Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/133c9a9d-e0cb-35ee-9b13-19141d34b7ff.roa
File:                     133c9a9d-e0cb-35ee-9b13-19141d34b7ff.roa (raw, json)
Hash identifier:          CDCgfImD2gdD9rfh4pOAch3YgY1X2Y5m+mJexXIi1HA=
Subject key identifier:   AA:39:B6:48:5F:54:7F:05:06:35:59:B2:FC:FA:D1:54:D3:68:A3:83
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584E3107D2BD66715D6D710FEF00
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/133c9a9d-e0cb-35ee-9b13-19141d34b7ff.roa
Signing time:             Tue 16 Jun 2026 14:18:53 +0000
ROA not before:           Tue 16 Jun 2026 14:18:53 +0000
ROA not after:            Mon 14 Sep 2026 14:18:53 +0000
asID:                     397203
IP address blocks:        192.52.178.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 30 Jun 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:31:07:d2:bd:66:71:5d:6d:71:0f:ef:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Jun 16 14:18:53 2026 GMT
            Not After : Sep 14 14:18:53 2026 GMT
        Subject: CN=94e185d7-c625-4138-93dd-5f3650a8e073
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:5b:75:8f:1c:2a:10:84:69:3a:f6:b1:83:de:
                    48:53:5c:77:03:ce:75:e2:a1:79:15:cd:40:b5:1d:
                    6a:7b:db:37:3e:36:b9:0a:b3:a8:54:9f:7e:4b:72:
                    49:a1:86:e2:8c:e8:c6:d4:a3:2f:91:e9:2e:e6:8e:
                    fe:b4:cf:4a:90:4a:db:30:aa:5c:58:a7:8a:0a:8c:
                    61:8c:12:5a:14:2d:00:72:b5:3d:44:f3:ba:5b:c3:
                    6b:b6:1b:16:32:a5:22:41:32:be:58:61:f0:20:fb:
                    7b:61:01:0a:bd:59:aa:ec:a1:73:15:66:0a:9e:d5:
                    7c:2d:4b:d4:42:34:26:02:90:6a:a8:fa:ce:c0:38:
                    01:30:88:aa:67:45:dd:60:72:08:21:26:c2:4c:40:
                    cc:a8:e7:3c:f4:6e:75:95:19:44:78:e6:40:19:45:
                    a9:f1:56:0b:da:f4:29:c4:94:fd:56:c9:01:d3:3f:
                    19:81:b3:10:17:8a:9d:d5:94:ba:4e:70:1c:13:73:
                    62:7a:28:ba:de:f4:5f:3a:4c:7c:38:7d:46:7e:8e:
                    49:d0:89:08:80:6e:0e:75:a6:96:d2:9e:75:2e:19:
                    75:b2:f7:5f:33:7f:47:36:b4:87:60:21:6f:a4:f6:
                    66:f8:dc:ae:48:75:be:35:55:fc:51:df:f0:42:0b:
                    cd:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AA:39:B6:48:5F:54:7F:05:06:35:59:B2:FC:FA:D1:54:D3:68:A3:83
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/133c9a9d-e0cb-35ee-9b13-19141d34b7ff.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.52.178.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a5:74:a3:97:9b:a8:4a:37:20:d8:d1:71:51:db:67:18:7b:3b:
         e4:74:23:fa:28:72:50:a2:89:25:bd:83:fb:46:1b:8d:98:2f:
         e4:70:e2:ca:70:21:36:31:57:39:c3:71:86:2c:e5:f5:dc:db:
         4e:47:c3:cc:f6:4b:92:0c:c8:06:66:a3:44:11:20:8f:b3:ad:
         5c:a3:4e:9d:5c:86:c4:ac:87:a8:f0:c4:4d:ce:7e:88:1c:61:
         2f:7e:50:79:fe:c1:70:88:dc:7e:e2:95:a3:56:87:e1:a7:04:
         c2:d3:87:fe:f0:9d:c0:c7:0d:1c:4f:fd:67:8a:09:f8:bf:77:
         21:8b:9a:52:fa:69:fc:b2:3d:cb:10:8b:89:03:d0:da:be:ec:
         fb:2b:a4:52:82:c7:57:25:a0:cd:1e:6f:4a:07:4f:0a:36:99:
         44:3c:7e:3e:a2:ea:8f:26:a5:44:b8:5c:26:8b:3a:3c:14:c1:
         c5:40:33:4f:d2:af:d5:04:df:74:22:ae:dc:fd:a2:de:d1:33:
         d4:b9:cc:ae:06:b1:39:6e:9b:7a:82:f9:40:e2:d0:11:38:21:
         09:01:4e:af:ee:b2:02:a3:40:87:c7:cf:be:fa:13:2c:63:e9:
         a9:2e:7a:c6:e7:f6:80:69:5c:5c:83:20:e8:a8:a2:39:2a:cc:
         9d:f1:6c:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 28 20:33:20 2026 by rpki-client