Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/db9405d3-a322-3859-8347-5dd629059067.roa
File:                     db9405d3-a322-3859-8347-5dd629059067.roa (raw, json)
Hash identifier:          gSZeiNQsRT4FlCdkcpvFm+D/kZvK9KlLAA15KQpd07U=
Subject key identifier:   81:D2:B7:27:82:6D:B4:64:9D:8F:3B:2C:DE:3A:BB:FA:2D:B9:EC:DA
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584E369A7411F0EA0E0C8031CB00
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/db9405d3-a322-3859-8347-5dd629059067.roa
Signing time:             Thu 18 Jun 2026 14:13:22 +0000
ROA not before:           Thu 18 Jun 2026 14:13:22 +0000
ROA not after:            Wed 16 Sep 2026 14:13:22 +0000
asID:                     396565
IP address blocks:        192.41.162.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 30 Jun 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:36:9a:74:11:f0:ea:0e:0c:80:31:cb:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Jun 18 14:13:22 2026 GMT
            Not After : Sep 16 14:13:22 2026 GMT
        Subject: CN=a35483d3-8876-46e7-b34a-baba670a27a5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8b:7d:d4:c4:7d:11:cf:aa:1f:62:0e:c9:68:f9:
                    63:42:20:23:4d:dd:b1:27:f5:42:79:7c:0c:66:f7:
                    7d:ef:20:76:02:ae:cf:11:39:6c:27:c5:c5:7a:cc:
                    08:a0:f5:9f:b8:42:c4:68:8c:62:36:58:11:ac:6a:
                    28:4c:51:a0:7a:b5:10:3c:1c:da:70:a9:dc:29:84:
                    99:a2:17:be:28:04:bc:2a:78:c3:57:c7:56:a2:9e:
                    8c:bf:49:2f:96:f7:98:34:1d:4d:20:f2:92:c0:79:
                    55:b8:d9:3e:63:7a:ec:d2:df:7c:18:54:29:ab:73:
                    09:3d:f8:6a:5b:ab:be:77:ba:8b:e9:66:59:57:87:
                    8e:5c:1d:94:e0:4e:a6:5e:37:d2:4a:e2:2a:c8:14:
                    26:b4:d0:7c:a5:bf:94:8d:93:2d:b1:ff:8d:c5:e3:
                    54:63:c9:99:15:45:37:a9:9e:e1:e6:7d:4f:3e:2b:
                    c2:8a:a5:f0:21:50:cf:08:01:91:4a:0c:6d:c9:2b:
                    bf:bb:ed:43:55:d2:a4:73:0f:bf:2a:16:ba:4b:09:
                    09:1e:54:12:a0:80:8f:c3:1e:b9:8d:01:d6:f3:81:
                    80:c0:69:c5:20:9a:0b:a5:8a:62:21:0c:1b:95:ff:
                    da:38:3b:2d:9b:c7:83:46:71:f5:aa:c4:7a:76:4f:
                    70:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                81:D2:B7:27:82:6D:B4:64:9D:8F:3B:2C:DE:3A:BB:FA:2D:B9:EC:DA
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/db9405d3-a322-3859-8347-5dd629059067.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.41.162.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a0:62:eb:1e:67:30:60:c3:0f:a0:d9:71:f9:a5:25:8f:f2:30:
         10:52:3b:60:3f:35:8a:e3:b6:08:7e:43:a0:70:59:45:8e:84:
         26:07:65:bc:a3:e1:13:fa:8d:d4:61:61:48:9d:18:86:dc:83:
         c6:7a:be:70:ec:26:2b:16:76:e8:b3:9a:84:e5:90:06:19:f9:
         1e:0e:04:77:6a:d2:48:98:8a:54:fa:94:29:20:a0:fd:79:34:
         2d:0a:8d:5d:5e:39:13:b0:5e:e3:83:b9:4a:c4:d3:5b:a7:b9:
         a9:eb:40:8d:4a:41:ad:d9:3e:71:bd:2d:5c:47:88:f6:a9:8a:
         89:e2:f1:b5:34:4b:df:d2:b1:e2:65:e3:8d:b4:0b:31:ba:df:
         26:95:bf:7d:07:b6:a8:26:ea:15:86:2d:0d:a6:c3:ee:32:df:
         5b:ab:82:eb:54:53:64:3f:f1:0f:ad:a9:43:a9:0e:03:b7:77:
         f2:7d:c3:4a:aa:3b:a8:1e:6f:86:de:b6:30:05:6d:bf:40:65:
         21:80:e4:8e:e9:2d:19:ac:f6:f2:88:10:00:4d:b8:f0:0e:71:
         92:34:97:61:03:22:44:6f:3e:b7:1f:b7:5e:0b:c6:b0:07:32:
         c3:ad:4c:c8:63:0f:34:59:09:a0:cd:76:79:32:e3:9e:96:a7:
         ff:7c:80:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 28 21:46:54 2026 by rpki-client