Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/fdb3ecf5-fb2b-377f-8ef4-cc4a31eb4d68.roa
File:                     fdb3ecf5-fb2b-377f-8ef4-cc4a31eb4d68.roa (raw, json)
Hash identifier:          W/Y+ts3GYjObS0xcggMvZrZn9zG41KduiaURFdxwMKs=
Subject key identifier:   66:0B:CA:F5:CE:93:40:FD:4D:4C:ED:E9:E0:A8:17:9C:DD:E0:6D:DD
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584E5084899918A5F6E597B3FB20
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/fdb3ecf5-fb2b-377f-8ef4-cc4a31eb4d68.roa
Signing time:             Sat 27 Jun 2026 21:00:12 +0000
ROA not before:           Sat 27 Jun 2026 21:00:12 +0000
ROA not after:            Fri 25 Sep 2026 21:00:12 +0000
asID:                     397201
IP address blocks:        192.42.175.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 30 Jun 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:50:84:89:99:18:a5:f6:e5:97:b3:fb:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Jun 27 21:00:12 2026 GMT
            Not After : Sep 25 21:00:12 2026 GMT
        Subject: CN=f15fdc56-f7b5-43df-b871-c68bf7de71ca
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e6:e7:5e:c8:61:8d:fb:9b:05:0c:79:9e:7e:ea:
                    fa:4d:33:20:8a:06:b7:12:9b:31:3c:b6:86:49:d0:
                    69:d7:7e:fa:00:81:db:b1:e7:8a:46:08:cd:8c:58:
                    9f:cd:a9:27:65:b0:48:17:0f:51:da:96:30:d6:0a:
                    59:0f:cf:1c:26:02:82:41:18:49:83:7c:bc:00:6a:
                    43:2b:36:03:af:00:3b:79:46:bb:84:cd:d0:17:e4:
                    f3:17:47:e6:fb:65:19:f4:b8:23:d1:bf:fa:57:3b:
                    5c:0b:4f:80:a6:7e:23:c6:fb:25:65:de:1a:1d:e9:
                    ce:ae:cf:3c:89:3f:0d:fe:df:11:85:ac:66:bb:b5:
                    88:31:55:e5:75:dd:99:25:13:9b:96:19:f7:e8:d2:
                    ef:42:11:5f:ba:34:3c:13:33:21:5e:b8:46:e5:be:
                    5c:3f:a4:8e:78:18:d1:24:64:81:b0:1e:1c:20:a6:
                    4d:f4:7e:1e:16:cb:45:1d:50:3a:d4:80:59:e3:ff:
                    67:8e:ae:2d:de:38:49:67:6b:26:69:30:b3:0f:b1:
                    76:2c:99:5b:87:80:20:21:dc:b1:e5:43:ea:07:2d:
                    fc:c0:87:d7:19:78:a6:41:1b:63:34:12:da:3e:e1:
                    cb:56:2f:ff:27:bb:7d:80:1e:0c:0a:71:12:ac:50:
                    be:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                66:0B:CA:F5:CE:93:40:FD:4D:4C:ED:E9:E0:A8:17:9C:DD:E0:6D:DD
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/fdb3ecf5-fb2b-377f-8ef4-cc4a31eb4d68.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.42.175.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         15:8e:4b:13:19:0f:0b:74:6d:08:60:fb:89:3c:af:5e:fc:1a:
         6e:6e:df:39:18:9d:7d:e2:d7:8d:5a:13:f1:e7:53:1e:99:53:
         f7:ab:4d:e4:3f:5f:04:db:29:d7:f1:cf:72:71:f5:75:1b:3f:
         5f:25:e5:e1:3f:d4:4b:c3:07:af:c4:f8:85:b1:46:a5:0f:f4:
         34:0a:c7:b7:83:1a:8a:1f:95:d3:d4:24:e1:12:b2:33:54:8d:
         55:5b:5f:5f:f7:44:8a:83:f0:35:f8:67:67:db:16:7f:9c:b5:
         26:23:92:7f:ef:42:e2:d5:3d:c5:04:2a:4d:14:0a:f6:1c:4e:
         fa:98:ca:b0:4b:d6:f6:b6:7b:1b:23:11:8f:a6:79:b6:2f:f3:
         b7:92:7b:d8:df:57:a9:06:40:64:d7:5a:23:6e:c8:cc:3b:43:
         9d:9e:69:bc:f7:19:4f:53:ce:0b:53:9e:f3:5b:fc:03:9b:c4:
         c8:28:be:7a:31:f5:30:5b:f8:2d:95:34:63:13:54:0b:d9:3c:
         82:4f:64:eb:98:97:0a:df:49:0b:ba:3a:f0:3b:eb:78:99:70:
         4b:39:1a:ec:cf:ef:72:f9:64:05:18:63:fb:49:41:5e:36:21:
         5f:fa:a5:80:a3:62:15:00:f1:a1:e1:fa:8a:74:6e:b6:bf:3a:
         fe:a7:99:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 28 19:32:21 2026 by rpki-client