Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/74f7bf2f-ad4d-3cc6-b36a-6084f444ffb6.roa
File:                     74f7bf2f-ad4d-3cc6-b36a-6084f444ffb6.roa (raw, json)
Hash identifier:          YZxun3dVdFHjrgFst5odkt2jXkRA/6OC4yZl83TkN90=
Subject key identifier:   0F:57:3B:C1:27:DA:68:CB:1B:A2:58:CA:49:81:78:00:B9:62:69:F9
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584EB2B1A3FB6DC1906E87AA8488
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/74f7bf2f-ad4d-3cc6-b36a-6084f444ffb6.roa
Signing time:             Sun 02 Aug 2026 01:00:11 +0000
ROA not before:           Sun 02 Aug 2026 01:00:11 +0000
ROA not after:            Sat 31 Oct 2026 01:00:11 +0000
asID:                     36616
IP address blocks:        192.68.126.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 21 Aug 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:b2:b1:a3:fb:6d:c1:90:6e:87:aa:84:88
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Aug  2 01:00:11 2026 GMT
            Not After : Oct 31 01:00:11 2026 GMT
        Subject: CN=7e8fd26e-0480-4e32-b113-a4df9f222c99
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:89:3d:64:fb:5d:ea:95:5a:ee:10:86:7e:7d:ea:
                    de:b9:1e:ac:22:2d:f2:a4:10:ea:d8:40:f5:54:5a:
                    73:52:57:f2:a9:2f:38:07:9f:54:8e:37:04:67:ea:
                    90:9a:f0:e7:37:d1:e7:09:be:20:10:0d:41:57:f6:
                    b1:66:ff:be:83:14:6b:a8:be:16:8d:c4:d4:f7:db:
                    74:28:30:cb:d6:c9:ff:d8:35:6e:fd:ae:91:db:ae:
                    dd:60:8b:aa:d1:0b:b5:ad:d0:af:f1:67:7a:04:4c:
                    bd:da:83:81:c0:12:9e:f7:c9:fb:fd:f8:5d:af:b1:
                    34:48:0f:5e:84:20:56:ad:7b:52:c8:08:a1:5a:19:
                    9c:96:05:e5:5f:0d:ad:15:85:32:81:3c:c4:9b:74:
                    13:8b:66:a9:b7:b3:ff:36:5d:22:71:d3:6b:7a:f0:
                    bd:01:7c:0c:17:58:83:ad:40:db:bd:29:5c:f9:69:
                    28:40:25:58:6a:70:05:a0:86:ce:c4:08:c8:89:0d:
                    2b:54:fe:79:61:e1:a1:a7:f1:32:53:8e:fa:05:59:
                    fe:10:97:36:b2:3d:c8:51:01:72:a7:fe:1f:83:0b:
                    f3:32:8c:59:56:41:2d:f9:93:86:08:9c:7b:ed:74:
                    64:ab:72:f1:5c:4f:17:c2:8d:a7:e3:19:ca:28:61:
                    13:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0F:57:3B:C1:27:DA:68:CB:1B:A2:58:CA:49:81:78:00:B9:62:69:F9
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/74f7bf2f-ad4d-3cc6-b36a-6084f444ffb6.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.68.126.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5e:2e:36:5a:d0:f9:3e:d2:c3:e8:18:8c:23:dd:fd:a8:08:1c:
         25:06:8f:0a:99:b7:3a:ab:cc:be:c9:6d:82:89:f8:16:24:81:
         0f:7c:a1:10:d0:28:84:62:e6:ba:db:f0:19:32:9b:d0:1e:c6:
         a6:e0:2f:65:19:1f:a2:43:bf:03:69:f1:f7:f8:5d:28:39:2e:
         0e:04:e5:27:c9:12:72:8c:8b:a7:73:0d:b3:62:c6:7b:c1:a6:
         dc:fd:40:db:e4:a2:b3:ba:be:f7:8c:8c:1b:ce:71:3e:80:32:
         79:cc:5c:ac:5c:af:b9:d5:18:92:7f:b5:e9:28:61:06:93:fa:
         51:28:56:2e:cc:33:eb:4d:d0:cc:ff:91:36:a8:be:f9:0e:3d:
         c6:1b:5f:59:a9:de:ea:06:e6:f7:71:38:25:99:55:55:2d:fa:
         5e:58:9b:ff:84:6b:ad:ed:96:e6:02:88:56:74:af:44:c2:d7:
         b7:61:db:99:03:22:5e:79:a6:77:cd:0b:07:79:95:5d:fe:0b:
         76:13:5a:a8:5e:bc:ed:47:ae:f1:29:62:3b:59:b2:80:d6:91:
         e5:cc:00:35:fe:2e:00:01:3b:5f:91:48:c7:5d:08:8b:aa:b4:
         1e:19:7e:86:0c:05:7c:b4:8e:ac:36:94:59:15:13:ee:a7:7b:
         32:0a:31:98
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 19 19:31:37 2026 by rpki-client