Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/032ae189-db15-3b73-89ec-46798530fca8.roa
File:                     032ae189-db15-3b73-89ec-46798530fca8.roa (raw, json)
Hash identifier:          80hUU6uyMH2cvzObUImZ8ek5sgjd8TwCq+Eeq7QnO0s=
Subject key identifier:   B1:EF:0F:BC:BC:85:0B:EC:FE:82:35:8D:59:92:5E:67:AA:33:C3:EA
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584D4D5A9BC801C6E99BE3243590
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/032ae189-db15-3b73-89ec-46798530fca8.roa
Signing time:             Fri 27 Mar 2026 01:00:31 +0000
ROA not before:           Fri 27 Mar 2026 01:00:31 +0000
ROA not after:            Thu 25 Jun 2026 01:00:31 +0000
asID:                     21313
IP address blocks:        192.82.134.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 01 Apr 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:4d:5a:9b:c8:01:c6:e9:9b:e3:24:35:90
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Mar 27 01:00:31 2026 GMT
            Not After : Jun 25 01:00:31 2026 GMT
        Subject: CN=8f2f5417-0fb7-4890-99a9-3bebc97cc9b4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:ae:1d:83:c2:a7:ec:d4:66:2f:9d:2e:4a:07:
                    b7:8b:74:a1:af:8b:db:e5:3d:e8:15:47:33:dc:aa:
                    61:d6:18:1f:e1:e2:c3:d3:df:e6:46:cd:41:6b:1c:
                    a7:e1:ea:00:f8:52:b0:ad:b8:79:9d:25:d1:f8:6f:
                    1a:e1:27:88:05:a0:3f:d0:a4:6f:4c:d3:ed:70:7e:
                    57:98:99:b9:b4:dc:c0:ba:80:71:57:a5:c7:eb:2d:
                    a2:e1:5f:4d:0a:54:9c:8c:36:f9:17:df:bf:d6:37:
                    d9:80:50:5a:7c:35:b3:b2:99:00:ea:3c:39:4e:72:
                    c4:e7:39:63:3a:7a:7c:41:d8:af:e8:1c:e2:c6:b3:
                    3c:a3:f8:93:fa:ce:fc:9b:3d:46:e7:7e:f3:f6:6c:
                    8e:5c:72:62:e9:3b:51:5e:68:25:27:f3:77:a2:6c:
                    ef:65:33:db:07:0b:9a:1d:af:10:a8:75:e2:b6:43:
                    f3:6d:ec:a4:73:49:40:6f:1e:0b:f6:27:be:72:41:
                    5a:08:66:8f:f1:6f:db:6e:02:87:61:b6:f2:83:2e:
                    47:75:1c:3a:1c:3c:df:2c:49:ad:40:a1:9d:91:c7:
                    a8:9c:df:e6:84:16:82:c0:f0:4a:2f:a2:43:c7:58:
                    c1:aa:7a:a0:59:3a:0f:55:44:f1:cc:a5:36:85:80:
                    ed:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B1:EF:0F:BC:BC:85:0B:EC:FE:82:35:8D:59:92:5E:67:AA:33:C3:EA
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/032ae189-db15-3b73-89ec-46798530fca8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.82.134.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0c:b5:88:15:f6:80:4b:b1:fe:69:ea:7d:78:63:f2:db:84:2d:
         df:a2:31:9a:a1:0a:ba:52:f1:7f:2d:a6:aa:24:f1:64:a2:6f:
         fb:ca:68:c0:6d:2e:18:d6:64:08:ed:f6:77:c3:d4:5d:63:9f:
         f6:9f:f2:f4:88:50:b8:5b:f9:0a:e6:de:d7:53:58:bd:7e:b0:
         cc:cd:58:a1:9c:e6:7b:61:17:73:fe:5c:ad:71:12:bd:cb:a2:
         20:c2:3d:9b:a2:57:63:27:af:bf:e6:eb:23:c0:23:07:70:01:
         f7:e1:1f:27:c6:2d:df:b4:d4:fa:1c:6e:64:33:3d:5e:3d:84:
         04:ac:23:ed:bb:d9:cc:39:68:7a:99:a5:14:5b:a2:23:66:e9:
         81:81:48:f8:5c:ed:3c:3a:25:66:57:b4:64:4e:6a:6e:31:b4:
         3d:46:6b:ff:6a:82:c3:a3:c6:b3:64:00:a6:81:6b:77:d2:24:
         63:24:34:72:73:57:d6:72:44:2a:42:6a:de:96:b4:37:bb:f4:
         42:db:02:d7:8f:64:6f:83:59:12:da:d3:8c:40:77:ba:3a:5b:
         e8:1a:d1:b5:e7:3b:71:a6:cf:d3:6d:5d:87:64:c3:de:8b:7d:
         99:6b:04:5e:b7:88:e8:ac:60:d0:22:aa:87:a0:67:aa:7f:ab:
         75:f9:2a:15
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 30 05:57:51 2026 by rpki-client