Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/f1d2db9c-804f-373e-a0b5-9a05699f6b40.roa
File:                     f1d2db9c-804f-373e-a0b5-9a05699f6b40.roa (raw, json)
Hash identifier:          v9IkfFw3naLxjF2nlc3MkD8UD7ZfxSnU5g4+5BLCflk=
Subject key identifier:   C0:D5:5A:AF:62:6B:F2:73:4A:09:C9:1C:84:E9:A3:49:63:88:B5:36
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584ED9C730E3A2C2134F1158D110
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/f1d2db9c-804f-373e-a0b5-9a05699f6b40.roa
Signing time:             Sun 16 Aug 2026 01:00:14 +0000
ROA not before:           Sun 16 Aug 2026 01:00:14 +0000
ROA not after:            Sat 14 Nov 2026 02:00:14 +0000
asID:                     36629
IP address blocks:        192.41.162.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 21 Aug 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:d9:c7:30:e3:a2:c2:13:4f:11:58:d1:10
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Aug 16 01:00:14 2026 GMT
            Not After : Nov 14 02:00:14 2026 GMT
        Subject: CN=8dc95ae0-2fbb-45f9-970d-52c76282ae36
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:3e:69:fc:92:5a:c1:6e:06:68:f1:e2:48:39:
                    37:10:49:b9:0c:14:d3:27:5e:c8:00:b9:d1:eb:a3:
                    3c:53:2d:50:a8:27:cb:32:cb:19:12:9d:34:74:69:
                    66:9e:9d:8d:c3:a5:a1:de:0e:19:36:66:3e:f6:20:
                    9d:ad:ce:66:80:61:e1:a4:28:04:8f:24:e7:c3:e4:
                    17:73:68:b6:ce:fc:42:b5:a0:c0:ae:c2:68:16:d9:
                    06:65:82:70:40:10:ea:de:d1:e3:ea:67:6c:d2:ac:
                    96:c1:be:cf:5d:a7:df:1d:35:f0:1c:79:8c:6e:9c:
                    92:40:27:74:94:14:27:cc:92:b9:0d:d1:92:65:8d:
                    74:3e:9b:cd:ec:aa:22:0e:2e:d1:79:df:ff:fe:9d:
                    ce:0a:e6:21:fd:e4:ae:e5:be:4b:fa:4e:c0:80:18:
                    38:e0:9d:9e:f3:81:d2:87:03:ba:44:0a:bc:9f:3d:
                    65:c5:ff:74:51:78:1f:e8:94:f4:77:97:b9:d8:83:
                    5f:ad:f2:1f:13:3b:2b:1a:2e:8c:65:8a:75:2f:80:
                    e3:d4:8b:76:b8:17:d8:dc:7e:45:5c:5c:bd:9c:95:
                    46:0c:d5:dc:6d:51:3e:57:8f:ba:4c:79:ad:8c:c3:
                    48:6d:b5:10:a0:c1:95:48:83:78:26:a6:3f:24:28:
                    8c:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C0:D5:5A:AF:62:6B:F2:73:4A:09:C9:1C:84:E9:A3:49:63:88:B5:36
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/f1d2db9c-804f-373e-a0b5-9a05699f6b40.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.41.162.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         af:26:33:5b:7a:88:3e:5e:41:cf:fd:cc:27:03:25:e7:d6:47:
         7c:1d:32:24:6d:77:22:d6:6d:a5:75:8c:52:16:51:d1:4d:fd:
         b4:58:c5:6f:f4:43:a2:71:95:38:f4:84:ad:2d:58:bc:ce:50:
         39:97:65:04:8d:19:69:78:9c:9f:42:cb:fc:71:c6:b7:25:52:
         e0:02:61:3a:47:12:2c:80:df:6c:b6:f0:57:9e:77:74:da:77:
         a1:a0:5a:8d:0e:7d:a5:14:fa:c4:43:44:b5:7e:1f:ba:33:bd:
         96:6f:4f:a2:09:2f:79:4e:70:b6:32:74:c7:25:1a:74:27:8e:
         23:88:93:bb:0e:ae:25:ca:85:99:ad:b9:44:54:f7:8d:4b:95:
         f3:b5:7a:5c:4f:4d:35:63:da:40:04:ac:e0:99:c4:83:02:9c:
         e8:1b:dc:d8:c3:ed:bc:1f:95:55:09:ab:ab:46:d0:8e:19:1e:
         db:a7:3b:96:66:2e:b4:8d:7c:c5:a8:7b:b6:3f:e9:1d:56:7b:
         9c:9c:5a:be:a9:36:c6:b6:df:cb:60:7e:bd:85:a6:ef:d1:3c:
         43:a9:e5:04:3d:a8:22:af:c5:a1:8f:5f:8b:70:54:ed:10:91:
         a3:bd:47:78:3a:20:c0:32:2b:e3:ef:77:5f:32:38:3b:4d:30:
         ff:b8:c1:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 19 19:33:20 2026 by rpki-client