Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/444053f0-a33c-325c-b1e1-9678c98d100d.roa
File:                     444053f0-a33c-325c-b1e1-9678c98d100d.roa (raw, json)
Hash identifier:          rW3x7ZtUjXrNbQ9K5FgHPVytEhpSrWdoLShUzGr42i8=
Subject key identifier:   CF:85:99:67:19:1B:E3:1A:F1:D0:BD:C4:12:BC:B2:8E:02:E2:AC:9A
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584EB2B1FB57D3DA65018110B9C0
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/444053f0-a33c-325c-b1e1-9678c98d100d.roa
Signing time:             Sun 02 Aug 2026 01:00:11 +0000
ROA not before:           Sun 02 Aug 2026 01:00:11 +0000
ROA not after:            Sat 31 Oct 2026 01:00:11 +0000
asID:                     20172
IP address blocks:        192.68.126.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 21 Aug 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:b2:b1:fb:57:d3:da:65:01:81:10:b9:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Aug  2 01:00:11 2026 GMT
            Not After : Oct 31 01:00:11 2026 GMT
        Subject: CN=1994efe6-d99b-4985-bcf3-f398d92451be
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:8a:f1:2c:9a:fb:99:6b:b7:e6:c3:1e:b0:2b:
                    d1:00:13:a7:f2:3f:9d:ce:12:23:56:4c:8e:41:d7:
                    18:ca:9c:5c:a3:87:ee:a0:10:ca:9f:58:d5:da:53:
                    f5:97:d5:5c:bb:a1:4c:6f:79:70:fd:7b:ed:38:79:
                    41:40:2b:e8:4c:e2:e0:ae:b9:c0:2c:0d:28:e5:ac:
                    9f:24:33:f6:cf:d0:11:83:4c:e4:da:f6:df:43:1f:
                    63:55:e3:8b:b8:24:3b:9b:84:da:d7:cd:a7:63:4e:
                    da:f7:d0:e8:62:9f:3f:d8:7c:6b:bb:7e:24:f0:87:
                    91:65:d9:ff:09:31:f3:b3:d3:16:c1:a9:0d:e9:ec:
                    aa:2c:a4:49:82:0b:e6:7e:4c:63:55:4d:87:07:38:
                    0c:ae:ee:c3:d0:ef:a6:6c:7f:5f:d4:5e:a6:f2:de:
                    6b:c6:3a:62:92:f4:d3:67:c0:34:21:da:8d:a2:96:
                    27:b6:98:05:d6:d4:98:2d:cd:74:c1:54:5f:80:0e:
                    a6:8f:77:6d:8b:2f:83:c5:9b:28:8a:b1:12:73:a0:
                    a1:35:8c:e9:52:d0:95:39:71:12:77:c3:24:1c:7e:
                    a0:82:b6:9c:a8:d6:17:9a:f9:d5:10:60:dc:09:a3:
                    1d:57:c5:72:39:db:70:67:bd:b9:4e:4d:c1:23:69:
                    ed:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CF:85:99:67:19:1B:E3:1A:F1:D0:BD:C4:12:BC:B2:8E:02:E2:AC:9A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/444053f0-a33c-325c-b1e1-9678c98d100d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.68.126.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         ad:8c:e6:07:ec:0c:15:2b:29:39:30:02:98:23:15:26:d1:56:
         c6:fd:90:79:97:39:88:f0:43:6d:7d:09:5d:88:12:bb:94:a0:
         af:35:e9:82:7d:04:23:0e:27:d2:a1:06:c2:d7:b3:f2:b6:cf:
         2a:87:bd:db:a4:14:27:9c:b7:c1:f4:e3:36:95:97:35:14:80:
         dc:47:02:8d:9e:a6:a4:e5:f2:11:20:f9:28:c5:49:ec:0d:65:
         ba:41:3b:3b:8b:e9:2a:8b:fc:e2:57:1c:fa:2f:9f:1c:03:42:
         fe:c4:b9:0c:d2:21:f4:dc:d5:a2:a4:0a:04:25:c8:f4:81:45:
         15:74:38:0f:a2:46:5f:ef:ac:33:f2:05:3a:e2:24:24:4e:9b:
         60:d5:20:6b:b0:ba:46:94:33:92:62:9d:6c:77:a7:09:2d:59:
         63:1a:53:ec:f6:20:4b:b0:60:ab:50:31:42:34:3d:22:a0:3c:
         b5:d6:96:a2:20:df:24:fe:34:69:c3:72:ce:3a:cb:8d:90:ac:
         6c:43:18:b3:50:49:39:17:16:a7:10:fe:b0:21:57:7c:29:af:
         89:b6:50:9e:fc:cb:bc:46:f9:fc:ca:55:2b:09:b5:7c:20:e6:
         df:de:02:b3:ce:36:e4:25:07:30:95:a3:d6:b8:bb:2d:25:50:
         ef:12:7f:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 19 19:35:10 2026 by rpki-client