Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/4ab9e45b-ac09-3f25-895c-801557eaa557.roa
File:                     4ab9e45b-ac09-3f25-895c-801557eaa557.roa (raw, json)
Hash identifier:          GOXxqOPqap8iNE77NqH/sqokKD5Ck4KKq61kxiEAe/M=
Subject key identifier:   5A:DF:C4:81:F2:64:B4:4C:B8:D8:A6:77:51:89:09:7A:06:04:9E:80
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584ED431DD2D22DD45C919895300
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/4ab9e45b-ac09-3f25-895c-801557eaa557.roa
Signing time:             Fri 14 Aug 2026 01:00:13 +0000
ROA not before:           Fri 14 Aug 2026 01:00:13 +0000
ROA not after:            Thu 12 Nov 2026 02:00:13 +0000
asID:                     396560
IP address blocks:        192.82.133.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 21 Aug 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:d4:31:dd:2d:22:dd:45:c9:19:89:53:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Aug 14 01:00:13 2026 GMT
            Not After : Nov 12 02:00:13 2026 GMT
        Subject: CN=413212f0-70c9-4f96-a9b3-287dac55ab5b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:8c:01:fe:d4:ad:41:d3:d4:19:2a:bb:29:b9:
                    af:65:c4:e4:51:cd:a7:d1:70:3c:db:c1:9a:56:67:
                    93:42:fb:53:ab:01:0a:74:0d:9a:61:39:94:82:09:
                    fb:fd:d5:a2:85:19:6a:58:41:dc:28:3b:f5:d2:f7:
                    09:0e:3a:2a:ee:b7:75:ec:52:d2:d4:e2:e4:15:b7:
                    cb:b1:0f:56:89:ee:86:98:87:06:93:ea:ba:c6:9f:
                    11:88:b2:ee:ec:18:67:81:a0:2f:e7:83:c0:f3:48:
                    15:80:5b:7f:27:88:4b:4e:b0:f0:92:5f:30:2f:4b:
                    27:bd:9a:69:5e:97:46:e0:2a:11:d6:86:94:fd:99:
                    3d:8e:a4:b6:30:a2:88:b8:48:0f:53:12:f5:2e:25:
                    0d:d2:ed:ac:61:53:10:1d:94:0c:45:eb:29:40:c2:
                    09:8c:6a:05:01:e6:36:4f:cc:9c:59:fe:b0:a4:29:
                    71:16:b9:ea:71:c8:25:48:30:91:ae:85:ed:a3:4d:
                    04:e4:92:fb:86:33:90:63:8e:c6:12:c3:0b:a5:04:
                    51:6b:c7:66:22:fe:6c:d1:ff:9a:2f:da:62:91:d6:
                    99:25:3a:dc:05:df:55:83:dc:b2:2c:9c:71:f4:e1:
                    57:f4:f9:f2:28:ad:6b:20:f3:b1:f2:07:45:d9:41:
                    1a:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5A:DF:C4:81:F2:64:B4:4C:B8:D8:A6:77:51:89:09:7A:06:04:9E:80
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/4ab9e45b-ac09-3f25-895c-801557eaa557.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.82.133.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         b3:24:9b:9e:3b:f9:59:a2:15:73:55:01:57:65:96:1a:5c:9d:
         be:f6:b5:15:21:c3:0d:dd:6b:e5:f7:a6:83:a5:92:04:ff:c9:
         de:6c:08:10:d7:c3:b2:82:41:13:60:e8:20:54:66:a6:3b:ef:
         c1:77:9a:04:ca:1b:77:19:ec:b5:f2:25:d1:7a:82:a8:57:a9:
         cc:83:ad:62:b8:3d:74:e5:69:fa:db:1b:7f:e8:f8:3c:2c:5a:
         7a:16:d4:32:06:fb:9e:3b:b1:79:90:d7:a9:c8:44:42:a6:93:
         bf:a1:16:fd:d5:c0:c9:90:5f:ef:11:40:59:f8:45:14:a2:16:
         51:ca:1c:f3:5b:ce:93:aa:ac:f1:c6:b7:a8:8b:1e:21:21:a6:
         c1:7c:e4:7c:55:cf:9c:df:98:e2:f9:4f:27:98:3c:da:fc:12:
         73:c9:87:be:fb:53:b6:bf:55:3c:64:4f:c9:f3:91:79:b8:f2:
         19:31:d4:94:19:8d:9d:38:17:b3:5a:c6:a6:c2:b8:fd:7b:b0:
         b8:3b:c9:9d:40:fa:09:12:8a:32:49:30:66:44:16:8d:8e:43:
         ce:d4:a7:f3:e7:d5:03:5c:93:0a:be:5c:63:26:dd:05:e6:2a:
         e1:5b:de:2a:2d:e2:7b:de:2d:b2:6c:36:2d:60:de:8b:1d:8f:
         41:64:03:c6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 19 17:06:25 2026 by rpki-client