Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/f6b41d5e-245f-3a92-837c-e06d8ff90511.roa
File:                     f6b41d5e-245f-3a92-837c-e06d8ff90511.roa (raw, json)
Hash identifier:          YQNmpwzuVCJ5PxRQ7g3ucBmWOTJ8svMAgHRRL3L238Y=
Subject key identifier:   86:88:2E:B0:61:E2:A9:56:A3:BD:3C:BC:50:AE:3F:5D:2A:FD:B9:47
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584E3FC47E9929334283ADCD7080
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/f6b41d5e-245f-3a92-837c-e06d8ff90511.roa
Signing time:             Sun 21 Jun 2026 21:00:12 +0000
ROA not before:           Sun 21 Jun 2026 21:00:12 +0000
ROA not after:            Sat 19 Sep 2026 21:00:12 +0000
asID:                     36618
IP address blocks:        192.42.178.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 30 Jun 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:3f:c4:7e:99:29:33:42:83:ad:cd:70:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Jun 21 21:00:12 2026 GMT
            Not After : Sep 19 21:00:12 2026 GMT
        Subject: CN=4aa43ed0-6b83-4038-bf9c-92c994a47152
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:82:04:b4:2e:df:35:b3:e0:bf:4f:84:31:9c:f9:
                    b1:c3:2a:c4:d0:7c:0c:2c:0c:3c:02:86:3e:9d:25:
                    77:f3:29:94:2b:fa:62:9b:e8:b8:6c:ef:24:f3:5f:
                    75:59:1a:39:43:1d:4f:6a:3f:40:ae:8b:59:fe:58:
                    91:83:fc:56:4d:f0:25:c0:0e:fc:03:c6:e2:18:e7:
                    dc:fd:3a:bc:77:93:e0:16:04:21:d5:88:98:78:2f:
                    05:36:c8:f2:8f:bc:1d:89:54:cc:65:f7:cd:9a:94:
                    7b:44:c3:30:8d:2e:14:4d:c5:4b:74:de:54:a8:d3:
                    88:81:ad:32:24:62:e6:26:6d:b4:4d:ad:d4:46:2e:
                    0b:75:a8:31:f9:eb:2e:d5:f6:e3:f2:90:fa:38:38:
                    9e:5e:36:d7:09:81:c8:e7:79:87:ce:59:36:04:75:
                    1d:fb:8a:ff:46:c9:56:7b:50:8f:d2:57:bc:78:06:
                    3d:7b:b2:45:f5:8f:83:9f:04:81:cd:f6:ab:11:33:
                    26:29:aa:f9:13:45:3c:2c:7e:a3:03:9f:50:7b:0a:
                    4e:23:2f:c2:fb:0c:51:02:93:0e:67:41:cb:ff:8d:
                    10:20:af:bd:93:43:84:5c:d2:10:18:4b:ff:8a:14:
                    17:8c:39:50:7c:b0:d7:87:23:a4:67:3f:06:af:8e:
                    42:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                86:88:2E:B0:61:E2:A9:56:A3:BD:3C:BC:50:AE:3F:5D:2A:FD:B9:47
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/f6b41d5e-245f-3a92-837c-e06d8ff90511.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.42.178.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         48:77:64:c9:69:b8:b3:1e:6a:5e:c1:85:ff:ff:3d:32:8f:73:
         6e:15:4f:2f:10:b1:c0:11:29:5d:ae:3c:15:41:a2:57:8f:6d:
         f8:20:08:a0:62:b2:26:86:ad:e1:a5:9a:df:34:1c:fc:fe:cd:
         b5:47:3f:a7:7c:80:2c:de:b0:72:40:57:29:81:36:a8:60:0b:
         8e:25:8a:2f:c3:3a:ff:e4:9d:f3:e2:d4:7e:d9:5b:77:79:4a:
         bf:a3:77:04:b3:d3:85:01:10:fd:8c:c9:5d:23:46:86:f3:f2:
         14:87:59:31:cf:1a:41:39:58:50:31:d3:80:04:50:d4:94:f5:
         7d:98:f1:49:43:e9:33:e6:84:61:8a:19:8f:7a:d3:63:13:be:
         d0:0e:1b:b4:a7:31:ea:14:71:a5:e7:62:a0:48:e1:fa:e7:c4:
         f4:ed:a6:c1:9e:c8:10:9c:25:13:13:8c:fa:4c:98:0e:9f:75:
         97:56:9d:65:f6:a7:c1:97:e9:cb:6b:c2:e2:89:3f:1e:75:b7:
         41:a0:5a:d0:65:70:81:38:2c:c3:ef:9a:09:05:e9:7b:5f:af:
         a3:1f:52:05:57:bf:a4:bd:94:75:71:83:73:91:cb:d6:f1:d0:
         d7:00:90:d8:24:31:13:a8:32:b1:00:f3:34:11:47:f0:7a:62:
         69:90:dd:17
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 28 20:36:58 2026 by rpki-client