Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/82c1c53d-9221-38c1-a089-c364fe911aea.roa
File:                     82c1c53d-9221-38c1-a089-c364fe911aea.roa (raw, json)
Hash identifier:          /tcDJPNbwmyRFqQY7I6vWfzGQPr+pn5zmHjOhPo/p4Q=
Subject key identifier:   50:7F:86:F5:BA:D4:27:47:0C:7C:B4:B8:C1:95:8C:C8:49:5E:03:04
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584ED431E53439E12C54E006E680
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/82c1c53d-9221-38c1-a089-c364fe911aea.roa
Signing time:             Fri 14 Aug 2026 01:00:13 +0000
ROA not before:           Fri 14 Aug 2026 01:00:13 +0000
ROA not after:            Thu 12 Nov 2026 02:00:13 +0000
asID:                     396572
IP address blocks:        192.82.133.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 21 Aug 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:d4:31:e5:34:39:e1:2c:54:e0:06:e6:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Aug 14 01:00:13 2026 GMT
            Not After : Nov 12 02:00:13 2026 GMT
        Subject: CN=8df7e1da-347f-4de7-9bcb-ac6bacfdfa0f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:88:46:2b:e9:7b:5a:d5:ab:ed:6f:24:fb:0b:
                    eb:34:5d:4d:39:b5:42:dc:17:8b:d7:3f:96:3d:17:
                    64:a7:b2:26:aa:3c:9d:28:ef:58:36:e1:34:23:c9:
                    ca:83:2f:e5:19:1e:4d:c3:50:6c:02:5d:1f:d4:d3:
                    87:11:a0:ee:94:90:b8:f2:ac:92:bc:3f:5b:c8:ed:
                    a2:68:e4:ca:c6:10:e3:51:85:80:2c:55:e0:fd:1e:
                    5c:93:d0:3e:5d:e1:16:42:2b:82:40:2d:30:74:65:
                    ba:84:43:39:40:37:dd:a6:7c:6e:8a:c6:23:1e:40:
                    49:fa:e9:d3:f9:2b:b5:a0:12:40:1c:2c:a4:ce:57:
                    b4:f9:34:29:e5:9e:07:f2:c6:e5:ca:d5:10:02:01:
                    d5:82:1a:6c:11:6d:bd:ea:b1:9f:50:40:b4:28:f8:
                    35:5d:20:d1:31:08:19:29:03:a1:63:d9:39:db:c8:
                    8b:05:84:3f:9a:2d:81:48:a7:57:42:e6:71:01:d5:
                    be:43:93:70:87:81:03:fa:0f:1d:26:f8:3b:60:9c:
                    94:f5:b2:4e:c6:9f:af:e6:24:40:27:61:72:8a:a9:
                    36:24:79:0b:0e:5a:89:4f:af:af:f7:23:0f:b5:b3:
                    25:9a:ad:3e:12:29:1d:ad:00:97:46:4a:86:ee:2f:
                    49:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                50:7F:86:F5:BA:D4:27:47:0C:7C:B4:B8:C1:95:8C:C8:49:5E:03:04
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/82c1c53d-9221-38c1-a089-c364fe911aea.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.82.133.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         38:86:da:2d:54:9d:ef:e9:11:53:33:68:e9:17:ee:35:93:bc:
         90:8e:9a:00:27:cb:4c:f7:67:2d:19:74:15:df:a4:81:6a:a0:
         89:4f:0b:9b:d6:a1:b1:00:68:0b:b0:f3:6f:f2:05:7b:87:62:
         eb:3a:69:84:3c:4a:5b:f2:b4:f0:ac:20:47:8e:8f:7e:3a:31:
         6e:93:3d:c5:fc:26:d2:2e:f3:f2:ed:63:24:f2:06:10:87:c1:
         54:ac:01:0a:b3:70:fe:5c:33:8d:42:ea:3a:8e:e4:5c:9f:17:
         ab:4f:32:26:0c:c9:68:75:76:16:fe:3e:3a:a5:c6:ba:10:82:
         08:62:61:e1:1c:d5:08:08:4b:55:ff:f4:17:7c:58:c9:80:22:
         2d:b1:92:9d:10:3d:cf:9e:57:62:50:f6:a7:8b:b4:c5:97:26:
         c0:d3:6e:48:82:87:d9:9a:76:75:9c:1e:1e:e6:1b:56:84:b3:
         5d:34:ff:6a:81:d1:b4:36:6c:5e:ab:54:31:ab:31:5d:b9:b9:
         b6:7c:98:13:4a:5c:36:4b:dd:a3:4b:dc:4f:45:ca:17:07:6b:
         bd:0a:19:97:dd:90:d0:7b:2a:55:fc:a6:c9:b7:20:24:8f:27:
         06:68:0d:55:b0:66:f5:90:f0:59:61:64:29:f4:a9:56:ff:ac:
         38:58:b6:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 19 18:46:44 2026 by rpki-client