Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/5fd2c127-1a0c-37ad-b6ff-fb1ebbc2312f.roa
File:                     5fd2c127-1a0c-37ad-b6ff-fb1ebbc2312f.roa (raw, json)
Hash identifier:          rpEA1KHp6dX/Gi5NipbzCyIcFhTA8wKF2wvu+TKLa/8=
Subject key identifier:   82:DB:26:02:8F:12:71:72:37:6B:C4:B5:68:A4:24:7B:F3:79:D0:84
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584EC90714A07F502ADBFB463680
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/5fd2c127-1a0c-37ad-b6ff-fb1ebbc2312f.roa
Signing time:             Mon 10 Aug 2026 01:00:12 +0000
ROA not before:           Mon 10 Aug 2026 01:00:12 +0000
ROA not after:            Sun 08 Nov 2026 02:00:12 +0000
asID:                     20431
IP address blocks:        192.42.174.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 21 Aug 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:c9:07:14:a0:7f:50:2a:db:fb:46:36:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Aug 10 01:00:12 2026 GMT
            Not After : Nov  8 02:00:12 2026 GMT
        Subject: CN=210a5451-de5e-4f53-9642-a67f19da11ef
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:2d:82:8b:ec:60:8a:e5:26:99:05:ca:57:ed:
                    99:7c:f7:94:f0:24:5d:72:17:3f:be:cd:cc:4f:f2:
                    b7:c8:39:72:d1:ae:15:28:97:d0:55:97:c2:32:a3:
                    71:5e:f5:64:a9:8a:30:58:9c:6d:4b:6a:d9:e9:03:
                    6b:2e:55:36:bc:4f:76:d3:50:b1:dd:cb:18:55:28:
                    79:b4:ca:ee:11:5e:c6:8d:4d:77:78:73:92:56:5a:
                    44:35:69:d6:27:50:25:2f:1a:88:5f:a7:d2:de:48:
                    ac:15:43:ee:0b:3f:ae:83:e8:77:19:ed:45:0f:bd:
                    e5:d5:95:f1:c1:ca:3a:e8:9a:0e:07:a5:6f:bc:97:
                    de:36:01:e0:29:08:18:b6:8b:da:23:e8:dc:e2:54:
                    0b:67:77:82:94:3d:1d:30:1d:01:42:e7:33:a9:02:
                    1e:00:a4:47:fb:dc:14:ab:0f:cf:74:78:f0:00:29:
                    db:cd:81:57:5e:1b:e4:0c:bc:41:1a:d3:e6:bf:d5:
                    bf:8c:b8:88:ff:ee:28:30:e4:9f:ab:b4:63:bc:7d:
                    e0:cd:ce:8f:84:eb:2b:38:c0:1b:68:ec:c3:b2:45:
                    7a:3b:e8:b0:af:51:a6:6c:eb:05:c1:f8:3c:f5:c8:
                    6a:2d:04:8e:6c:9c:57:eb:96:45:82:8f:eb:8c:f0:
                    55:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                82:DB:26:02:8F:12:71:72:37:6B:C4:B5:68:A4:24:7B:F3:79:D0:84
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/5fd2c127-1a0c-37ad-b6ff-fb1ebbc2312f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.42.174.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7c:63:6a:97:ea:ee:16:58:d2:b5:74:dc:cb:33:ee:33:8c:f0:
         57:a7:6c:74:56:28:9b:f2:0a:c1:51:fc:78:dc:82:43:9f:74:
         bf:d0:a3:50:41:6a:25:36:5b:53:6d:e1:c6:7c:c3:11:f8:0d:
         db:64:dd:47:d8:89:5c:db:9d:2c:5b:16:95:63:f3:75:18:5a:
         db:84:ea:fa:46:03:7d:85:e2:62:5f:1e:42:dd:14:6e:e6:f0:
         5d:2b:11:cc:e0:72:0e:1e:c6:53:06:b1:de:3a:de:3b:e0:75:
         1d:aa:05:8d:5f:ee:fc:b0:f8:d5:1c:a2:99:66:76:6b:ac:74:
         c0:88:5d:37:9b:86:07:6a:f7:da:d7:3e:00:6b:88:f4:0e:27:
         98:a8:7e:82:5f:55:a1:08:49:d6:7c:a0:c1:3f:88:87:b1:d1:
         a3:a7:67:de:19:b0:e8:75:b2:bf:e4:13:96:78:41:c7:e5:21:
         55:55:99:f2:c1:9e:de:3f:45:9e:ba:eb:9c:a5:5d:f3:76:35:
         db:39:7d:8d:a3:9f:e7:32:09:c8:7c:6d:d3:c2:c8:91:78:e5:
         c3:86:d8:30:fd:db:3d:d1:01:da:f9:1d:85:2f:be:e0:45:d8:
         42:25:f9:c8:97:21:af:47:93:a8:a7:ac:7a:9b:d9:ec:db:a2:
         cd:13:1a:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 19 20:18:53 2026 by rpki-client