Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/08e948a2-9693-3d5d-a53f-4eeb65eb0716.roa
File:                     08e948a2-9693-3d5d-a53f-4eeb65eb0716.roa (raw, json)
Hash identifier:          RX/Cw8ss0/0+JHsrbMjx7kW0p4aGdUgB9OG6ngHUv7I=
Subject key identifier:   F1:DF:66:4B:04:2C:F7:A8:1B:60:64:61:08:33:30:6B:E8:29:F1:50
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584E2D9F3E1A77956BDE88CEFF20
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/08e948a2-9693-3d5d-a53f-4eeb65eb0716.roa
Signing time:             Mon 15 Jun 2026 09:00:12 +0000
ROA not before:           Mon 15 Jun 2026 09:00:12 +0000
ROA not after:            Sun 13 Sep 2026 09:00:12 +0000
asID:                     396566
IP address blocks:        192.82.134.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 30 Jun 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:2d:9f:3e:1a:77:95:6b:de:88:ce:ff:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Jun 15 09:00:12 2026 GMT
            Not After : Sep 13 09:00:12 2026 GMT
        Subject: CN=c87b036e-755d-489d-aa7a-7fd67bc466ae
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:ea:60:71:fd:f3:92:28:88:85:d3:dd:72:22:
                    5e:58:95:80:af:75:1e:ff:81:53:2a:d7:f8:b3:eb:
                    6b:6e:3d:b7:d8:a5:97:c7:64:7d:1f:fd:d7:16:ae:
                    87:f4:ae:d9:16:0a:09:07:ba:d1:9c:0a:0e:7e:5d:
                    c7:04:62:d9:34:7a:2d:0f:fb:8e:1f:b1:24:50:af:
                    a3:f2:ad:fa:68:a7:fb:6d:ae:7a:b0:5d:92:8e:7d:
                    7a:d9:61:b3:d4:5e:31:d5:57:fa:fa:c6:89:ea:99:
                    13:77:38:6a:2d:cc:72:30:54:ab:74:7c:78:49:ac:
                    e8:42:20:48:28:ba:44:66:96:7a:ce:1a:28:b0:5a:
                    67:5f:4e:d9:f1:48:68:77:86:89:b3:aa:6d:a7:71:
                    81:50:8c:62:a9:b0:f6:8b:10:04:c0:fa:6f:72:39:
                    93:d4:c4:ca:b5:76:12:fc:20:a1:96:fa:4e:b2:ce:
                    67:a4:82:37:d5:e9:48:77:cc:89:4d:66:39:10:d2:
                    f6:d6:f2:a9:76:69:b8:71:86:77:88:60:29:d2:db:
                    50:9e:75:25:a9:39:cf:63:a0:ec:a4:53:25:bc:43:
                    8e:b1:f2:3e:47:26:e7:46:86:22:fe:c9:36:81:94:
                    78:7b:03:2f:7b:62:b8:93:b9:4a:3b:b7:8e:ea:b3:
                    fd:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F1:DF:66:4B:04:2C:F7:A8:1B:60:64:61:08:33:30:6B:E8:29:F1:50
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/08e948a2-9693-3d5d-a53f-4eeb65eb0716.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.82.134.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         89:fd:24:c3:04:a9:c1:35:d1:23:2b:05:08:b1:37:90:94:38:
         a4:21:23:75:b7:ea:e9:65:3e:b3:06:bd:23:3b:23:64:eb:51:
         cf:88:25:2a:ef:4e:2d:b0:33:71:0a:6c:a4:a1:f1:99:a8:a6:
         16:cc:6d:48:34:13:14:dc:b9:e7:36:57:80:72:6d:9a:a0:7a:
         f6:21:bb:e9:f0:eb:98:3e:e3:9b:ca:27:95:6a:13:76:56:06:
         e4:02:a2:7a:75:b3:88:ec:41:6c:af:82:34:06:c0:c6:36:08:
         f9:a5:64:78:aa:da:42:26:79:eb:a0:65:7c:fd:a0:e9:7b:e1:
         65:1f:89:f1:65:57:6d:7b:21:fa:b0:8a:31:ba:c3:2f:1f:3b:
         5f:30:13:b7:9c:18:b3:d0:fb:56:a4:d1:1d:65:55:cf:65:d2:
         56:68:30:d6:9c:f1:87:c7:f0:ba:56:33:7a:9e:4d:56:11:60:
         d5:63:9c:0a:f8:48:2c:7d:96:6a:cd:6e:03:25:c8:69:fc:44:
         cb:08:aa:1c:84:a3:15:3c:17:68:b6:29:56:30:e3:58:ce:1b:
         2d:3c:3f:b5:20:ca:f3:db:ba:6f:2a:fe:da:a7:bb:82:fc:21:
         79:23:2b:86:b7:92:bf:43:17:3e:d1:13:aa:66:2e:2d:f0:f3:
         f3:cd:76:46
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 28 20:42:12 2026 by rpki-client