Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/1f3a628a-1f11-3301-aca8-a31667c52a86.roa
File:                     1f3a628a-1f11-3301-aca8-a31667c52a86.roa (raw, json)
Hash identifier:          5HND7vI05wfHv4S5F1+DIGHhdH+At2vZM0xrYWzOqYk=
Subject key identifier:   DB:65:B0:6F:3E:AD:5B:4E:5C:5E:CB:78:50:CD:87:95:33:CE:DF:CB
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584EA799BBD959BAE0549010A480
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/1f3a628a-1f11-3301-aca8-a31667c52a86.roa
Signing time:             Wed 29 Jul 2026 01:00:12 +0000
ROA not before:           Wed 29 Jul 2026 01:00:12 +0000
ROA not after:            Tue 27 Oct 2026 01:00:12 +0000
asID:                     32651
IP address blocks:        192.35.51.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 21 Aug 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:a7:99:bb:d9:59:ba:e0:54:90:10:a4:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Jul 29 01:00:12 2026 GMT
            Not After : Oct 27 01:00:12 2026 GMT
        Subject: CN=52d54e4b-fe4e-4043-a5ac-acf539ec0011
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:a0:dd:46:f1:68:8d:c3:31:ee:a9:cd:4e:2e:
                    05:53:04:e5:26:23:d3:60:a4:33:78:a2:7f:9d:1a:
                    42:47:4d:83:3f:fb:38:33:54:cd:24:10:94:53:64:
                    19:e3:b5:5f:92:54:1d:35:8f:9e:7c:f3:1b:82:01:
                    2f:4b:39:56:ca:94:0e:58:21:9f:62:89:b8:e3:e7:
                    2c:87:af:fb:d3:fa:fd:b1:59:df:52:02:32:f3:db:
                    00:6e:e0:25:64:c9:43:29:fa:ca:b7:66:eb:47:30:
                    6e:de:6e:fa:35:39:2f:ce:80:09:ce:d6:24:38:ec:
                    2b:c3:70:51:36:16:79:33:4a:20:f2:24:1d:70:71:
                    f4:46:29:22:32:1f:6d:08:99:7a:32:14:88:46:ca:
                    e2:c7:e9:31:4a:06:9f:4a:99:30:83:18:c4:b6:96:
                    54:80:f6:74:6d:11:70:06:05:f6:97:df:7d:ea:89:
                    af:b5:7a:82:86:21:52:cd:d6:99:7b:e0:cc:9c:80:
                    5f:e0:0d:f7:0f:e1:cf:2d:2d:82:fd:d6:b1:35:31:
                    c2:c1:64:c5:12:51:a1:5b:e3:d1:78:f0:21:88:6c:
                    75:b0:65:35:58:17:1c:35:1b:a4:82:16:6b:c5:2a:
                    f2:35:1c:aa:6c:3a:7f:3f:e3:60:8e:2d:22:83:1b:
                    7d:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DB:65:B0:6F:3E:AD:5B:4E:5C:5E:CB:78:50:CD:87:95:33:CE:DF:CB
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/1f3a628a-1f11-3301-aca8-a31667c52a86.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.35.51.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         31:a9:ae:74:cf:e4:29:23:33:69:cb:d5:2b:b6:17:b4:78:0c:
         a5:45:9f:05:98:4d:89:27:a0:f0:62:69:50:4a:52:1b:23:fd:
         52:e2:48:be:ba:4f:ed:49:43:20:7f:1f:0f:5d:19:3f:50:d7:
         a0:e4:b4:7c:93:b4:2f:d2:06:ca:b5:e5:99:39:f4:84:77:9f:
         1f:5c:1f:a4:9a:9c:40:5e:38:7b:32:2d:5c:d8:1c:56:ff:cb:
         91:33:bd:4e:85:94:62:72:82:ce:7d:a4:da:0a:87:9d:11:8a:
         c1:11:9d:65:fb:d8:ac:8d:46:c9:3f:f1:6b:82:27:9b:32:2b:
         24:78:44:69:8b:b1:b6:bc:d4:fc:ec:ad:9c:8f:51:af:b4:df:
         4c:47:3a:0a:5c:16:63:73:b2:e1:28:24:ef:be:56:70:77:9d:
         a3:e3:d9:76:29:e9:31:87:13:89:a8:c3:c0:f6:ad:05:04:f9:
         c3:b8:94:95:9e:e2:0e:8a:d5:89:87:a4:8a:45:e3:d5:8e:0f:
         24:83:52:3a:74:ba:d7:bf:d8:2b:83:5c:93:eb:c4:0d:85:f4:
         ff:a2:12:f5:f2:bf:91:52:cb:f1:12:b2:26:77:0f:75:52:57:
         40:b4:ce:97:f7:32:be:76:16:0a:eb:c0:c0:28:cf:5f:1d:3a:
         42:18:b4:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 19 17:08:43 2026 by rpki-client