Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/410bc35a-e976-36dd-9f41-70cfd4e2d1dc.roa
File:                     410bc35a-e976-36dd-9f41-70cfd4e2d1dc.roa (raw, json)
Hash identifier:          RHx6HJF2f93IBhb+oyKUzfl2rglJ7x0JL/HO7DQnugU=
Subject key identifier:   2D:BA:5C:B8:98:D6:CC:EE:F2:79:E5:A3:29:32:72:0A:4B:F5:72:4A
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584ED431DB8DDBE5A8DBADE55A40
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/410bc35a-e976-36dd-9f41-70cfd4e2d1dc.roa
Signing time:             Fri 14 Aug 2026 01:00:13 +0000
ROA not before:           Fri 14 Aug 2026 01:00:13 +0000
ROA not after:            Thu 12 Nov 2026 02:00:13 +0000
asID:                     396546
IP address blocks:        192.82.133.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 21 Aug 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:d4:31:db:8d:db:e5:a8:db:ad:e5:5a:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Aug 14 01:00:13 2026 GMT
            Not After : Nov 12 02:00:13 2026 GMT
        Subject: CN=10379559-61c5-4b86-bbf0-d4edb9937cca
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ef:f2:49:ad:86:fa:39:80:0f:f2:86:e4:f9:9a:
                    39:02:b9:d4:69:b4:9d:84:11:b6:58:f8:00:f9:05:
                    92:7f:99:ad:f3:62:3b:2a:38:59:ef:14:4d:d5:f1:
                    2c:07:71:b6:22:43:82:33:c0:21:6d:4b:e1:f5:48:
                    e9:da:2d:04:1e:e5:2e:ab:4a:3b:29:73:0f:55:dd:
                    47:05:58:e4:7d:ba:a5:a2:e0:39:b4:9a:0e:c8:65:
                    bd:f2:37:28:1d:5b:37:0a:cc:a1:a9:f1:ab:1f:07:
                    a4:02:3f:df:fd:d5:b7:27:7e:25:1c:f1:bf:e5:4b:
                    06:6f:fd:1c:4d:54:87:8b:30:7d:d9:53:39:3c:9a:
                    f8:b0:c8:7b:8c:f2:52:ab:7f:06:1b:69:ec:5a:cd:
                    be:18:84:df:3c:c2:df:3e:7e:d1:aa:01:41:ee:bf:
                    73:91:1b:b1:76:f6:3b:de:11:f2:8c:a1:02:a1:f9:
                    31:dd:a9:50:7a:d7:3f:44:2c:a4:23:04:c7:15:5d:
                    15:96:c6:07:a5:d2:0b:ae:44:5d:9b:8b:e4:c0:cf:
                    36:62:31:f5:8c:e5:57:89:f6:08:58:17:a4:19:26:
                    ae:8b:2a:55:f2:71:2d:da:78:cb:87:70:13:b3:40:
                    8c:d8:94:7e:c7:8e:13:4c:b4:b5:00:33:72:53:40:
                    67:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2D:BA:5C:B8:98:D6:CC:EE:F2:79:E5:A3:29:32:72:0A:4B:F5:72:4A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/410bc35a-e976-36dd-9f41-70cfd4e2d1dc.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.82.133.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2f:9f:81:81:68:57:d9:b6:6d:2c:14:d4:fa:84:a1:a9:8d:7b:
         2b:af:72:a2:61:b7:a2:a8:b4:c9:db:eb:96:57:62:79:55:9b:
         ff:cf:eb:28:34:e5:bb:9c:4a:85:fb:c2:cf:91:8d:d7:65:cc:
         40:ee:67:a1:9d:1c:eb:6a:fa:01:00:bb:b2:5d:28:e9:8e:20:
         22:b2:7b:5d:3f:06:3d:53:cf:68:55:2a:67:35:63:f2:ec:bc:
         dc:68:b1:41:0a:33:2a:3f:88:e6:ce:37:ac:99:85:d1:0a:59:
         1b:73:6a:59:70:31:1b:13:7d:1c:1d:24:01:d7:6a:f2:a5:a6:
         ae:cb:50:ee:99:95:68:ed:5b:fd:57:3b:90:b0:b5:4e:85:cf:
         c7:52:5a:1b:2b:b7:51:1a:fb:74:a7:29:53:0d:55:fb:9a:33:
         85:87:66:e6:a7:75:2c:71:83:fa:ca:9f:e4:d7:17:6b:7b:af:
         e9:cb:90:9d:0c:d4:09:d1:a9:9d:13:58:5f:c1:d2:5a:5f:9b:
         47:7f:67:c9:21:e5:52:04:d8:32:ac:53:80:ec:1c:e3:15:e4:
         d5:65:ff:39:2b:da:ff:47:51:15:eb:f5:3a:78:55:0b:a9:1a:
         83:6e:19:b4:15:c1:c8:05:ca:d6:28:55:bc:72:c2:2d:a3:ed:
         06:e2:b5:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 19 17:02:47 2026 by rpki-client