Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/82f15135-8d3a-3aab-8426-e5c442e61eb2.roa
File:                     82f15135-8d3a-3aab-8426-e5c442e61eb2.roa (raw, json)
Hash identifier:          HZtQMdTbAqhc/c2UD1kHYKoKilVo58SvTrSPCVDgFuA=
Subject key identifier:   F0:47:CF:53:25:0A:83:BE:6A:05:0A:63:68:24:D9:E0:98:9C:44:15
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584ED431E567328DC6D7C5BAA980
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/82f15135-8d3a-3aab-8426-e5c442e61eb2.roa
Signing time:             Fri 14 Aug 2026 01:00:13 +0000
ROA not before:           Fri 14 Aug 2026 01:00:13 +0000
ROA not after:            Thu 12 Nov 2026 02:00:13 +0000
asID:                     396567
IP address blocks:        192.82.133.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 21 Aug 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:d4:31:e5:67:32:8d:c6:d7:c5:ba:a9:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Aug 14 01:00:13 2026 GMT
            Not After : Nov 12 02:00:13 2026 GMT
        Subject: CN=23ca5b89-1932-4eee-9201-719ba7abb41a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8c:84:7a:cf:b5:e1:c9:36:a4:1c:c2:bd:ca:58:
                    78:16:89:e4:d8:20:b8:f1:3b:84:fb:8c:fa:6e:0e:
                    77:d9:bd:41:d1:88:bf:51:97:b0:58:37:72:6d:80:
                    a9:4d:5c:6e:b5:75:d6:89:94:ee:fa:ba:ad:63:c4:
                    18:52:44:84:73:ed:5f:44:fe:66:8e:3e:a7:69:7e:
                    f7:0d:e8:28:5b:91:87:1e:93:80:b9:77:a6:43:60:
                    12:ce:aa:ee:95:27:8e:65:fb:73:c6:7f:72:07:69:
                    f1:99:5b:80:54:97:4f:75:01:a4:3b:a2:0d:3c:4e:
                    7f:36:5d:f4:44:6c:83:2e:f9:ee:d3:51:f3:88:9d:
                    10:0b:59:d7:b5:be:02:5b:59:15:a1:b1:fe:4c:93:
                    bb:b3:c2:db:96:b1:6f:ef:c2:c5:34:a8:48:4c:67:
                    a7:18:77:24:94:50:2d:a1:73:f7:7c:03:77:50:8e:
                    7e:49:9a:49:9a:d7:65:87:85:90:04:70:1b:05:da:
                    d7:cf:06:07:91:1d:41:3e:60:02:9b:61:5e:b7:7f:
                    ef:14:d6:65:a7:ed:79:c1:b0:51:89:a0:cf:7d:bd:
                    e7:56:f2:8a:99:30:8f:4e:3d:94:ce:6b:c2:7f:d4:
                    56:54:da:03:d8:46:8c:6d:6c:1a:ae:ac:ec:f1:6e:
                    8e:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F0:47:CF:53:25:0A:83:BE:6A:05:0A:63:68:24:D9:E0:98:9C:44:15
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/82f15135-8d3a-3aab-8426-e5c442e61eb2.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.82.133.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         83:d1:e9:2c:75:4c:cd:13:ef:ed:9e:1d:83:8e:bb:2e:db:ce:
         24:17:33:d3:78:99:55:9d:29:b7:a9:03:3c:c6:7c:30:ae:d8:
         bc:37:09:66:68:5b:e6:5a:c7:ac:e9:f0:f4:5d:ac:fc:bc:e4:
         b2:87:75:4c:31:ba:28:a6:55:a2:ed:2d:30:22:ad:f3:24:68:
         5f:bd:e7:02:68:d1:60:af:a7:fc:0a:d8:61:1d:dd:7f:ef:43:
         4e:73:83:86:71:cc:71:b8:68:2d:ce:2e:2b:48:93:78:bd:19:
         e2:87:19:88:2a:97:86:c6:d5:7b:95:da:b1:6b:f5:d0:d6:a3:
         af:a4:27:2a:90:1b:32:7d:ef:cb:4a:f9:53:66:30:eb:0f:86:
         ac:f3:fd:01:77:85:ef:87:2e:e6:93:c5:6d:05:65:18:e0:4f:
         4b:be:6a:a4:14:ab:c6:48:8b:b3:46:e5:d1:08:82:0e:05:df:
         d0:97:49:aa:d7:94:a9:06:eb:55:f3:da:e9:16:cc:91:cd:47:
         13:1a:d3:6c:3d:2b:12:67:a8:1d:d7:c6:51:25:8c:77:a7:a2:
         28:58:e5:fa:5b:bd:27:0c:66:f8:40:a8:ce:51:52:c1:07:97:
         49:e6:06:f9:58:f0:48:a6:b5:49:e9:2a:72:3a:37:9f:64:34:
         ef:c6:c7:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 19 18:44:00 2026 by rpki-client