Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/86f7fa77-d781-3a43-a517-2a79f1a5d691.roa
File:                     86f7fa77-d781-3a43-a517-2a79f1a5d691.roa (raw, json)
Hash identifier:          DYgq4iQwl7mGSLsZ5+zM/bls/qeRwhFOKVqdr9XK8KE=
Subject key identifier:   0A:4E:04:DD:B1:EE:98:8E:49:22:25:0F:C1:36:C7:B2:7E:BA:66:E7
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584D4D5A90579776546545BA9BC0
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/86f7fa77-d781-3a43-a517-2a79f1a5d691.roa
Signing time:             Fri 27 Mar 2026 01:00:31 +0000
ROA not before:           Fri 27 Mar 2026 01:00:31 +0000
ROA not after:            Thu 25 Jun 2026 01:00:31 +0000
asID:                     396555
IP address blocks:        192.82.134.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 01 Apr 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:4d:5a:90:57:97:76:54:65:45:ba:9b:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Mar 27 01:00:31 2026 GMT
            Not After : Jun 25 01:00:31 2026 GMT
        Subject: CN=302a63a0-629b-4a82-8fb4-04b790541c92
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:87:de:f1:df:28:42:a2:3f:9f:80:f6:cd:43:2e:
                    38:cf:c7:6a:d1:16:6c:76:59:4b:8a:ed:13:24:14:
                    9d:80:3a:27:76:e8:8b:d8:5e:38:81:61:85:2b:35:
                    c5:91:b8:32:06:3c:c0:2b:61:94:cd:c4:50:41:37:
                    f9:d5:9d:f8:a2:7d:e4:c1:88:ac:7e:9b:5a:69:4d:
                    d5:5c:42:8d:fd:09:9b:4c:e1:09:97:2e:dd:a1:6c:
                    af:d7:eb:84:4c:b3:58:4c:6c:2f:08:a8:d0:13:ee:
                    19:85:5a:26:3d:26:76:05:4b:8f:1d:04:6c:17:0a:
                    ea:11:e0:fe:11:d4:58:6e:5c:1e:3a:32:80:92:ed:
                    36:d0:39:af:a3:f8:ed:9c:5a:b7:e2:64:96:97:a5:
                    80:21:62:f0:ba:47:3d:67:ea:7e:43:59:c0:f7:6a:
                    2f:10:e6:98:38:ec:8e:f9:14:89:97:a4:d6:15:3c:
                    c6:64:2f:bd:61:fc:2b:97:a7:83:2e:e4:88:ad:0e:
                    3a:21:d5:79:98:13:eb:17:b7:6e:59:ff:83:3c:10:
                    bb:ec:3a:16:7b:cd:82:8f:a5:2b:69:99:5d:bb:1c:
                    0d:3b:71:e8:6b:d1:36:81:2f:b1:78:a3:db:79:42:
                    bc:6e:04:67:87:2c:31:70:2a:93:92:e3:9f:ba:8c:
                    0a:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0A:4E:04:DD:B1:EE:98:8E:49:22:25:0F:C1:36:C7:B2:7E:BA:66:E7
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/86f7fa77-d781-3a43-a517-2a79f1a5d691.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.82.134.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         59:1d:9b:af:09:e5:da:d6:37:01:3a:9b:e4:48:5f:37:a1:2e:
         2f:c2:fc:72:e9:ab:18:a5:e2:43:a2:17:29:ec:d5:d5:e1:c8:
         61:d0:c3:08:a3:5c:8a:92:b0:b3:c0:97:b6:2f:87:16:7d:64:
         86:80:a3:5e:24:d2:91:4b:f7:c9:bf:64:99:e1:f4:e9:b9:f8:
         12:fd:de:d2:ae:2f:14:71:8a:43:88:34:65:f4:26:f2:76:09:
         b2:07:b9:1b:46:9b:31:99:d7:42:4a:3c:fe:d6:4a:a3:12:9e:
         bf:f5:91:c4:41:54:c8:0a:11:4d:4c:81:9f:a6:1d:5c:ca:2e:
         02:94:7e:70:a3:fd:07:89:6f:29:22:f0:97:84:c9:8c:38:3f:
         b9:d5:40:80:76:bb:7d:a8:02:59:f2:fc:ef:b1:99:58:9b:a6:
         22:06:b2:4a:8c:0b:b3:f7:bf:c6:80:75:44:d9:84:76:a6:d4:
         46:04:ae:53:b9:16:b5:16:34:93:0d:8b:9b:30:96:d4:04:b8:
         b5:44:e7:13:6d:0f:a1:bb:0a:d3:2f:ed:51:ed:ea:f9:31:a8:
         ef:5c:d3:1a:05:c1:c9:e6:70:11:92:4a:8a:2b:58:98:9e:19:
         06:41:31:14:f1:90:3b:bc:47:47:4d:32:bd:5f:54:73:52:13:
         0d:6f:06:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 30 03:00:40 2026 by rpki-client