Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/ae7914f5-f0b4-3059-a841-bb70910c7822.roa
File:                     ae7914f5-f0b4-3059-a841-bb70910c7822.roa (raw, json)
Hash identifier:          WF6kB+tyAv4u+Fe/XhqKz9wQhlnOy04vn40+c2lw7eg=
Subject key identifier:   AA:E7:90:84:C8:AE:B7:96:5B:32:8D:3F:2D:01:D9:FC:23:D7:83:6E
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584ED9C7321D892DD05204998300
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/ae7914f5-f0b4-3059-a841-bb70910c7822.roa
Signing time:             Sun 16 Aug 2026 01:00:14 +0000
ROA not before:           Sun 16 Aug 2026 01:00:14 +0000
ROA not after:            Sat 14 Nov 2026 02:00:14 +0000
asID:                     396589
IP address blocks:        192.41.162.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 21 Aug 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:d9:c7:32:1d:89:2d:d0:52:04:99:83:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Aug 16 01:00:14 2026 GMT
            Not After : Nov 14 02:00:14 2026 GMT
        Subject: CN=290ea0f5-6ce5-4d1d-8b82-2f8327092282
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:98:73:0e:01:a5:7b:27:f4:8d:f7:4a:43:ed:
                    f2:f3:08:0b:0a:53:89:82:f3:42:23:b2:af:5a:0e:
                    27:2c:9f:95:c2:1a:99:da:d8:a7:70:e1:5e:fb:3b:
                    bb:11:9a:21:9c:55:9a:1a:29:9e:2f:02:5b:9a:86:
                    0c:3e:9f:ee:87:65:5f:64:dd:2d:05:3b:84:a1:12:
                    9f:5d:01:b7:9b:69:d2:3b:f8:68:a0:f9:a1:e4:34:
                    fc:ec:6c:bf:af:66:53:c9:12:76:9c:3e:cb:fd:22:
                    28:07:87:7a:57:98:61:24:41:b0:09:fc:4f:44:53:
                    27:af:8b:1a:ff:1b:74:9e:81:9b:96:71:93:39:7b:
                    03:cf:8d:a7:b3:5d:ba:ce:25:86:2c:69:7c:42:c1:
                    63:f2:ae:06:a9:5c:7f:09:db:b7:97:bb:3d:59:09:
                    e8:78:d4:da:a0:8b:34:51:be:c3:c8:5d:dc:a7:56:
                    6e:53:af:e1:ed:de:12:8a:30:e6:f3:4f:3e:66:04:
                    20:c4:28:9d:f0:d7:aa:13:17:16:99:f7:f1:7a:88:
                    14:ed:1c:3d:e2:86:4d:18:3b:fd:cf:0b:96:ee:02:
                    03:46:19:87:d5:58:40:cb:21:0e:f6:84:44:df:80:
                    76:e2:e0:69:82:0e:b4:1d:f9:9e:99:96:35:2f:c7:
                    2b:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AA:E7:90:84:C8:AE:B7:96:5B:32:8D:3F:2D:01:D9:FC:23:D7:83:6E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/ae7914f5-f0b4-3059-a841-bb70910c7822.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.41.162.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         9a:bf:33:01:3c:b1:52:02:53:2c:a3:c7:f9:8f:5d:ab:db:b9:
         50:b7:47:df:63:3a:3d:ad:97:dd:2c:ec:df:0c:32:32:bc:48:
         c1:09:80:0d:df:e3:51:5f:8b:6a:c1:53:0d:21:53:42:c9:14:
         25:cb:74:43:ff:83:4b:73:d2:f0:06:d2:d4:bd:70:d6:95:5b:
         00:c5:6a:6d:c0:79:2a:68:a2:1f:12:00:4a:d7:d2:4d:15:91:
         90:ab:49:6d:9a:0d:9a:8a:2d:84:a4:9c:16:79:64:0c:33:0b:
         af:ca:f5:e1:ad:98:3b:9a:aa:52:2f:46:3e:ea:59:a5:f1:5e:
         99:79:fe:64:0c:ce:7b:19:5a:8f:dd:9c:1a:7d:4f:f9:95:11:
         58:98:77:35:55:9b:69:1d:3e:5e:f7:ab:05:b9:fb:c1:2c:b3:
         1d:f3:f3:3f:25:2d:26:98:db:f5:41:a8:13:73:a3:3d:e9:e6:
         0b:ab:97:65:e1:dc:6b:cd:a2:bc:6a:24:42:82:09:70:0f:50:
         09:33:8c:56:b8:fd:9a:23:f2:8a:2f:77:c2:e9:ab:55:62:21:
         3a:4f:6a:0b:7e:bd:57:62:d6:8b:30:5f:a1:7a:6f:8d:ce:2e:
         c5:84:8c:d9:90:12:a1:69:4d:43:c2:a9:9d:cc:a7:8d:59:86:
         63:9a:5b:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 19 18:47:28 2026 by rpki-client