Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/883a9385-d017-3aed-aec5-daea05fa8417.roa
File:                     883a9385-d017-3aed-aec5-daea05fa8417.roa (raw, json)
Hash identifier:          jWsxw3zZZa1C0JF7YLvpBIKSweRExva47oZsTpNFk4o=
Subject key identifier:   25:7A:46:87:84:23:A1:D2:A6:35:02:4D:E2:EF:75:26:B1:40:03:1F
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584D52434AE1DBF2A30DBC39CE80
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/883a9385-d017-3aed-aec5-daea05fa8417.roa
Signing time:             Sat 28 Mar 2026 19:13:19 +0000
ROA not before:           Sat 28 Mar 2026 19:13:19 +0000
ROA not after:            Fri 26 Jun 2026 19:13:19 +0000
asID:                     396613
IP address blocks:        192.82.133.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 01 Apr 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:52:43:4a:e1:db:f2:a3:0d:bc:39:ce:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Mar 28 19:13:19 2026 GMT
            Not After : Jun 26 19:13:19 2026 GMT
        Subject: CN=e8775119-1cf6-4c2f-8c1b-7c2b026934f8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:07:42:6c:01:fc:ab:be:c7:55:a5:e1:a5:96:
                    ef:94:a1:0c:64:1e:7a:dc:f7:b0:22:6a:98:60:84:
                    2a:46:9e:59:8c:9c:d7:fb:95:db:f4:bf:4b:2a:86:
                    85:05:b3:35:e0:0c:22:58:f5:64:b8:62:09:d5:23:
                    10:9e:c5:8d:d9:1d:7b:1f:40:d8:b7:a1:dd:cd:60:
                    76:5f:01:e1:24:67:e5:e1:56:d4:98:65:50:b2:cb:
                    2b:b6:bf:46:db:bc:c7:ce:3e:83:9f:ef:ce:57:ba:
                    94:e2:60:d2:e3:65:76:61:95:6f:8b:4a:27:8b:3c:
                    e6:3a:e4:5e:00:e2:ed:96:54:10:c9:f9:f0:d8:9d:
                    44:48:de:79:6b:5d:9d:a6:e4:55:cb:54:71:09:67:
                    32:ff:3c:75:81:6f:4b:ba:53:1a:91:26:fa:c1:12:
                    0a:a1:27:2f:04:f8:f9:66:58:af:a4:17:4e:97:c8:
                    c7:e7:61:9a:6f:81:c9:c9:5d:80:9d:ae:b8:54:8c:
                    f6:cf:6e:33:6d:09:8b:d0:4f:6f:26:1b:f4:ca:11:
                    e0:ac:67:f2:f8:97:35:40:71:c1:ee:25:d1:f5:84:
                    a3:cd:92:1b:48:10:50:4e:c3:09:28:3d:84:9a:ed:
                    24:1b:74:f7:83:b6:6c:30:aa:38:a1:9a:8c:c7:32:
                    02:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                25:7A:46:87:84:23:A1:D2:A6:35:02:4D:E2:EF:75:26:B1:40:03:1F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/883a9385-d017-3aed-aec5-daea05fa8417.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.82.133.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         71:e1:4e:8a:54:e1:eb:87:31:08:73:e0:73:11:a3:ce:bb:77:
         3a:52:9e:4e:21:19:6e:0c:d7:da:b2:b8:70:1c:77:42:ce:67:
         52:20:78:16:94:08:30:38:c4:39:c5:5a:ae:f6:ea:0d:30:c2:
         8e:5f:f4:cb:4d:ec:b5:4b:fa:67:c7:01:8d:72:fa:b9:c4:0a:
         36:ab:e5:86:6a:99:d0:f7:ed:9b:79:9a:13:be:cd:19:73:38:
         27:af:fe:f7:bc:cd:e8:f5:a7:53:9a:18:61:dd:55:7c:fd:48:
         ed:cc:58:2f:b0:81:c1:62:87:56:ea:a0:2c:2d:9e:95:7c:b8:
         33:12:07:4e:20:99:3d:4d:73:f4:20:47:d6:c9:69:2f:3d:5e:
         8f:15:f2:57:e5:dc:f9:16:92:3e:19:dd:02:69:16:1d:fb:49:
         61:84:ad:ea:a1:1f:88:31:84:be:b8:4f:07:5f:1f:2f:04:ce:
         4c:89:18:6c:94:73:57:c5:20:1e:ed:63:ef:05:d6:89:60:14:
         99:a6:f0:01:23:61:d3:9a:d6:09:4f:7d:1a:ef:cb:d1:de:b8:
         51:d2:86:fa:22:78:55:95:50:c1:d8:58:b6:4d:96:91:44:6e:
         6e:0b:93:b5:e6:37:b8:db:5b:2d:66:3c:f7:89:dc:5c:1f:36:
         25:df:b4:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 22:40:42 2026 by rpki-client