Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/1491992d-82d3-3447-97c5-f38d099b7fca.roa
File:                     1491992d-82d3-3447-97c5-f38d099b7fca.roa (raw, json)
Hash identifier:          5WfGp3WSt33beHOMGAGH+ybHe+qMhC3csmbzqzIw7kM=
Subject key identifier:   8D:60:78:25:20:8D:49:D7:67:D4:20:E7:18:97:CA:C3:69:62:72:63
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584E31CF0D7C728FF03517724F00
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/1491992d-82d3-3447-97c5-f38d099b7fca.roa
Signing time:             Tue 16 Jun 2026 21:00:12 +0000
ROA not before:           Tue 16 Jun 2026 21:00:12 +0000
ROA not after:            Mon 14 Sep 2026 21:00:12 +0000
asID:                     396612
IP address blocks:        192.82.133.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 30 Jun 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:31:cf:0d:7c:72:8f:f0:35:17:72:4f:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Jun 16 21:00:12 2026 GMT
            Not After : Sep 14 21:00:12 2026 GMT
        Subject: CN=ee81754b-995e-46f7-83e7-d629be3f2616
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:8a:74:e3:ba:93:bd:a4:ae:dc:86:15:57:3c:
                    08:1b:c4:40:24:08:11:45:d9:6c:5b:21:b0:b9:42:
                    ac:d5:e6:a8:d7:01:d2:da:ad:ec:c8:74:6b:ed:35:
                    2d:12:5e:79:08:28:49:9e:65:57:61:33:52:1c:0c:
                    c9:62:ce:52:25:5f:93:76:d8:f6:cf:ff:e3:e0:b6:
                    51:30:e4:ad:fc:35:bf:21:bf:4d:75:9c:b7:d4:c8:
                    e5:fd:27:eb:33:2e:55:d0:5c:32:0b:86:ba:97:cc:
                    e0:a7:46:04:34:63:af:1f:dc:85:90:4d:b1:8c:6a:
                    1a:0d:55:23:eb:86:d2:b4:03:4b:7c:c1:42:38:be:
                    90:df:1d:e1:e5:17:d1:d4:11:28:8f:fc:53:bb:8d:
                    17:6d:60:54:4f:67:e6:38:fb:2c:0f:76:f8:3f:94:
                    53:2b:5c:96:4d:68:34:b7:82:b0:cb:4a:a6:b2:90:
                    0f:60:0d:48:28:f4:76:fc:f9:c0:41:0a:00:34:6e:
                    a0:1b:0a:c4:b8:80:e3:27:9b:34:f1:8c:70:4b:e1:
                    96:85:b7:8e:72:5c:eb:55:16:f9:d2:52:79:dc:bd:
                    43:cc:04:45:a8:66:27:90:21:cc:4a:83:e2:50:db:
                    77:57:3d:af:9f:bc:94:4d:24:c9:28:76:a8:97:2b:
                    bb:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8D:60:78:25:20:8D:49:D7:67:D4:20:E7:18:97:CA:C3:69:62:72:63
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/1491992d-82d3-3447-97c5-f38d099b7fca.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.82.133.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2a:1a:6d:4f:c2:b3:0c:58:22:de:e2:8f:57:f5:fd:0d:c2:b0:
         11:94:aa:df:d0:b5:29:57:03:f7:ab:4c:e1:e4:9f:36:62:10:
         b3:25:27:25:db:4e:3d:47:41:0f:4f:10:a7:6f:3a:39:09:57:
         af:85:2c:aa:02:81:f4:39:c9:8d:46:be:51:64:36:9e:21:09:
         a4:41:67:60:10:f7:89:26:d7:d6:4c:28:dd:03:84:16:ff:99:
         0d:29:70:09:64:a0:5a:c1:01:c3:54:1b:a6:ef:e4:50:3e:fb:
         8b:9a:ff:41:bc:06:75:23:cd:bb:4a:00:e7:06:30:5e:cd:af:
         9c:67:f4:de:3e:aa:2b:b2:70:68:a2:40:2a:2e:ee:59:f9:48:
         c8:e1:65:d7:54:ce:ab:b1:a1:4c:8a:06:e8:31:34:74:ec:2a:
         1c:bc:fa:8b:c4:40:9e:de:d3:ef:57:8c:a6:fc:86:98:a4:71:
         11:0a:2e:7e:da:97:72:e1:d7:6a:13:e3:55:66:06:b4:57:d5:
         2a:ad:51:19:2d:56:61:ea:e1:20:b8:73:31:42:48:ae:c6:5d:
         de:88:05:36:8e:cb:e2:a4:e2:e0:96:65:55:57:f2:a1:24:19:
         38:f8:2e:e9:3a:2b:79:75:a8:bc:c3:62:1f:7e:55:50:5e:b8:
         c5:a5:95:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 28 19:40:34 2026 by rpki-client