Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/985c8d1f-10c9-3286-bb61-608710dea459.roa
File:                     985c8d1f-10c9-3286-bb61-608710dea459.roa (raw, json)
Hash identifier:          Lh524cwuaFNHTvdYHEA4hPs7JAmOSV2ShHJIQiOSYQk=
Subject key identifier:   78:A5:BF:94:41:A6:AA:29:C2:3A:F0:4C:50:C3:80:BD:B6:EE:6C:A5
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584E508497DEE088FB183AE31A00
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/985c8d1f-10c9-3286-bb61-608710dea459.roa
Signing time:             Sat 27 Jun 2026 21:00:12 +0000
ROA not before:           Sat 27 Jun 2026 21:00:12 +0000
ROA not after:            Fri 25 Sep 2026 21:00:12 +0000
asID:                     397200
IP address blocks:        192.42.175.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 30 Jun 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:50:84:97:de:e0:88:fb:18:3a:e3:1a:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Jun 27 21:00:12 2026 GMT
            Not After : Sep 25 21:00:12 2026 GMT
        Subject: CN=86ccebca-173d-4eed-aca8-28340b62e46c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:82:17:de:b7:bf:b6:23:db:2d:dc:5a:d8:7e:f2:
                    64:10:7b:78:c1:a5:95:2d:23:47:e1:6a:97:27:ae:
                    12:3b:eb:53:5f:c0:4d:77:38:b0:42:8b:2d:19:af:
                    6c:90:03:ef:d9:2e:43:82:dc:72:59:16:c6:39:0c:
                    d5:9b:12:be:67:f5:82:08:0b:cd:d9:f0:b1:1d:f1:
                    9a:f1:db:5e:dd:b2:f7:1c:ae:12:3f:9d:9f:53:cc:
                    86:ce:f1:2b:35:d0:a9:f8:68:1b:e7:76:d7:92:1e:
                    cb:59:41:75:c3:66:fb:74:16:0e:c1:40:e5:23:41:
                    04:3c:46:0f:15:cc:5b:63:44:19:7f:2b:57:8c:01:
                    e6:fc:7d:95:77:67:f6:6f:01:7c:d1:ef:43:0f:6e:
                    a3:bd:83:1d:4c:e5:e9:1c:b0:87:0d:6b:79:bf:e8:
                    ed:24:85:9d:e3:bb:cc:91:6a:cf:11:ef:66:06:27:
                    53:21:46:3c:de:37:37:aa:50:c6:22:d6:15:ee:ab:
                    b6:72:84:67:4c:e5:d2:43:f8:18:a9:d9:71:0f:4e:
                    14:42:3e:54:04:59:af:e9:bf:f4:7e:05:ab:cc:c0:
                    b3:f6:f4:8f:2e:88:15:10:5a:9b:e9:d9:33:52:ac:
                    b3:e4:e5:0f:00:0e:1b:d2:55:36:87:74:62:41:9a:
                    fb:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                78:A5:BF:94:41:A6:AA:29:C2:3A:F0:4C:50:C3:80:BD:B6:EE:6C:A5
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/985c8d1f-10c9-3286-bb61-608710dea459.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.42.175.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a8:18:fb:e5:b4:e7:d1:0e:f9:45:a7:b6:4d:20:03:f1:b6:18:
         fe:9a:56:82:54:01:eb:92:3f:a5:4f:61:e6:11:de:f8:8b:1c:
         ab:57:89:9b:01:f5:e2:2e:2e:a5:d9:21:a7:e9:db:f1:59:b5:
         c0:0b:fe:3b:98:3a:bf:de:3c:0c:a0:3a:f0:e4:1c:ce:1f:80:
         7b:2a:ae:f7:9a:00:d4:f1:c4:b6:03:83:d1:5c:aa:b0:5b:93:
         02:a6:25:45:c0:03:f4:7c:5e:f2:37:05:f4:59:6f:04:fd:e2:
         15:c6:7e:20:fe:85:05:ce:88:33:d5:ce:53:a5:a6:97:90:58:
         39:c8:31:02:a8:b2:33:90:05:12:11:51:f6:85:85:72:04:89:
         03:75:4a:1f:df:62:2e:0a:5e:7c:b9:94:2f:27:40:ca:e8:cf:
         ba:c4:d0:ac:b8:6e:40:6a:d3:b8:fd:03:be:40:41:66:7d:0e:
         a4:79:84:90:10:38:9f:0f:59:c7:7c:8f:02:a2:74:05:43:af:
         a2:f2:57:4e:6b:89:7e:82:83:82:cf:52:e4:dc:ea:b2:da:59:
         2c:f9:f6:04:e4:2c:60:02:e1:94:4b:b1:02:0b:b7:1a:22:84:
         91:1e:fb:2c:8e:04:ec:3b:01:57:d1:f3:81:37:ef:f4:30:fc:
         0c:16:8e:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 28 19:36:31 2026 by rpki-client