Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/3aae43f3-cc4c-3320-b4ff-f02926392b11.roa
File:                     3aae43f3-cc4c-3320-b4ff-f02926392b11.roa (raw, json)
Hash identifier:          5fiNGI2WeEd8AfYn2Jo1iQ9+h0nf6k2Va0jwZdxvtOQ=
Subject key identifier:   8E:8A:E4:75:2C:CD:6A:97:22:3B:8F:15:13:54:D3:DB:C4:27:42:71
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584ED431E5D05E203D08702BEA00
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/3aae43f3-cc4c-3320-b4ff-f02926392b11.roa
Signing time:             Fri 14 Aug 2026 01:00:13 +0000
ROA not before:           Fri 14 Aug 2026 01:00:13 +0000
ROA not after:            Thu 12 Nov 2026 02:00:13 +0000
asID:                     396604
IP address blocks:        192.82.133.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 21 Aug 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:d4:31:e5:d0:5e:20:3d:08:70:2b:ea:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Aug 14 01:00:13 2026 GMT
            Not After : Nov 12 02:00:13 2026 GMT
        Subject: CN=9bf6c260-863d-4ac5-9543-d93e41017f19
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e7:7f:7f:37:e1:1d:dc:8c:ea:0b:b7:e9:6c:ba:
                    77:20:b4:c3:c6:3e:21:97:53:c0:4d:73:09:a7:66:
                    44:63:c8:78:87:9f:c2:54:a0:5b:03:a6:65:52:26:
                    1a:32:2f:7c:71:35:85:a8:a0:da:0f:e2:0f:29:f5:
                    85:9d:b9:41:7c:f9:cb:fe:26:c6:17:91:9b:41:48:
                    53:a2:c6:2e:0a:a1:56:e5:47:38:e0:4a:3f:f1:40:
                    3d:96:a3:c2:e5:e6:dd:7e:d5:b7:6e:08:46:ef:f0:
                    86:de:90:cc:50:97:97:1a:37:80:22:9f:b4:87:1f:
                    f4:e2:8d:81:1b:e8:e1:fa:17:66:45:b0:83:d2:d2:
                    6b:45:7b:e8:ce:d4:13:83:87:8f:7f:d8:9f:04:a1:
                    b0:81:ec:dd:91:81:b1:6e:c1:11:0b:de:73:75:76:
                    ca:02:21:51:6e:cb:7d:30:ed:a0:a3:35:2a:9d:36:
                    30:46:ea:b9:06:05:60:bb:86:ea:c1:42:9f:ad:ea:
                    06:c6:87:0d:6e:92:b1:74:11:2e:f7:3c:dc:0d:65:
                    a8:e1:0e:f6:93:34:9d:2a:2a:6d:58:ed:bc:d0:e3:
                    46:4f:56:7a:4e:36:8e:8d:c4:21:0c:0a:29:d8:18:
                    84:6d:5a:14:96:4d:6b:26:a9:38:44:35:07:74:6e:
                    c0:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8E:8A:E4:75:2C:CD:6A:97:22:3B:8F:15:13:54:D3:DB:C4:27:42:71
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/3aae43f3-cc4c-3320-b4ff-f02926392b11.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.82.133.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         14:26:61:b8:e3:ed:f1:4d:6f:2d:bb:8a:40:72:8e:dc:cf:d2:
         4d:59:99:ca:9d:31:9a:91:72:32:c0:d4:d5:e1:17:af:c9:df:
         2d:08:61:a5:09:35:4c:91:26:30:23:83:d4:8c:df:fb:24:e8:
         96:dd:d2:6e:b2:27:c0:61:73:c2:25:b9:fa:d1:f2:b3:74:b4:
         d1:13:ff:c3:32:32:10:b5:ff:31:d2:84:b3:44:7a:ef:ef:0b:
         6e:3b:94:42:01:7f:64:72:4f:d4:ba:24:cb:48:97:9d:94:a6:
         d5:fe:8c:8e:f3:d0:4a:f3:76:b8:7f:58:5e:06:1e:7c:19:df:
         94:db:ba:3f:b9:d6:ca:66:cd:16:64:7e:03:d2:6f:44:9f:ab:
         e7:6d:fb:73:00:37:5d:3d:49:1d:79:7c:b5:28:aa:93:b4:62:
         6f:99:ad:21:e6:d4:ae:59:c2:47:16:b9:db:68:1f:9b:c4:d4:
         a7:35:4c:e3:03:54:59:b7:62:f4:00:dd:84:0a:16:3b:69:21:
         79:de:39:54:1f:1f:ce:14:14:28:09:8d:24:6d:d0:a1:f2:7e:
         4a:92:ca:a4:28:dd:c7:d0:00:1d:3a:bb:f6:2f:a4:e2:a0:8e:
         0f:b9:cc:fd:af:85:41:54:87:9e:75:85:f5:d5:78:0e:f6:94:
         d9:ee:1a:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 19 17:08:20 2026 by rpki-client