Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/1c021d98-ee01-31f0-9a37-efb52f5a5936.roa
File:                     1c021d98-ee01-31f0-9a37-efb52f5a5936.roa (raw, json)
Hash identifier:          xR4mcye8hJndejEKmQSmJemr6OPhjxEcWYLXiscwCLU=
Subject key identifier:   24:D1:AB:C5:3A:6A:81:CF:AE:AE:95:15:56:51:C9:63:3C:4E:EA:97
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584EC907208C80EF284B2899CEC0
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/1c021d98-ee01-31f0-9a37-efb52f5a5936.roa
Signing time:             Mon 10 Aug 2026 01:00:12 +0000
ROA not before:           Mon 10 Aug 2026 01:00:12 +0000
ROA not after:            Sun 08 Nov 2026 02:00:12 +0000
asID:                     36621
IP address blocks:        192.42.174.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 21 Aug 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:c9:07:20:8c:80:ef:28:4b:28:99:ce:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Aug 10 01:00:12 2026 GMT
            Not After : Nov  8 02:00:12 2026 GMT
        Subject: CN=26b1397c-2f98-463c-abdf-63c65b3560f5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:29:56:f1:f1:e8:af:67:fa:50:01:a4:44:5d:
                    f4:b9:4e:1c:a2:e0:64:c0:d5:18:db:f6:98:9a:8c:
                    e1:62:f5:f4:8c:62:95:bf:dc:83:06:a6:b0:89:ee:
                    64:53:dd:64:12:f7:b2:cf:ce:c2:5e:0e:c7:29:61:
                    86:49:ac:b9:f9:1e:cb:4c:22:c4:ab:14:19:1f:bf:
                    d8:f1:59:d8:4b:f5:31:99:00:ff:d6:10:06:ca:7d:
                    9e:85:af:4b:f5:ea:ac:c7:54:0e:69:6b:f7:e4:42:
                    6b:4b:45:28:6d:2d:80:f9:21:35:18:72:b5:57:06:
                    f9:90:c4:3a:35:0e:d2:ab:ae:61:53:24:5d:8c:ce:
                    6a:37:3d:9b:d8:41:08:b3:7c:fd:97:87:d6:b6:b3:
                    e4:19:1e:a8:a5:74:72:82:22:e1:17:90:71:fa:90:
                    5a:ae:13:f6:da:7c:d1:ad:28:31:aa:c7:ec:6f:0b:
                    f1:d9:20:b1:ef:41:e8:e7:3b:65:ca:21:12:f7:5d:
                    26:17:42:c6:73:8c:8a:b7:3a:8d:03:ef:67:b0:2c:
                    4c:a1:67:b3:0b:dc:a8:a0:f9:3a:a8:ef:3b:fe:75:
                    4e:19:19:f7:47:60:35:f8:eb:da:7b:d3:fd:67:86:
                    41:f6:c0:bd:71:19:97:e2:16:08:ca:12:b0:45:71:
                    cc:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                24:D1:AB:C5:3A:6A:81:CF:AE:AE:95:15:56:51:C9:63:3C:4E:EA:97
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/1c021d98-ee01-31f0-9a37-efb52f5a5936.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.42.174.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a3:4c:81:ca:34:6d:66:6a:96:e5:94:88:75:84:86:d6:fa:03:
         e6:3d:98:56:da:ca:18:79:1b:34:0e:7a:71:fc:79:8a:20:82:
         e3:e8:f7:22:c1:dc:b0:dc:10:4d:09:b3:93:b2:44:f1:5a:7d:
         6d:ff:bd:95:65:fc:b1:f2:24:6f:a3:55:40:22:3e:bc:ae:96:
         3a:e9:dd:59:1d:e2:62:1e:7a:7a:38:00:1e:a6:34:f1:cb:60:
         44:2f:df:4d:02:ed:cf:d5:29:a4:68:ff:1f:da:72:df:7a:48:
         48:9f:1a:c0:50:63:aa:85:70:40:a8:01:1a:de:04:c8:8a:ee:
         d7:47:04:7e:e7:09:5a:f9:17:ce:65:1c:9d:80:38:ff:eb:41:
         47:55:f2:f0:e4:4b:e9:8c:98:f3:03:32:cf:e9:d1:f3:d1:63:
         4a:6a:01:37:7e:49:ba:ee:27:ef:21:46:6c:7b:3d:ea:33:10:
         4b:89:ab:24:ea:18:59:87:e4:3a:5e:de:34:6c:95:82:d8:ba:
         21:8c:a7:96:30:83:a9:e3:45:40:cf:bd:e8:94:ac:8d:bb:8a:
         09:cc:d8:55:99:3c:bd:1e:02:49:b8:82:d6:48:d3:ce:35:62:
         46:80:f9:02:d3:c8:f6:15:c4:9b:11:89:27:36:32:b4:18:a2:
         37:3b:84:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 19 17:05:01 2026 by rpki-client