Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/fefc3d26-b894-3081-8157-1ad54de3f232.roa
File:                     fefc3d26-b894-3081-8157-1ad54de3f232.roa (raw, json)
Hash identifier:          e5Hqr0Egd/mP42xUEdKtgnykIoxVXAVDvMR2Mqpnqrs=
Subject key identifier:   3E:8D:76:40:BB:08:2E:28:A4:D8:88:3E:2D:61:3A:61:AA:49:E3:03
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584EB2B1B42B43ED2CB3D3539B80
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/fefc3d26-b894-3081-8157-1ad54de3f232.roa
Signing time:             Sun 02 Aug 2026 01:00:11 +0000
ROA not before:           Sun 02 Aug 2026 01:00:11 +0000
ROA not after:            Sat 31 Oct 2026 01:00:11 +0000
asID:                     397205
IP address blocks:        192.68.126.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 21 Aug 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:b2:b1:b4:2b:43:ed:2c:b3:d3:53:9b:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Aug  2 01:00:11 2026 GMT
            Not After : Oct 31 01:00:11 2026 GMT
        Subject: CN=15a89d39-a9ca-4090-9cbc-5bff0ba939dc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:7f:dd:43:37:88:d3:fc:9c:a3:1e:98:cb:4f:
                    ef:9b:d3:8e:31:72:50:79:e8:4e:9a:d2:71:3b:4d:
                    36:b9:75:f7:1c:a6:e3:38:8b:34:a8:36:67:3a:99:
                    1a:74:93:37:e2:2d:71:4f:ce:98:f8:08:9d:8e:9a:
                    7c:c6:c1:e7:10:a7:89:2f:9a:bc:46:75:52:e6:b2:
                    81:32:8b:f0:53:1d:8b:da:2e:c1:b0:9b:f9:d1:4d:
                    61:96:65:1b:0e:d0:bd:87:b5:0e:ff:8d:a6:c9:27:
                    12:06:c1:8b:d8:db:d8:84:f6:c1:72:6b:87:ec:78:
                    33:bf:a3:14:4d:36:31:06:89:14:34:38:55:c5:3f:
                    9b:f6:c3:36:c5:d8:54:31:3e:61:65:df:49:66:eb:
                    87:e7:97:84:63:81:7d:1e:c4:0c:12:56:14:b0:1c:
                    df:43:db:f8:6e:68:40:a0:1c:eb:cc:32:0f:0c:6b:
                    bc:14:8e:da:78:b9:5e:0f:77:4c:02:03:c4:93:7b:
                    9f:7d:ac:72:83:c1:d8:c8:e6:b5:a4:43:c7:85:82:
                    5b:69:4b:ed:4f:50:a7:7c:43:7c:de:3b:74:ba:e2:
                    c5:45:f1:00:4f:07:a7:12:8c:09:ef:94:49:44:79:
                    10:ee:ee:fe:03:e9:ec:09:00:13:11:e3:55:bc:20:
                    a3:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3E:8D:76:40:BB:08:2E:28:A4:D8:88:3E:2D:61:3A:61:AA:49:E3:03
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/fefc3d26-b894-3081-8157-1ad54de3f232.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.68.126.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         8c:08:37:70:7b:71:c4:7d:b8:58:c5:8c:39:d1:a9:0c:70:29:
         40:73:37:82:da:47:c9:42:60:15:ec:a6:cf:d9:33:cf:12:25:
         da:1e:92:1e:51:eb:a5:25:1b:bc:ee:5d:b7:a0:c6:5e:0d:26:
         ac:aa:b9:b4:d0:75:92:c0:20:f1:ae:eb:51:c7:96:6b:82:8f:
         2e:bd:8d:37:b1:74:f8:6c:ba:be:a7:9e:85:ea:06:94:9a:16:
         f9:74:82:b0:4c:ba:2b:fb:3d:46:32:d4:d0:32:4a:ca:e4:b6:
         ac:cf:ad:b5:d8:01:f5:3d:6d:3e:b5:d3:62:70:0d:69:01:78:
         58:8c:04:62:b6:24:7b:5c:40:9a:b4:ee:c9:06:3a:b0:9a:ee:
         07:91:0c:3f:45:5c:2d:d3:b1:1f:a8:cf:92:7e:52:4c:59:24:
         63:8b:52:78:e4:06:3c:c8:46:18:9a:42:e5:7f:5d:46:2e:d4:
         5f:c9:be:77:b8:03:bd:b0:fe:a7:18:91:bc:2c:24:cc:da:50:
         f5:49:e4:1a:67:42:35:85:26:d8:f8:54:4d:c0:4f:e7:e9:f8:
         ad:56:ff:6b:12:29:74:92:88:55:30:a1:00:08:38:d1:61:c2:
         e2:fa:2b:6b:fe:54:6a:d9:0e:91:b4:01:a2:7c:db:b4:44:62:
         a2:7d:ec:c7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 19 20:30:09 2026 by rpki-client