Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/f9e8a47f-6097-34f2-a9ef-c0d5a3601477.roa
File:                     f9e8a47f-6097-34f2-a9ef-c0d5a3601477.roa (raw, json)
Hash identifier:          gYkyrA2BY629uXbFqjj8vCg73ha6CzroPRVivZ5WdvU=
Subject key identifier:   70:E3:40:10:D0:82:09:CF:58:47:F7:B6:E0:14:85:50:85:F2:B5:5E
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584E3FC480BD329EE53147152580
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/f9e8a47f-6097-34f2-a9ef-c0d5a3601477.roa
Signing time:             Sun 21 Jun 2026 21:00:12 +0000
ROA not before:           Sun 21 Jun 2026 21:00:12 +0000
ROA not after:            Sat 19 Sep 2026 21:00:12 +0000
asID:                     10515
IP address blocks:        192.42.178.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 30 Jun 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:3f:c4:80:bd:32:9e:e5:31:47:15:25:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Jun 21 21:00:12 2026 GMT
            Not After : Sep 19 21:00:12 2026 GMT
        Subject: CN=a1ac9683-a54c-4b0c-867c-d9cf2fd7a8d0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:98:86:b6:12:ca:56:81:3e:d5:4c:12:5e:2f:
                    46:5f:ca:6a:33:41:57:9e:9a:45:b0:5a:c3:9f:07:
                    07:f7:9a:fc:d8:6e:93:a2:9d:5b:46:58:1c:9f:f1:
                    b8:bd:68:7f:df:98:43:4b:12:01:9e:68:8f:6c:3b:
                    1f:f8:ae:d5:77:e0:f4:cf:fe:fd:90:f2:4e:87:ab:
                    36:9b:3d:0c:c0:d0:17:4d:47:03:18:11:11:b7:e4:
                    4d:44:bc:84:ae:0b:db:82:e4:6f:e9:63:56:66:e6:
                    08:ae:16:1a:56:c3:8f:ac:57:93:2c:16:6d:17:13:
                    b7:35:95:cc:b5:fd:67:04:27:88:71:dc:b7:bf:c2:
                    27:fb:1d:79:4f:0a:b1:74:78:5e:8a:b7:93:42:4b:
                    38:46:eb:95:83:ed:14:b1:ae:73:63:81:a2:61:15:
                    35:14:92:4d:ca:c1:8a:5e:cd:56:a6:5d:ce:5f:83:
                    9f:5c:bb:60:7b:fa:86:bc:01:2e:b8:1a:21:25:6f:
                    e2:92:56:ec:a9:dc:ba:fe:db:23:14:8b:83:10:5d:
                    0a:b7:a9:93:15:05:12:a3:b7:5e:40:ff:f1:fa:eb:
                    38:94:e9:65:2c:56:dc:05:95:a0:55:04:80:21:34:
                    49:86:a2:98:c4:95:51:6a:33:fc:4e:7c:de:f9:26:
                    ef:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                70:E3:40:10:D0:82:09:CF:58:47:F7:B6:E0:14:85:50:85:F2:B5:5E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/f9e8a47f-6097-34f2-a9ef-c0d5a3601477.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.42.178.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         97:1c:89:21:78:12:53:16:04:df:74:30:b4:b7:d1:fd:86:d2:
         00:6c:12:17:93:9a:93:26:47:e9:e5:a3:18:1a:57:17:97:5b:
         c1:34:41:15:29:6a:c3:a7:31:84:a8:de:d7:f3:ca:93:98:97:
         e6:10:6e:23:df:d4:72:17:44:8a:c6:e3:bf:cc:8d:45:2c:70:
         d1:75:e4:06:78:20:f0:a2:87:69:1f:ef:c6:31:00:f1:b6:e6:
         a1:ed:d1:7a:e5:49:d5:34:0a:23:7f:11:43:4b:34:31:18:d4:
         c6:48:5e:05:4f:49:2c:2b:6d:13:30:d4:e4:eb:77:e3:10:02:
         a7:69:0a:63:7f:a7:ec:f6:f1:8e:d4:d3:6c:b0:20:7c:07:dc:
         43:0f:a7:4d:18:07:0a:a1:ec:38:da:9a:0a:5e:6b:06:92:ad:
         7a:0a:17:07:a8:9a:62:a2:b2:82:4a:2c:b5:54:65:c0:70:27:
         74:c4:6e:a4:ae:ad:8a:07:cd:b7:e8:53:ff:ad:65:0c:e8:15:
         96:8c:b0:90:93:70:50:ba:e3:41:26:8b:d6:e0:1b:63:e1:fb:
         0f:5e:7b:79:29:8a:87:c2:59:c8:be:9d:ff:d8:c7:25:08:a8:
         4b:8e:39:63:f6:ae:1f:f9:fa:8d:f4:ec:83:5c:27:af:c6:34:
         83:b7:4f:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 28 19:33:37 2026 by rpki-client