Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/3fa1b4c6-55dc-35af-b992-4101ab414964.roa
File:                     3fa1b4c6-55dc-35af-b992-4101ab414964.roa (raw, json)
Hash identifier:          06d4c954WulsOxLfgEuGKolr1skewd3Bt3REx5iRDfo=
Subject key identifier:   29:7E:71:4F:0E:20:D1:11:B4:0D:EE:3D:A1:28:3F:77:A0:3F:7A:20
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584E4AEF71EC3D595C1461ABE900
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/3fa1b4c6-55dc-35af-b992-4101ab414964.roa
Signing time:             Thu 25 Jun 2026 21:00:12 +0000
ROA not before:           Thu 25 Jun 2026 21:00:12 +0000
ROA not after:            Wed 23 Sep 2026 21:00:12 +0000
asID:                     396590
IP address blocks:        192.42.176.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 30 Jun 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:4a:ef:71:ec:3d:59:5c:14:61:ab:e9:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Jun 25 21:00:12 2026 GMT
            Not After : Sep 23 21:00:12 2026 GMT
        Subject: CN=648099ba-6154-481f-89da-02b3e2d09bc8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e4:ae:c2:35:40:a9:95:31:fb:78:82:c3:bb:c2:
                    09:6d:f3:f9:8c:7c:8c:e0:75:43:42:83:ec:fc:d9:
                    77:08:2e:dc:02:2f:b5:d7:8c:57:bd:c0:be:17:8d:
                    2f:4a:b8:0a:36:e6:d8:3c:83:5d:7a:27:a7:c5:19:
                    78:12:e6:15:2a:c8:e3:d3:d2:cb:f8:3f:09:d2:82:
                    0d:a1:1e:c7:59:0a:4b:20:8f:09:c9:41:28:88:86:
                    ed:66:d6:17:4c:ef:31:f7:8b:a1:5d:88:fd:a9:12:
                    33:26:c6:df:1b:1e:7a:74:5f:80:e6:ff:be:3a:ea:
                    10:b2:7c:18:dc:36:94:9e:42:0e:0a:07:03:65:4e:
                    d1:8d:65:27:7f:22:e9:ee:97:ea:37:f0:fd:99:d1:
                    b3:c3:44:ae:94:6e:94:4f:81:ee:76:4f:9f:e0:67:
                    e6:8f:b0:59:13:45:8c:f6:fb:57:7d:69:e6:b1:3a:
                    55:fe:42:2d:86:5e:ce:be:26:b1:f0:f2:bd:fa:c5:
                    29:ed:ef:fe:20:5c:cc:38:fd:03:ce:4d:83:9f:92:
                    6d:38:e4:9d:c4:b8:1f:85:c5:73:8b:5c:b2:f1:50:
                    3a:78:fc:29:e1:be:60:d0:b4:fd:9c:b2:dc:73:29:
                    72:17:e2:75:ae:5b:48:c5:bb:ce:d2:78:b5:27:9b:
                    05:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                29:7E:71:4F:0E:20:D1:11:B4:0D:EE:3D:A1:28:3F:77:A0:3F:7A:20
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/3fa1b4c6-55dc-35af-b992-4101ab414964.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.42.176.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         30:fe:d6:bb:a4:fb:5d:88:29:b0:58:41:53:8e:c1:c3:5a:66:
         c6:cc:52:ce:78:e7:5d:76:bc:47:57:26:76:fb:04:0b:93:1b:
         0c:d1:ee:4e:f2:6a:e5:9f:6e:02:cd:7e:93:02:ba:45:c6:56:
         db:e4:c7:ec:b7:69:5d:9a:8a:46:73:1e:6c:4a:a8:7c:e7:cd:
         e2:67:f5:3d:6d:29:4d:0e:74:09:1a:c7:0d:d9:e5:82:4a:7d:
         e0:84:36:2f:03:0f:d8:39:96:e0:20:0e:68:68:28:b2:ef:e2:
         5e:6f:e2:ad:a5:e0:1c:fd:0b:92:a4:67:b1:c2:6c:34:7e:1a:
         0e:3e:2d:3a:57:d0:4f:3a:82:6b:cd:e7:64:e2:6d:cb:32:e9:
         96:84:f6:87:72:e0:f1:dd:32:8d:87:80:89:59:de:fe:e2:c7:
         3b:73:b2:68:68:a4:f1:0b:ba:fd:cb:30:9c:2e:65:b8:d1:54:
         d4:60:00:3d:28:ea:59:de:36:6b:f2:ea:e6:e8:db:9c:c6:22:
         9f:55:6e:bb:ef:34:f0:9c:04:67:d9:91:01:c6:87:dd:23:5d:
         3c:ad:48:0c:4b:bc:e6:24:25:53:f3:ef:ff:67:7c:fa:a0:90:
         30:40:55:83:eb:bd:ad:36:90:f2:a2:8c:6a:96:19:d2:d1:4f:
         2a:d4:75:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 28 20:40:32 2026 by rpki-client