Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/33f9df9a-fc74-3283-835d-18480591dc36.roa
File:                     33f9df9a-fc74-3283-835d-18480591dc36.roa (raw, json)
Hash identifier:          LkgBC3EtR9bE5eIVPAuzx4mn9l8cv+xVyvz6sthhPf0=
Subject key identifier:   F3:6C:88:3A:9A:C6:E8:91:77:E5:8D:51:FB:0C:65:BB:CA:3A:1A:6F
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584ED4325AEFF2E22AC60B35F3C0
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/33f9df9a-fc74-3283-835d-18480591dc36.roa
Signing time:             Fri 14 Aug 2026 01:00:13 +0000
ROA not before:           Fri 14 Aug 2026 01:00:13 +0000
ROA not after:            Thu 12 Nov 2026 02:00:13 +0000
asID:                     397196
IP address blocks:        192.82.133.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 21 Aug 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:d4:32:5a:ef:f2:e2:2a:c6:0b:35:f3:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Aug 14 01:00:13 2026 GMT
            Not After : Nov 12 02:00:13 2026 GMT
        Subject: CN=e00f431e-a122-4f7c-aafd-d7da44f54160
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:85:9c:36:73:d6:ae:cf:4b:8a:af:f3:bd:95:60:
                    7f:f3:bc:cf:a1:e0:2d:c2:5a:19:a5:67:1a:d5:fc:
                    12:69:5c:00:16:96:17:28:6d:ce:ca:f8:a9:c4:58:
                    18:f1:79:22:b2:d5:97:98:03:05:00:b0:4a:d9:7d:
                    6f:a2:c1:b7:4b:8e:39:57:0d:17:2f:40:a1:4d:9d:
                    72:cc:fc:e8:c1:a0:dd:dc:72:f7:08:b9:c1:ee:c0:
                    f7:7f:a5:13:7d:41:03:58:bc:a3:93:72:fc:25:82:
                    1f:af:9e:17:44:56:1a:41:57:07:d4:bf:33:41:c2:
                    d7:c8:05:bb:9f:f3:29:de:d9:57:ad:be:e6:f9:91:
                    86:8d:a5:36:b1:7c:19:c1:f8:e6:02:0b:bb:5e:f7:
                    16:01:ae:1a:5b:6d:9d:6e:59:7c:80:5d:44:33:29:
                    1a:c5:b9:92:8e:18:32:90:71:4f:57:ec:3f:a8:b1:
                    88:bb:9d:19:fd:a6:f0:ac:f4:84:68:6a:99:8c:26:
                    f2:43:e5:11:3d:43:5c:a4:fd:13:5a:ea:3e:4d:a0:
                    24:f2:d7:5f:74:b6:3c:60:54:43:8b:95:5c:b9:b0:
                    a4:46:14:fd:f1:54:2e:f5:5e:b4:ba:c6:48:98:eb:
                    81:2f:3b:60:10:17:5a:6d:02:b9:02:42:3e:cd:f0:
                    cd:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F3:6C:88:3A:9A:C6:E8:91:77:E5:8D:51:FB:0C:65:BB:CA:3A:1A:6F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/33f9df9a-fc74-3283-835d-18480591dc36.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.82.133.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0e:5e:b4:b2:f5:0f:1e:fc:a4:68:9c:92:ae:89:b2:0b:2a:27:
         77:3b:27:82:1f:c0:b7:88:75:9f:3c:9a:e9:8d:39:04:55:54:
         c2:3e:27:6a:6d:32:a5:4d:a1:68:48:99:1f:c2:4c:e5:f7:57:
         c9:be:37:fa:6f:17:c9:0f:69:ba:6a:a5:3c:cc:ec:fd:91:87:
         0a:07:ae:2e:5b:3d:fe:a7:f1:e1:b0:f7:40:e4:d8:8e:e3:23:
         35:d2:90:c8:8c:77:6e:aa:59:dd:ef:94:54:de:d1:ed:ba:14:
         ab:e0:df:6c:93:3b:da:49:1b:d8:3d:72:6a:f4:6b:11:1b:a7:
         85:41:0d:e7:5d:1f:15:7d:46:d8:cf:fb:8d:a0:48:15:53:48:
         d9:a0:e9:67:3d:81:08:1d:3a:fb:a3:78:2e:cb:3b:b0:76:02:
         16:fe:e8:94:c9:c0:cf:58:67:91:66:22:c1:51:2b:17:5d:dd:
         b7:0e:e7:2e:df:ca:47:f4:ba:5a:49:a8:94:8c:5c:c2:44:e3:
         c2:f1:a4:84:59:65:ce:87:6d:e2:72:37:90:0a:86:57:21:b4:
         dd:7c:71:46:82:f6:ef:e5:0c:a7:4d:b9:16:93:84:de:df:c8:
         55:65:89:dc:35:8e:ae:ee:81:28:5f:d9:4e:84:02:bb:24:f4:
         4a:b0:66:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 19 17:08:09 2026 by rpki-client