Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/41675456-2eee-3552-98fd-2c5642f9a9b1.roa
File:                     41675456-2eee-3552-98fd-2c5642f9a9b1.roa (raw, json)
Hash identifier:          1MmS/KlLZs/qnZ3qSFQSJiJ8OQEERFx9IIe+Wur8eAc=
Subject key identifier:   DB:BD:8C:B1:73:80:02:E8:33:BC:FA:4C:E2:F8:A9:79:C7:E6:8F:C9
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584E31CF0F58F24A737159A04340
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/41675456-2eee-3552-98fd-2c5642f9a9b1.roa
Signing time:             Tue 16 Jun 2026 21:00:12 +0000
ROA not before:           Tue 16 Jun 2026 21:00:12 +0000
ROA not after:            Mon 14 Sep 2026 21:00:12 +0000
asID:                     22547
IP address blocks:        192.82.133.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 30 Jun 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:31:cf:0f:58:f2:4a:73:71:59:a0:43:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Jun 16 21:00:12 2026 GMT
            Not After : Sep 14 21:00:12 2026 GMT
        Subject: CN=cca3d515-9603-4547-9c34-ed7a49c4d298
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:43:3b:69:c4:d2:82:71:9a:51:82:5a:ed:83:
                    6d:38:30:d5:57:bd:0e:fc:f7:e4:57:2e:c4:7d:48:
                    66:6a:f8:e5:fa:ee:a0:b3:01:15:91:d6:e4:ae:7a:
                    3d:42:19:92:60:e3:9f:92:c6:95:9f:6c:45:7e:5f:
                    81:e2:b8:58:32:ca:44:b6:cf:8b:6e:d9:a3:de:af:
                    b3:6a:e6:2b:3f:1a:3d:54:0b:c6:51:89:42:9e:e6:
                    1f:d7:ac:e4:eb:ae:34:61:42:69:1b:a0:d1:1f:42:
                    a5:dd:83:30:da:4b:e2:72:6a:35:6b:5b:40:49:0c:
                    d4:25:bd:de:50:41:90:ec:2e:23:10:0c:0d:cc:0b:
                    c1:b4:50:2f:de:e5:ee:05:bd:cd:5d:0f:8c:e8:f5:
                    1d:eb:0f:25:40:f3:a6:85:a4:3c:c4:03:78:0c:0e:
                    f0:a8:9a:2c:85:df:d2:24:c7:60:17:2a:5d:87:2c:
                    ab:07:eb:86:66:96:c8:74:79:a3:ee:15:9e:b1:68:
                    e3:a2:2a:b0:11:a9:9a:c9:02:fd:f9:6d:7b:b4:18:
                    35:14:bf:f3:9e:03:3d:2f:c9:9c:c5:b7:f1:67:17:
                    c7:10:80:06:61:52:38:c7:72:09:d2:81:38:ff:81:
                    31:0e:75:62:de:34:03:a3:2b:99:5a:03:36:c2:ea:
                    26:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DB:BD:8C:B1:73:80:02:E8:33:BC:FA:4C:E2:F8:A9:79:C7:E6:8F:C9
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/41675456-2eee-3552-98fd-2c5642f9a9b1.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.82.133.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         81:08:e9:43:58:a6:30:99:d0:66:94:55:44:20:ef:b1:27:60:
         06:c6:2b:c5:5c:11:f5:1f:6e:00:9a:b5:37:77:5e:80:19:c0:
         c5:64:11:3c:e8:5a:c1:4b:6f:e1:e7:91:fc:e8:8e:1d:4f:f1:
         4f:55:4d:59:ff:b4:d3:d6:63:60:65:5a:26:5e:09:c3:28:46:
         75:fe:1d:dd:88:94:67:dd:4c:3b:0e:d1:e2:4e:2a:fb:b5:d1:
         24:f2:e4:b3:aa:33:4f:2b:e0:95:b0:7e:a8:18:d4:59:c8:b6:
         85:a7:f6:b5:4f:7f:61:d7:da:e5:e2:f4:d8:9f:3c:6b:3d:6f:
         99:ec:00:3d:85:71:c9:bb:c2:57:35:22:ae:6c:38:ff:4e:3e:
         54:3b:fb:91:ec:d3:7c:05:ed:eb:ad:1d:ea:02:75:99:a1:9b:
         62:16:ec:ef:15:57:98:d9:3b:df:20:4b:0b:f8:b8:1e:97:51:
         bf:87:69:ee:06:af:56:41:73:3e:f6:2c:d3:44:46:21:99:6f:
         31:76:fc:d7:98:69:fc:47:82:75:e8:f4:8b:44:04:9d:44:d9:
         c8:93:68:e8:6d:64:42:fa:f2:91:d8:e1:9f:44:82:0e:9d:b9:
         73:26:32:f4:f0:e4:86:51:92:e6:df:cf:c1:97:a0:b4:08:81:
         05:cf:1e:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 28 20:40:51 2026 by rpki-client