Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/1a52e9b0-977e-397d-9d19-b1859429c4b2.roa
File:                     1a52e9b0-977e-397d-9d19-b1859429c4b2.roa (raw, json)
Hash identifier:          cGruf3tjX/A2ItSsIXnVMp5zF4LCcxgDr6cXZmW97Js=
Subject key identifier:   B5:EA:5B:E2:51:A9:28:6B:C6:3A:5D:5B:DC:91:30:C8:9F:54:9F:CE
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584D5243C2DEED5D82437BCF7F80
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/1a52e9b0-977e-397d-9d19-b1859429c4b2.roa
Signing time:             Sat 28 Mar 2026 19:13:19 +0000
ROA not before:           Sat 28 Mar 2026 19:13:19 +0000
ROA not after:            Fri 26 Jun 2026 19:13:19 +0000
asID:                     397204
IP address blocks:        192.82.133.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 01 Apr 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:52:43:c2:de:ed:5d:82:43:7b:cf:7f:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Mar 28 19:13:19 2026 GMT
            Not After : Jun 26 19:13:19 2026 GMT
        Subject: CN=a9f79061-eac3-4692-8588-8d5014f7542e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:91:7c:c6:55:a0:74:b1:e6:db:2b:89:aa:3f:08:
                    1d:ac:c3:c6:5c:38:31:15:ae:c3:35:e0:3c:6d:b8:
                    1e:99:6c:5d:2c:e3:6d:8a:e0:8f:2a:37:eb:1d:15:
                    2c:03:ca:54:5d:bc:4a:c1:a0:8e:a7:64:99:8c:38:
                    d4:04:66:d7:9f:3c:1a:a5:16:0b:9e:3f:97:a7:ba:
                    dd:47:bf:01:3d:dd:e9:f2:b6:b7:f7:9e:61:50:fe:
                    1e:35:17:69:ea:e9:18:41:2d:b7:c4:63:f3:20:b3:
                    87:01:e3:0f:14:67:08:3d:ff:25:d6:c5:7b:6a:e9:
                    e2:86:99:b8:75:9d:13:21:a4:7c:ed:02:bd:fb:ee:
                    8b:62:fd:c7:db:c3:94:d0:1e:b4:23:68:0a:df:d9:
                    25:cb:99:b1:01:71:8b:64:0c:e6:d9:a9:e2:fc:00:
                    24:4a:a6:07:a2:7c:9a:31:f8:cd:f4:a7:b7:04:fb:
                    5c:89:94:1e:04:43:37:1d:a3:cc:49:fd:e5:70:be:
                    90:68:f1:7f:60:e6:1b:f1:dd:27:d2:75:85:94:08:
                    f7:d6:95:0b:52:97:09:74:71:07:d8:c2:b4:25:46:
                    54:dc:db:0b:ea:35:58:f5:d6:8b:b4:33:4a:68:58:
                    b6:1c:77:d0:81:e2:b4:e7:83:9c:61:55:81:c1:08:
                    58:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B5:EA:5B:E2:51:A9:28:6B:C6:3A:5D:5B:DC:91:30:C8:9F:54:9F:CE
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/1a52e9b0-977e-397d-9d19-b1859429c4b2.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.82.133.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a0:d8:06:b6:26:c0:ee:7c:e2:ee:c1:48:b5:ba:d9:5d:18:a8:
         fc:cc:d5:6f:b4:74:8d:5f:3e:7c:ac:a3:f6:a5:53:98:22:60:
         a9:8a:56:6f:40:a0:11:57:dc:f1:7d:57:51:83:fa:22:b8:b2:
         1c:13:f5:bc:08:98:a9:d1:84:6f:4b:c6:a4:01:f2:34:f0:77:
         50:ab:6b:57:15:74:43:71:b3:d8:63:2d:99:02:b8:b9:76:79:
         71:08:f4:0d:80:48:93:c2:b1:d7:fa:bc:f6:6a:13:02:cc:75:
         22:ee:96:48:f5:b8:13:a4:70:81:c8:81:c3:be:b9:6f:5c:b2:
         a5:e0:d9:73:54:17:9e:6d:b7:cf:60:3a:c1:2f:b2:e6:15:e6:
         0f:0a:e7:c3:be:fe:0a:63:1d:fa:de:80:59:35:48:47:89:d3:
         10:2f:6c:3a:91:89:7e:93:c1:69:e8:d3:70:5e:3f:89:1e:63:
         52:92:b4:51:dd:4e:81:9f:65:55:40:1c:da:e2:db:9b:72:ba:
         ec:12:15:d0:29:c7:10:be:4c:cb:43:99:a3:f3:93:71:92:a4:
         0a:cf:6b:a2:a9:38:0d:73:fc:e9:b9:1c:c8:56:00:c8:ba:91:
         06:fc:3f:98:37:aa:87:b5:f1:28:74:a2:11:ce:99:2c:db:e9:
         e8:54:33:13
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 22:40:29 2026 by rpki-client