Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/62d4c69e-35b6-3f4e-959f-06e8556c3f5c.roa
File:                     62d4c69e-35b6-3f4e-959f-06e8556c3f5c.roa (raw, json)
Hash identifier:          IuhIIjb+LBLIYm2FP0utNjl+Dn7z/3itoyjzD4j1VX0=
Subject key identifier:   39:8A:4F:CA:5E:DB:27:56:3F:83:12:5A:B3:9E:6C:E6:3C:0E:7F:35
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584EC0A7620730B8ADE6C864A050
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/62d4c69e-35b6-3f4e-959f-06e8556c3f5c.roa
Signing time:             Fri 07 Aug 2026 01:00:12 +0000
ROA not before:           Fri 07 Aug 2026 01:00:12 +0000
ROA not after:            Thu 05 Nov 2026 02:00:12 +0000
asID:                     396752
IP address blocks:        192.58.128.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 21 Aug 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:c0:a7:62:07:30:b8:ad:e6:c8:64:a0:50
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Aug  7 01:00:12 2026 GMT
            Not After : Nov  5 02:00:12 2026 GMT
        Subject: CN=4520b2bd-db5a-47e5-ae77-fd8c8e983fcc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:d1:3d:7d:26:eb:58:8f:e5:7e:a3:81:3b:83:
                    27:4a:f6:b3:a3:56:07:e3:b3:b2:0e:88:b2:d5:94:
                    8a:c5:af:47:44:6b:52:c1:43:6d:f7:84:d7:47:32:
                    1e:38:e9:d2:e0:ad:0a:84:df:1e:ad:75:09:26:d5:
                    c7:5b:1e:e3:88:74:3b:50:55:1c:4e:c1:80:6c:b8:
                    5d:0c:41:5e:10:95:88:fa:03:01:ad:b2:77:7e:3d:
                    8a:6e:f1:f2:39:c3:77:0b:16:33:d8:69:b2:ea:7d:
                    e0:f8:72:1f:61:1f:cc:74:ef:97:db:15:18:4b:92:
                    05:91:d2:51:71:0f:c2:a0:2a:f1:1a:06:0d:63:8f:
                    81:7d:03:47:02:f0:27:b5:6c:5c:01:47:11:33:e4:
                    69:98:51:a5:f7:97:27:9c:3b:d9:e8:d9:42:92:b4:
                    67:fe:0e:48:69:6e:14:bb:78:22:f3:6d:d3:c9:9c:
                    39:91:b1:6d:8c:e0:cb:a7:d1:fb:bc:54:1c:5a:21:
                    54:73:65:eb:bd:c9:2f:44:d8:27:3a:a9:d6:e9:2c:
                    25:4f:1a:30:6f:28:4f:03:66:ef:55:07:68:15:f0:
                    06:cb:1f:8a:66:98:37:fc:ad:87:04:d2:52:50:cc:
                    cc:d1:1b:4b:6c:84:2a:7d:af:72:98:6b:cf:de:f0:
                    8f:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                39:8A:4F:CA:5E:DB:27:56:3F:83:12:5A:B3:9E:6C:E6:3C:0E:7F:35
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/62d4c69e-35b6-3f4e-959f-06e8556c3f5c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.58.128.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         91:e9:0f:e9:f5:c3:fb:ed:e6:fa:8a:df:4d:c7:29:1a:cc:de:
         d4:f6:0d:c7:95:01:6f:fb:fe:08:b8:b3:60:aa:4e:7b:0c:db:
         0d:50:02:35:d2:b7:15:34:37:62:e9:c6:c3:be:1d:bf:9b:d7:
         69:d4:28:b7:f6:cc:62:e2:06:d2:97:e6:ce:bb:09:df:f2:2d:
         4a:84:b0:3c:f3:4a:de:1f:b6:b0:76:70:3f:56:72:6a:30:7c:
         18:ba:3a:ad:ba:39:8e:e8:4f:b1:51:35:b2:79:7a:08:67:0d:
         96:cf:14:7c:34:23:2e:3a:fe:65:c6:5b:a8:b4:3c:46:68:fd:
         9f:f6:1f:62:52:35:ea:b4:79:86:79:ab:39:7b:5e:a9:6c:7e:
         a6:25:e9:55:5c:fe:d1:59:1d:1d:5a:56:2e:46:97:b4:62:1c:
         d5:ad:d3:bc:b3:13:70:58:fd:24:61:34:8d:bd:50:4a:30:ad:
         66:bc:80:7e:d1:3c:19:88:9d:cb:c5:2a:8d:ef:16:35:c8:19:
         d4:32:f2:c6:1d:ec:be:8c:e0:ce:92:fe:f9:2a:c7:d4:7f:63:
         35:17:ae:a3:9c:1d:73:29:a3:8e:8c:19:4e:b3:2e:17:80:2a:
         28:27:60:39:81:13:07:3b:cc:e0:8a:6a:84:46:af:6a:ef:ec:
         3d:b0:fd:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 19 19:13:45 2026 by rpki-client