Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/a70a5658-e92a-335f-b61e-063c0186f714.roa
File:                     a70a5658-e92a-335f-b61e-063c0186f714.roa (raw, json)
Hash identifier:          Ny5JOebWSfHW1H4Sc6QgIhpdN3d0rfLdRHHFK2Qx+LQ=
Subject key identifier:   A3:03:6F:C0:12:C3:AE:4E:F6:F5:A7:1F:1F:97:3F:E1:D2:A4:0D:82
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584EA7922B5522D53FB1BE076E20
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/a70a5658-e92a-335f-b61e-063c0186f714.roa
Signing time:             Wed 29 Jul 2026 01:00:12 +0000
ROA not before:           Wed 29 Jul 2026 01:00:12 +0000
ROA not after:            Tue 27 Oct 2026 01:00:12 +0000
asID:                     396541
IP address blocks:        192.31.80.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 21 Aug 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:a7:92:2b:55:22:d5:3f:b1:be:07:6e:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Jul 29 01:00:12 2026 GMT
            Not After : Oct 27 01:00:12 2026 GMT
        Subject: CN=f3cf2d11-9fc4-49f6-8895-fd3699180e13
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:65:b4:85:35:a5:f6:e8:ab:e4:ee:23:d5:99:
                    84:bd:37:d6:57:6c:37:a3:1d:3a:50:e1:80:b8:6e:
                    bc:0c:cd:7e:06:c5:7c:ce:a9:a8:ab:de:55:6f:a2:
                    da:e3:b0:1b:b5:2b:26:89:97:9e:8a:4b:41:8d:5a:
                    1e:c5:b5:a5:fe:66:26:c5:50:5a:33:ae:05:00:83:
                    8d:c2:ad:87:8b:94:6c:54:75:2f:a6:90:81:c5:ad:
                    02:50:2c:5b:13:7d:19:d9:b0:d3:ed:25:cc:09:ca:
                    3f:95:b5:45:e5:6d:99:fd:3a:49:7e:b9:a9:be:0b:
                    84:7b:ac:ad:db:e0:bd:5f:16:e6:bc:fb:ef:85:a1:
                    08:c0:c0:95:2f:01:33:43:38:fd:4f:9f:66:16:b7:
                    f2:fa:ea:52:b0:30:05:f9:69:a5:17:c7:d6:ce:5d:
                    13:d8:1b:4c:a5:08:85:0e:70:a8:8f:fe:94:3a:87:
                    17:0a:f6:db:01:24:ce:60:3c:f7:74:47:41:25:cc:
                    ab:6a:02:0d:f2:64:79:96:cd:71:d9:d5:cc:0e:dd:
                    76:5d:f3:79:2b:1f:14:f1:c6:bd:8f:8b:53:36:8e:
                    b0:5f:41:1d:0e:d3:d2:89:b1:96:b9:83:46:d6:fe:
                    9d:62:61:a8:b9:d7:13:a9:22:80:ab:0b:ac:5c:61:
                    c0:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A3:03:6F:C0:12:C3:AE:4E:F6:F5:A7:1F:1F:97:3F:E1:D2:A4:0D:82
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/a70a5658-e92a-335f-b61e-063c0186f714.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.31.80.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         42:fe:d0:25:e2:f1:a7:4d:06:48:92:68:26:3b:6c:bf:0c:0a:
         0b:21:27:47:98:be:be:d1:69:94:4e:8d:e8:3f:53:13:cd:0f:
         91:c0:d9:6a:e7:1a:1e:92:9c:94:0a:48:57:6d:af:0a:29:7f:
         a2:e3:4a:8d:2a:9d:60:ac:97:54:81:14:ca:0b:41:c4:8d:ce:
         26:37:dd:43:bf:ca:1b:9f:43:0b:29:33:8e:60:cc:57:cd:40:
         a0:1b:7a:c9:be:5c:59:7c:34:ab:41:36:89:7b:36:55:cb:34:
         8f:04:27:62:1f:c6:c3:b3:1a:8d:f2:a4:05:d5:8f:b4:65:f6:
         b4:8c:f5:fd:bf:1f:c9:d4:f2:24:34:91:b8:b2:31:00:84:a7:
         1c:60:c4:1b:4a:f8:e8:d5:6a:e9:78:30:1d:71:32:10:78:b6:
         ad:f4:2f:4c:c5:e9:98:31:b3:5c:f9:5f:d3:2c:8d:bf:d1:d1:
         0e:50:36:58:58:a6:1d:5e:4f:b3:d3:73:f9:63:d0:dc:fb:ba:
         01:44:15:c4:a7:85:d3:d8:88:1f:a2:ff:2f:79:a0:eb:ad:4e:
         e8:c5:a5:71:99:bf:32:af:01:e3:b1:74:01:9e:1d:85:ac:78:
         d1:b7:32:58:73:54:94:68:52:3c:a0:fe:27:ef:34:d2:76:fa:
         a3:fa:bf:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 19 18:43:24 2026 by rpki-client