Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/f4e5a720-c2b3-3cfa-beb4-2002ba5d6b6a.roa
File:                     f4e5a720-c2b3-3cfa-beb4-2002ba5d6b6a.roa (raw, json)
Hash identifier:          GOz9xJ7tV4gVwMgKoUyRd94wj1uJKVSnEmjm0KiSfu4=
Subject key identifier:   EB:98:20:5C:7E:A8:FF:B4:B1:6F:51:CF:6E:92:22:11:1E:BA:02:10
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584EC0A71967DF0E80DBF8F47D00
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/f4e5a720-c2b3-3cfa-beb4-2002ba5d6b6a.roa
Signing time:             Fri 07 Aug 2026 01:00:12 +0000
ROA not before:           Fri 07 Aug 2026 01:00:12 +0000
ROA not after:            Thu 05 Nov 2026 02:00:12 +0000
asID:                     396760
IP address blocks:        192.58.128.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 21 Aug 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:c0:a7:19:67:df:0e:80:db:f8:f4:7d:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Aug  7 01:00:12 2026 GMT
            Not After : Nov  5 02:00:12 2026 GMT
        Subject: CN=dc4ffe75-1db7-49a3-86cd-c1a9a795baf7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:23:65:62:18:34:24:01:55:ea:51:d1:6d:72:
                    79:92:28:be:08:b5:21:b0:a9:21:db:88:c1:c7:6e:
                    de:e0:a2:60:70:24:1c:b6:48:d3:62:d8:16:cb:86:
                    48:75:3c:0c:4f:8b:68:17:4f:5e:4f:48:43:69:a8:
                    94:6a:a2:90:e7:6b:9d:43:f4:b0:bd:d9:7a:fb:e3:
                    0f:9f:ff:26:4d:20:12:03:c0:a3:96:89:a2:0d:be:
                    54:70:56:13:c6:11:a3:0c:6b:cd:e6:f1:00:73:a2:
                    b5:db:2b:8c:36:7e:6b:38:f4:6b:3b:d5:0c:a8:3a:
                    d5:57:74:52:fd:0d:d5:99:b0:38:5d:4b:99:e2:05:
                    57:04:5f:76:de:4a:e0:3e:a2:99:18:f7:83:53:da:
                    e6:6b:7c:d1:ce:e9:88:52:1d:10:fb:c5:66:b1:79:
                    3e:1f:e5:17:ea:a7:67:39:8a:4c:4a:f6:b4:1b:34:
                    3d:e0:9a:65:75:bf:e0:8b:65:1f:51:b3:a2:62:9a:
                    8a:ea:f3:89:43:f7:68:ea:46:bc:63:4b:98:2d:d8:
                    00:fa:a9:6e:33:da:68:00:34:11:99:28:07:f7:34:
                    67:42:3c:9a:cb:27:52:5e:c2:32:49:9d:7a:ce:3f:
                    07:bc:7f:f7:6e:58:10:79:27:e0:6f:0d:5c:05:99:
                    2c:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EB:98:20:5C:7E:A8:FF:B4:B1:6F:51:CF:6E:92:22:11:1E:BA:02:10
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/f4e5a720-c2b3-3cfa-beb4-2002ba5d6b6a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.58.128.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         19:cf:65:d2:6c:a3:9a:ae:8c:00:84:0a:aa:20:2f:0d:59:e4:
         ef:f3:56:99:c1:a8:65:1f:5f:2f:fb:b0:99:a1:bb:12:08:e2:
         00:a8:1e:b9:50:91:e6:5a:4e:23:b2:6c:00:a7:f0:c3:01:8c:
         89:a5:93:e4:f2:c9:2e:2b:0f:4a:f1:39:d7:fb:f7:e1:54:bb:
         57:0c:a1:8c:88:b8:dc:c5:76:d9:2d:29:ca:84:af:ce:7e:58:
         42:0f:01:bd:19:ff:98:51:09:ea:c8:a0:a0:7b:51:fb:1f:51:
         b4:d9:e9:55:21:30:51:8d:e0:8a:0a:43:11:3e:b5:d3:e0:6a:
         0f:55:b5:66:65:42:af:a9:b6:5b:49:40:91:51:fb:72:fd:4e:
         ff:61:ab:fa:f9:c5:1b:88:11:c3:37:f7:8c:66:f2:97:71:da:
         aa:cd:08:aa:81:8e:1d:9b:05:85:7d:df:38:de:63:7f:e0:26:
         cc:ee:dc:53:03:fa:ca:0b:0d:77:9f:7a:aa:11:f3:31:67:ee:
         de:b7:84:6b:ea:2c:d8:3d:06:76:bf:b6:23:84:18:0b:a4:04:
         57:9a:8c:aa:c4:85:b4:04:63:d8:7f:93:8a:b4:46:62:9c:14:
         5c:5d:80:b6:5d:ac:d6:c3:2a:1e:37:ed:fa:00:ba:d7:84:e8:
         4c:a2:07:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 19 20:13:17 2026 by rpki-client