2d:17:14:27:06:7e:22:57:
         9d:e2:6c:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 19 17:05:02 2026 by rpki-client