Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/4718c4ca-a8d8-38df-8348-1c25913c887a.roa
File:                     4718c4ca-a8d8-38df-8348-1c25913c887a.roa (raw, json)
Hash identifier:          +WNLU2KAr/jlriaHNywZ8tMvWTX6akA3vfjlNEyTJl0=
Subject key identifier:   55:0A:E3:5F:9D:2C:B9:83:EA:81:11:D6:08:1E:C3:3E:11:10:69:CC
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584ED002091351D725AEA6D5FA40
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/4718c4ca-a8d8-38df-8348-1c25913c887a.roa
Signing time:             Wed 12 Aug 2026 13:00:12 +0000
ROA not before:           Wed 12 Aug 2026 13:00:12 +0000
ROA not after:            Tue 10 Nov 2026 14:00:12 +0000
asID:                     396575
IP address blocks:        192.82.134.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 21 Aug 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:d0:02:09:13:51:d7:25:ae:a6:d5:fa:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Aug 12 13:00:12 2026 GMT
            Not After : Nov 10 14:00:12 2026 GMT
        Subject: CN=e6c6c4b6-d270-4b5f-a8be-3c91bcbfa4e8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:81:0f:29:3a:3a:c1:84:f6:c8:45:14:73:9c:52:
                    33:a0:bf:bc:d4:ef:5a:b4:4a:25:65:8f:71:5d:a8:
                    62:ef:29:1f:8b:93:09:e4:f4:dc:07:4c:3c:d3:0c:
                    89:63:18:b9:ff:e2:af:02:1a:30:a0:9f:a3:4c:b7:
                    6e:42:25:bd:46:2b:80:8c:59:d6:8f:a5:fb:ce:e7:
                    7d:99:88:e4:53:55:de:6d:b7:79:ab:af:9e:a3:be:
                    47:cf:03:31:0d:1f:96:22:2e:82:56:93:d4:74:e7:
                    ea:13:cd:3a:54:ae:51:f8:d4:a1:87:71:8e:53:84:
                    3b:32:68:36:70:b1:ac:b5:71:89:98:89:d4:6e:67:
                    e9:89:05:9e:e2:06:4e:c9:a7:c8:d9:72:62:8b:02:
                    88:f1:72:cd:c2:0c:d8:80:00:23:3c:81:c7:06:69:
                    f3:0e:a8:ff:60:c9:3f:75:ec:39:c6:57:b3:a8:92:
                    a1:df:86:1e:5a:20:b7:a4:cf:6b:41:16:e8:b7:d1:
                    cc:fc:9a:e3:ea:fc:03:d1:e0:88:83:bb:71:bf:1c:
                    23:36:0a:26:00:26:12:80:8d:4b:1f:58:92:6b:a6:
                    54:07:3d:95:78:76:fd:ca:92:be:c9:8a:19:40:23:
                    ef:3f:63:e2:7c:32:ee:34:4c:17:6b:6c:ee:65:8a:
                    63:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                55:0A:E3:5F:9D:2C:B9:83:EA:81:11:D6:08:1E:C3:3E:11:10:69:CC
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/4718c4ca-a8d8-38df-8348-1c25913c887a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.82.134.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         b7:a9:b0:40:06:a0:3e:1a:f3:33:e3:77:e5:09:d9:bb:3a:a7:
         74:d9:d7:a1:f6:26:8d:36:81:f8:36:4b:a2:4c:8b:03:23:08:
         68:98:9e:39:c2:d6:9a:28:22:01:82:57:12:c8:ea:7c:24:17:
         8b:9b:d1:68:4c:ea:a3:9a:56:1e:bb:70:67:43:fb:7f:0c:81:
         67:27:08:84:1a:7e:98:63:c1:51:0a:e0:d5:bc:17:32:d2:40:
         4d:3f:94:fa:b5:4a:ed:bc:0d:9f:19:d0:97:79:d1:17:9a:5a:
         69:f0:b3:9c:45:e5:b4:49:4c:e4:54:ac:12:1a:bf:da:39:ff:
         3e:56:15:ca:67:5b:f6:62:e5:72:d7:43:37:36:c1:e1:7e:72:
         4d:0d:a4:e6:bc:f1:06:05:61:47:ff:9e:a0:14:6b:e3:fc:0f:
         c0:56:69:18:21:ac:f6:89:78:cd:a6:2b:74:45:ab:56:af:18:
         e1:06:20:9f:79:a0:e9:25:ff:c1:8b:5f:a1:32:d9:f5:71:9b:
         88:f8:ee:e9:fc:9f:11:af:81:95:14:ac:31:56:02:0f:9a:28:
         b0:c0:42:f2:64:e4:58:2c:b9:a9:c0:38:e4:33:ad:22:a0:67:
         b4:93:08:c6:ac:24:5a:c7:7e:05:48:48:ef:e4:b2:1a:1e:f4:
         77:a0:13:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 19 18:12:22 2026 by rpki-client