Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/a530fa7c-a3d2-325d-859c-a7211535ee30.roa
File:                     a530fa7c-a3d2-325d-859c-a7211535ee30.roa (raw, json)
Hash identifier:          ZinIwP6SElmuLfM2NZKiySd4AnRcGJ0GeUVMwCn2Auo=
Subject key identifier:   87:44:82:BD:B2:FE:D6:47:E9:F9:F2:37:C2:DC:50:01:AE:B4:FC:B1
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584E4AEF2CC442B13B5AC18CAEC0
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/a530fa7c-a3d2-325d-859c-a7211535ee30.roa
Signing time:             Thu 25 Jun 2026 21:00:12 +0000
ROA not before:           Thu 25 Jun 2026 21:00:12 +0000
ROA not after:            Wed 23 Sep 2026 21:00:12 +0000
asID:                     396566
IP address blocks:        192.42.176.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 30 Jun 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:4a:ef:2c:c4:42:b1:3b:5a:c1:8c:ae:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Jun 25 21:00:12 2026 GMT
            Not After : Sep 23 21:00:12 2026 GMT
        Subject: CN=4412f524-a199-4700-8caf-04e43e5189bd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:73:3f:09:64:99:15:8b:35:71:6a:03:97:50:
                    c1:de:04:1b:e0:58:3b:f1:88:b7:60:93:5f:ea:7a:
                    21:b6:fa:c3:12:e1:b8:49:f4:14:89:bd:22:54:53:
                    f5:94:23:17:13:d7:c9:db:73:7e:da:5a:00:63:3a:
                    83:00:30:46:9c:34:6e:8c:41:bc:4e:d3:ac:33:ba:
                    d9:4f:d9:3d:61:b7:ba:c1:a9:ab:2b:16:6d:0f:2d:
                    a3:d3:39:bb:63:52:d9:24:a9:07:13:ea:8f:9d:40:
                    bc:26:3a:70:f8:ed:8a:5f:8e:af:c9:f9:73:43:c9:
                    71:bd:82:b9:b9:8a:8c:a1:3c:95:82:31:4f:53:34:
                    59:c8:0b:17:b7:4b:29:15:17:3f:c3:b7:74:bf:cb:
                    26:1a:3c:ac:63:33:f0:4d:62:96:c4:38:11:0e:91:
                    c7:94:a4:6c:f3:9f:2c:28:15:0d:0f:fb:6f:f2:c3:
                    e1:79:a9:4b:6b:d1:e1:86:4f:37:a9:f1:6c:97:d5:
                    7b:2d:de:ff:49:ae:ee:73:85:53:7f:19:1e:21:13:
                    66:7a:44:a4:d0:97:d9:ff:67:25:eb:bf:31:6f:97:
                    dc:d4:87:75:81:06:69:7b:c8:b1:6a:29:f6:5c:c2:
                    59:ba:55:77:7a:ed:04:e8:d5:49:5e:23:35:65:6d:
                    b5:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                87:44:82:BD:B2:FE:D6:47:E9:F9:F2:37:C2:DC:50:01:AE:B4:FC:B1
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/a530fa7c-a3d2-325d-859c-a7211535ee30.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.42.176.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         38:95:4b:17:aa:4d:d7:05:85:11:8c:a9:fc:ef:9b:9f:2e:57:
         dd:2a:0c:78:4f:f9:4c:f2:f0:77:9a:9e:f9:7d:cb:1e:71:ce:
         1a:72:e7:db:e7:78:77:8b:9e:0a:39:90:9b:eb:3a:03:f7:9d:
         02:a6:07:a7:1e:0f:0a:08:18:6d:1f:ea:e8:19:de:28:c6:a4:
         9e:98:35:c5:f8:85:4d:0e:fa:0d:dc:20:ee:99:74:57:83:a9:
         aa:5c:e0:82:eb:94:5c:5a:07:fe:80:f2:0f:41:18:13:8a:00:
         b8:ae:3f:a6:09:99:71:e7:1d:4c:a3:be:c0:86:6e:4a:e2:6a:
         fc:34:31:64:40:96:fd:5c:b9:c1:1b:f7:9e:9f:99:63:b6:6c:
         11:01:8e:c8:42:d9:bb:83:20:94:ef:b8:2d:f8:69:4c:2a:ad:
         78:0e:06:27:b3:df:60:d7:53:e2:49:ed:3f:8b:e0:c0:1d:97:
         92:0c:6b:d2:bf:ae:20:e6:8b:66:8e:78:a0:5d:f3:ca:4d:c2:
         f9:cf:b8:ad:b3:16:39:94:25:6b:1e:e9:55:43:12:49:0c:e8:
         7e:8f:cb:09:61:ab:b1:ab:b0:3f:f9:81:2f:ce:60:14:48:bc:
         29:92:36:f0:71:c5:eb:ba:3d:fb:38:1e:3f:d1:fc:36:b4:14:
         d2:cd:4e:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 28 21:55:10 2026 by rpki-client