Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/67a17424-8ffa-35e1-9104-e1b5e6ae6fa3.roa
File:                     67a17424-8ffa-35e1-9104-e1b5e6ae6fa3.roa (raw, json)
Hash identifier:          zaUh0gndjYfOMfa56s5QRuVmhBoEaCqo9g5R/40PT3g=
Subject key identifier:   39:8B:76:1E:53:9C:D8:5D:49:49:36:19:BC:0A:86:1A:9B:FC:1B:89
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584E2D9F0447E3F9926297360700
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/67a17424-8ffa-35e1-9104-e1b5e6ae6fa3.roa
Signing time:             Mon 15 Jun 2026 09:00:12 +0000
ROA not before:           Mon 15 Jun 2026 09:00:12 +0000
ROA not after:            Sun 13 Sep 2026 09:00:12 +0000
asID:                     396605
IP address blocks:        192.82.134.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 30 Jun 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:2d:9f:04:47:e3:f9:92:62:97:36:07:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Jun 15 09:00:12 2026 GMT
            Not After : Sep 13 09:00:12 2026 GMT
        Subject: CN=846f836e-7828-476d-b2f9-a50268498dc3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8d:58:19:8f:17:74:9b:91:5c:81:d3:ca:89:59:
                    92:12:8e:ba:42:a7:79:f6:53:a5:02:af:a2:cb:71:
                    d8:ec:e1:16:b1:70:95:57:cf:3a:6c:5f:0d:d9:f1:
                    af:c1:f2:af:59:c4:1e:cf:77:ab:70:ac:ba:9f:0a:
                    0b:be:34:3d:41:48:92:0a:2c:89:d8:e4:ef:a2:8d:
                    6b:09:bf:5f:35:af:c3:25:7e:7c:30:23:ca:17:6e:
                    27:13:be:06:e4:56:6f:c9:13:97:e7:91:cd:84:e7:
                    e0:a3:58:22:33:8c:92:b2:0a:9c:79:e7:f0:21:d8:
                    84:c0:c3:31:6f:f4:00:d2:12:17:5d:4e:ec:9c:13:
                    0f:54:3a:9b:fa:49:da:6d:db:72:79:3c:7b:2c:88:
                    a4:91:8b:82:a5:4d:4f:72:5d:69:86:ff:f0:1d:fb:
                    72:1b:f7:9e:ec:2e:17:0b:3b:fb:62:de:76:8b:da:
                    47:be:c3:c0:87:1a:50:00:e6:c6:8b:69:f9:29:72:
                    05:c5:64:81:66:e8:fb:79:5a:95:46:4a:84:a7:9c:
                    a8:3c:48:d1:bb:14:9c:ff:db:ff:ec:09:38:24:5d:
                    e0:a8:c1:bb:c0:e4:cd:a8:04:6b:8f:5f:4c:1a:d4:
                    cf:47:c9:9c:46:df:2e:0c:78:9b:55:7f:0e:1b:93:
                    a9:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                39:8B:76:1E:53:9C:D8:5D:49:49:36:19:BC:0A:86:1A:9B:FC:1B:89
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/67a17424-8ffa-35e1-9104-e1b5e6ae6fa3.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.82.134.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         94:03:05:29:ce:9a:b3:46:30:56:4f:35:29:11:8a:da:ab:79:
         a8:58:63:23:cd:9f:61:52:88:9d:ac:6d:ee:68:1f:f8:4b:62:
         08:3e:7c:10:da:44:34:2e:27:34:d7:da:d8:f8:f0:0d:65:72:
         11:2f:22:5f:94:6a:33:95:e9:bd:df:3f:eb:0c:f8:b6:c3:87:
         cc:d3:29:85:5c:57:a3:59:70:05:e2:da:c3:89:87:34:fc:78:
         9a:32:24:73:50:2d:d7:c4:38:5b:9d:96:33:55:a1:ed:84:8c:
         38:b1:3e:5e:aa:20:cd:e3:fd:9c:fd:03:3b:13:eb:b8:20:aa:
         25:c9:ce:4a:c9:1d:7d:ff:c4:2f:98:ad:c5:58:42:8d:7f:16:
         8a:41:f6:0b:22:3c:e7:61:24:5a:47:69:1f:28:7a:5c:68:fb:
         f4:e7:40:72:4b:67:90:f0:2b:38:a1:1a:51:c7:1d:40:9b:47:
         11:5c:fb:ca:8d:0a:33:02:5a:8d:f9:9a:de:ac:fa:ae:62:ba:
         c4:76:3a:ab:78:2e:a9:a1:f1:dc:b7:b4:7d:16:3c:7e:9f:77:
         ee:10:35:ee:95:ec:90:43:eb:1d:34:76:9b:f4:e8:bd:0c:20:
         0b:29:7d:53:10:25:e9:86:f7:75:20:fb:78:62:b3:15:a1:c5:
         72:36:1a:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 28 20:36:09 2026 by rpki-client