Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/33e3ef0c-8612-34c9-aee4-a6986a100d34.roa
File:                     33e3ef0c-8612-34c9-aee4-a6986a100d34.roa (raw, json)
Hash identifier:          jrnVdnGHlxxT+9kdD4UknLuiduNvH99vziXN4vpBDkI=
Subject key identifier:   C6:F8:C0:EC:38:29:09:36:40:62:9A:DF:62:9D:B6:3F:8D:C7:86:7B
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584EA7922CAF07D086365AFCCE00
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/33e3ef0c-8612-34c9-aee4-a6986a100d34.roa
Signing time:             Wed 29 Jul 2026 01:00:12 +0000
ROA not before:           Wed 29 Jul 2026 01:00:12 +0000
ROA not after:            Tue 27 Oct 2026 01:00:12 +0000
asID:                     396609
IP address blocks:        192.68.130.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 21 Aug 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:a7:92:2c:af:07:d0:86:36:5a:fc:ce:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Jul 29 01:00:12 2026 GMT
            Not After : Oct 27 01:00:12 2026 GMT
        Subject: CN=7f1e7d02-42a5-4b5d-89eb-9d08bca68241
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:85:74:e7:ab:8c:ce:70:ab:75:3c:27:bd:75:fc:
                    91:e9:0a:c9:8e:7d:04:a7:7a:5b:b7:70:25:78:5f:
                    19:84:51:b8:47:01:83:6f:63:90:88:63:dd:2a:a5:
                    10:d0:85:e3:9f:b6:1b:05:db:12:5a:90:92:c5:ca:
                    ff:29:29:7e:6d:da:8e:91:31:47:1c:01:df:f8:33:
                    b6:a5:f6:ab:d9:e0:b3:b0:73:a0:59:dd:13:0c:ff:
                    88:8f:82:75:7c:a4:52:c7:3a:cb:d6:47:6c:06:27:
                    67:b3:75:d5:8b:1a:9e:e6:ee:13:c2:b6:ea:e0:83:
                    24:42:a4:7f:6d:7e:4f:d7:40:5b:b8:d8:80:f5:6d:
                    27:8a:27:6e:f8:9d:e3:68:f2:94:48:88:e3:06:03:
                    7a:7a:18:23:b3:7e:86:e4:bb:60:88:91:d9:39:57:
                    23:a5:a6:bb:63:12:ea:2e:ad:45:92:76:40:79:2e:
                    3b:1d:9c:f9:36:4b:0a:e1:71:a1:6b:37:85:e1:f7:
                    f8:00:ae:8d:a7:9d:ef:87:60:fd:22:6b:56:9e:5d:
                    a0:d7:90:f5:c0:66:8c:fe:d0:47:38:93:d7:7c:ba:
                    cc:cf:96:9f:e8:73:5b:c4:dd:c5:05:6f:ac:fc:16:
                    a8:88:13:72:0a:02:25:96:bb:c5:a3:b1:89:2d:3e:
                    95:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C6:F8:C0:EC:38:29:09:36:40:62:9A:DF:62:9D:B6:3F:8D:C7:86:7B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/33e3ef0c-8612-34c9-aee4-a6986a100d34.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.68.130.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3f:bf:da:ff:59:3b:44:53:15:c9:be:68:4f:91:d0:ef:ae:77:
         af:24:2e:5b:92:50:93:f8:64:cc:bd:86:4e:95:a7:4e:9a:3b:
         60:9e:18:d1:56:a0:50:8c:be:73:c4:1d:e7:ec:d2:b9:ce:ed:
         e8:81:1f:40:dc:dd:e7:d0:ba:bb:0b:df:63:76:36:28:9d:38:
         28:94:86:dc:d2:be:c5:40:b4:9c:73:70:3a:aa:f6:b2:8e:2a:
         9b:ea:8e:a9:b4:1a:f9:46:14:90:19:f1:58:50:27:10:2f:56:
         73:a4:8e:20:ae:19:e8:27:d0:4f:64:b2:2c:06:63:5a:4e:88:
         f4:a6:b0:19:b2:b3:9a:66:94:4c:10:af:fd:0d:16:ba:d9:05:
         36:a4:1f:44:2b:21:5a:08:68:91:d1:0f:b7:e2:b9:7d:7d:e6:
         8e:77:c2:29:76:36:e3:69:10:ad:45:a5:bb:ae:12:87:65:e4:
         82:0d:4b:81:62:0f:ae:f6:eb:41:f5:19:b3:6d:4e:c5:cd:2d:
         45:80:2f:ae:b0:60:74:47:ad:0b:01:fe:b4:56:6b:cb:48:58:
         0e:58:f7:a7:f1:a2:4c:dc:fe:39:b6:e4:98:db:89:9b:f4:19:
         70:8f:3b:15:06:62:00:9d:06:8d:8a:63:11:b4:4c:bf:8b:7b:
         ff:24:54:bb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 19 17:06:23 2026 by rpki-client