Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/0ce3e787-709e-3e09-a38e-aea740c43625.roa
File:                     0ce3e787-709e-3e09-a38e-aea740c43625.roa (raw, json)
Hash identifier:          XNMjKkzFEgDJbSiyyHy3eMBs+1bZetHpMglRtbKp+hw=
Subject key identifier:   80:D1:FD:75:4A:51:2F:BD:36:D4:EB:B3:94:93:03:71:47:63:C7:65
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584E31CF101033F2256CCFF4B280
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/0ce3e787-709e-3e09-a38e-aea740c43625.roa
Signing time:             Tue 16 Jun 2026 21:00:12 +0000
ROA not before:           Tue 16 Jun 2026 21:00:12 +0000
ROA not after:            Mon 14 Sep 2026 21:00:12 +0000
asID:                     396580
IP address blocks:        192.82.133.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 30 Jun 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:31:cf:10:10:33:f2:25:6c:cf:f4:b2:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Jun 16 21:00:12 2026 GMT
            Not After : Sep 14 21:00:12 2026 GMT
        Subject: CN=e424a9fd-9d07-4d6d-836f-ea3141f9b14f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:1f:c6:52:1c:d3:e1:d0:84:78:aa:55:f6:3f:
                    fb:c0:71:f1:2e:45:16:a1:ac:5f:23:11:d8:4b:54:
                    8e:63:32:5e:f8:c7:68:0c:05:09:00:6f:86:c2:3b:
                    3f:25:63:ec:69:22:0f:78:bb:bc:1b:96:b0:85:ae:
                    7e:32:03:9f:7b:13:79:1b:79:5d:f2:d5:5b:29:2f:
                    9d:b1:69:89:33:b2:32:88:f2:06:be:83:a5:5d:c0:
                    4c:ac:ef:8f:db:3b:ab:f3:19:0e:2b:a8:15:55:1f:
                    96:36:67:b7:99:70:be:69:e5:73:82:4f:61:d2:12:
                    92:40:05:47:f2:a8:92:e6:81:b5:e6:72:0d:90:0f:
                    0f:d6:2f:97:cc:a8:1e:1b:de:33:47:64:70:91:6f:
                    49:af:85:9f:90:f7:ca:49:fc:45:88:ac:a2:cb:6a:
                    74:51:aa:f8:1d:13:5a:f6:f7:4a:03:23:7c:43:28:
                    21:21:0c:c2:e4:ca:2b:bc:eb:ea:fc:9b:4a:45:38:
                    80:a6:83:7f:29:fb:9b:7e:25:ed:c4:83:8f:4a:f8:
                    98:c1:4c:fc:c0:b1:e4:1f:4b:17:72:be:6c:17:61:
                    c8:d1:06:b8:6f:13:71:75:11:53:a6:c8:86:fc:90:
                    9e:b5:ec:57:7a:3e:a5:4f:da:fb:4c:2d:16:0d:ba:
                    1a:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                80:D1:FD:75:4A:51:2F:BD:36:D4:EB:B3:94:93:03:71:47:63:C7:65
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/0ce3e787-709e-3e09-a38e-aea740c43625.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.82.133.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         bf:4a:c6:04:fa:2f:ab:c7:b2:f7:fc:bd:ee:fd:36:49:92:45:
         c8:41:3a:2d:a5:13:e5:0e:39:77:29:c8:9e:7a:07:45:bf:93:
         e9:9f:9d:99:43:c6:d4:b7:4e:e0:e5:2c:23:94:01:f9:16:3e:
         04:e5:a8:8e:42:97:97:d4:e6:80:22:51:02:fd:0a:72:48:f1:
         30:42:e1:40:ed:7c:04:5d:4e:fa:92:c3:76:d2:4b:43:e7:02:
         10:6e:c4:64:65:c1:0e:eb:ee:4f:2d:9e:93:f4:76:1e:bf:75:
         e6:95:47:70:e5:43:f2:8b:34:cf:b3:e4:4c:ba:ec:1c:1d:b4:
         80:a4:07:28:54:f3:76:f0:15:9e:34:a2:d7:fa:b6:04:f2:ac:
         f7:40:dd:72:00:6f:ba:69:ef:c0:89:51:38:7e:ca:7d:6f:3e:
         8a:9d:8c:6d:f4:8f:0f:0b:4f:55:ea:35:df:f1:62:ad:d0:7a:
         a1:3d:c2:35:79:70:9f:51:f5:03:20:58:2b:9f:43:59:25:9a:
         8c:b9:40:b4:21:53:62:e7:2a:1f:65:4b:cb:9b:8a:bf:e6:6c:
         cd:f9:32:6b:60:0d:a7:89:a5:cf:46:54:4e:5b:9a:ce:d1:db:
         17:32:43:24:2c:07:ff:43:bd:26:04:22:c8:a3:08:13:e3:18:
         c0:56:17:28
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 28 20:41:30 2026 by rpki-client