Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/82c1c53d-9221-38c1-a089-c364fe911aea.roa
File:                     82c1c53d-9221-38c1-a089-c364fe911aea.roa (raw, json)
Hash identifier:          xoDqR2Es7tBtm02E0hE715ixCiB2iMyGNM79W0A3PFg=
Subject key identifier:   3D:EF:1D:0A:45:32:B5:9F:EF:F1:6A:45:15:0C:F6:AE:55:F2:DE:6A
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584D5243497956586B9A34624538
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/82c1c53d-9221-38c1-a089-c364fe911aea.roa
Signing time:             Sat 28 Mar 2026 19:13:19 +0000
ROA not before:           Sat 28 Mar 2026 19:13:19 +0000
ROA not after:            Fri 26 Jun 2026 19:13:19 +0000
asID:                     396572
IP address blocks:        192.82.133.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 01 Apr 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:52:43:49:79:56:58:6b:9a:34:62:45:38
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Mar 28 19:13:19 2026 GMT
            Not After : Jun 26 19:13:19 2026 GMT
        Subject: CN=f60930e0-a44b-49d4-85c1-def1e25e2034
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:4c:be:f6:73:b2:94:5b:8c:c5:16:17:6a:3d:
                    a2:0f:f5:ae:1f:b1:26:48:6f:3d:7e:18:5b:ab:8d:
                    c7:27:9a:11:cb:67:21:be:d8:88:e8:a2:dd:7a:ba:
                    2c:c9:33:cb:ca:ba:8f:d2:b9:1f:39:81:83:20:52:
                    89:60:f2:f9:f0:3c:cf:ef:e3:c2:40:8d:4a:98:68:
                    22:be:8d:39:26:87:20:ed:a5:a9:d2:15:6c:42:49:
                    e5:0d:82:54:b1:6b:08:8d:27:7f:f8:98:de:91:67:
                    c2:73:4d:d6:b3:0c:cb:d2:55:2d:7d:f7:96:9f:25:
                    06:1c:44:09:10:86:df:06:1c:43:17:3a:d0:9c:d4:
                    de:34:cc:ce:b6:72:5e:6a:fb:11:9e:ae:ed:74:6e:
                    c1:13:82:67:8b:06:6b:e6:56:53:d8:75:cc:8f:22:
                    d8:6d:a6:67:61:2f:18:90:9d:c3:02:3e:7d:f6:15:
                    d5:80:cc:c2:31:c3:24:df:b4:b4:60:aa:15:b8:af:
                    9a:15:39:0f:0c:d4:54:27:36:81:65:6d:2f:93:1d:
                    ad:fe:c5:2d:b9:f3:0e:a0:d4:6f:6b:b9:b2:9b:60:
                    d3:87:0d:6b:91:ed:37:06:ee:d9:c6:4d:cf:db:12:
                    87:92:59:bb:7d:4b:60:7f:eb:d0:c0:bf:56:35:3f:
                    be:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3D:EF:1D:0A:45:32:B5:9F:EF:F1:6A:45:15:0C:F6:AE:55:F2:DE:6A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/82c1c53d-9221-38c1-a089-c364fe911aea.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.82.133.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         24:94:5b:91:6f:f9:d5:5c:79:23:08:9a:a4:64:74:67:a6:9b:
         12:4e:f4:81:c8:69:62:1d:5c:74:52:91:80:48:17:78:55:3e:
         21:91:4e:a8:df:90:27:23:95:b0:91:cd:fc:69:ae:2f:56:c1:
         d1:21:92:16:3f:aa:98:ff:1a:b4:f2:64:25:12:61:66:92:67:
         10:92:7f:2d:de:85:71:2f:41:f0:06:36:3c:70:b9:84:0c:f5:
         ec:97:95:f2:31:fb:be:93:0d:72:e7:f2:c0:e7:17:41:c0:32:
         35:f7:fe:08:6f:3f:c5:8b:6a:85:3a:48:a9:63:df:9b:4e:2b:
         9e:1f:59:d4:44:34:ee:55:0b:ad:39:76:4e:4a:bb:76:10:c6:
         0d:47:ea:ac:53:f7:4c:03:dd:a2:31:60:40:cb:de:db:88:88:
         7e:9a:0b:65:df:66:9a:57:1f:23:49:59:f9:9e:7f:6e:8b:1d:
         79:c9:fe:35:91:fc:7b:74:97:de:54:15:91:0d:c1:8b:56:6b:
         c7:9b:57:e4:1f:fc:81:d5:c0:7a:32:0a:ee:53:f9:be:18:65:
         11:07:30:47:46:5a:be:d8:b7:a1:39:92:72:6b:4d:36:ea:e0:
         ce:27:2d:e6:74:73:67:a9:61:b7:b8:c2:b7:fc:5b:5c:0e:44:
         a4:f4:bf:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 22:47:05 2026 by rpki-client