Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/828524cf-67fa-3af4-a2b2-686655d5027d.roa
File:                     828524cf-67fa-3af4-a2b2-686655d5027d.roa (raw, json)
Hash identifier:          opBvjD44jdRgugsJ5lroLbuL6T4bDTpZosyuYtu9wFA=
Subject key identifier:   9C:14:D7:8B:82:66:A7:31:CA:0C:18:82:C3:74:13:5E:4E:8B:C9:5B
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584EA787AE2FFBA5863FD0437900
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/828524cf-67fa-3af4-a2b2-686655d5027d.roa
Signing time:             Wed 29 Jul 2026 01:00:12 +0000
ROA not before:           Wed 29 Jul 2026 01:00:12 +0000
ROA not after:            Tue 27 Oct 2026 01:00:12 +0000
asID:                     25485
IP address blocks:        192.26.92.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 21 Aug 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:a7:87:ae:2f:fb:a5:86:3f:d0:43:79:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Jul 29 01:00:12 2026 GMT
            Not After : Oct 27 01:00:12 2026 GMT
        Subject: CN=ee7ba151-def9-45fc-aaf8-83ca696d7d1c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:ec:67:4a:8b:05:78:79:26:42:fc:7b:3a:cf:
                    d0:46:ba:0e:fe:94:d0:47:8a:55:b4:96:eb:69:78:
                    dd:ee:ca:42:d7:fd:eb:61:6b:09:8c:c5:62:eb:f5:
                    33:db:67:96:eb:c4:90:64:f3:e7:ef:e0:ed:75:65:
                    52:88:27:40:6c:57:d2:1c:9a:83:72:20:4d:de:a1:
                    0a:20:d6:f7:d5:a0:9c:03:91:7b:42:a3:ac:63:07:
                    89:2e:2d:b4:06:88:01:c0:4d:ed:fe:34:3f:c7:15:
                    cd:33:14:b4:db:d7:9e:bc:79:7a:27:7d:e9:d1:2e:
                    c0:c3:0f:3a:76:6c:4a:cb:de:af:45:a0:f0:b4:0c:
                    fe:24:c1:63:e6:4e:52:f3:78:d4:14:97:9f:f2:e7:
                    2a:6e:52:21:11:ba:6c:e9:6d:8f:ec:32:58:4e:cc:
                    f7:71:c0:b2:87:1f:0b:d5:f4:39:20:be:0e:57:74:
                    79:d3:c9:3a:96:64:b9:ef:ec:da:19:54:3c:74:6d:
                    52:7e:0f:58:99:05:c2:3f:a4:0f:a5:8d:00:77:e0:
                    ff:9d:84:d8:35:58:c7:de:6e:b7:63:d8:21:f7:4d:
                    c7:5b:7c:14:02:b3:0c:c5:82:07:67:1e:84:28:0a:
                    47:3e:65:06:d3:9a:02:a6:8b:b4:56:b1:b2:44:54:
                    5b:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9C:14:D7:8B:82:66:A7:31:CA:0C:18:82:C3:74:13:5E:4E:8B:C9:5B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/828524cf-67fa-3af4-a2b2-686655d5027d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.26.92.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         8b:d8:f3:23:20:23:ed:4d:76:dc:2e:95:a8:92:bb:a8:e5:7f:
         87:b4:b5:9b:2f:f9:12:30:60:dc:51:72:a0:bb:90:c0:12:67:
         38:6b:f7:e7:90:38:54:cc:27:f1:69:22:bb:65:05:ad:ad:4c:
         64:ca:07:5e:7a:8e:ad:93:04:2a:49:d6:39:4b:d3:c9:1b:8a:
         9a:82:3e:be:27:84:90:65:17:f3:02:1d:6c:05:17:49:b7:b8:
         fd:c3:b3:23:f9:38:2b:67:a0:41:cf:26:c9:5e:99:50:79:ac:
         9a:66:e5:e4:e6:88:17:e3:2a:1e:46:7f:61:ff:bd:67:a0:4b:
         4e:91:d1:ac:e6:e8:71:97:90:ac:06:3e:62:79:d8:8d:53:37:
         e6:22:c4:29:dc:d0:ec:69:c5:d4:b8:9b:3b:ff:75:da:05:95:
         40:84:e1:0b:da:17:e0:da:3e:9b:77:f7:f3:60:6a:75:9f:d5:
         87:40:f0:43:83:29:9f:b5:58:05:fc:b9:45:1d:45:d6:b8:ee:
         74:a8:09:a6:e8:dc:b9:fa:25:49:e5:38:31:80:fb:93:fc:28:
         82:78:6a:3a:13:f2:bb:3f:30:76:eb:13:75:50:07:28:09:a7:
         80:e2:0e:0b:1c:38:cb:77:ed:6b:d3:3a:6f:20:1a:51:97:90:
         97:22:9c:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 19 19:32:36 2026 by rpki-client