Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/8c7ffc7a-8cf7-37b5-a7c8-71659a7d1ef9.roa
File:                     8c7ffc7a-8cf7-37b5-a7c8-71659a7d1ef9.roa (raw, json)
Hash identifier:          S80B7V/EU9IX+1J2l38ryVcF7F5NkrUvYEzGRoteCwI=
Subject key identifier:   E2:88:C2:49:6C:FB:1D:CB:EC:45:8E:73:84:21:72:34:1C:F6:5D:36
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584E31CF0DF926670F9ADB08D780
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/8c7ffc7a-8cf7-37b5-a7c8-71659a7d1ef9.roa
Signing time:             Tue 16 Jun 2026 21:00:12 +0000
ROA not before:           Tue 16 Jun 2026 21:00:12 +0000
ROA not after:            Mon 14 Sep 2026 21:00:12 +0000
asID:                     20362
IP address blocks:        192.82.133.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 30 Jun 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:31:cf:0d:f9:26:67:0f:9a:db:08:d7:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Jun 16 21:00:12 2026 GMT
            Not After : Sep 14 21:00:12 2026 GMT
        Subject: CN=7d88a2f1-795c-4ef0-a1ab-2d1e82c34fcf
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8b:f8:46:05:57:31:93:26:90:6f:62:f4:3a:be:
                    1c:cd:81:5c:1b:59:36:db:14:22:2b:33:ab:3c:27:
                    a9:83:d3:09:5f:89:a1:82:18:e3:df:47:07:d4:2a:
                    05:72:72:d4:58:07:5c:bd:d4:2b:58:aa:e1:9d:4e:
                    ef:05:8c:b0:c3:b7:3a:43:a5:c8:86:ab:e6:60:53:
                    84:e6:b2:5e:1b:d0:73:82:95:8f:d6:5c:41:ee:65:
                    99:ef:7e:ab:cb:48:5a:92:ee:67:39:04:21:86:70:
                    30:35:47:c8:a5:eb:ff:b4:b1:2d:d9:76:7e:47:47:
                    d8:f4:11:a7:0d:6f:c0:b4:0b:5d:05:83:ed:77:9f:
                    e4:50:f8:42:b2:20:23:2b:76:01:64:a3:ee:24:be:
                    a7:7c:b4:1a:4c:c6:eb:50:af:68:59:c5:e0:c8:5a:
                    f1:60:07:ef:23:62:94:2a:c5:60:c8:5c:9c:8f:69:
                    98:73:58:ea:92:83:d1:d8:23:e9:c7:31:ab:4d:8b:
                    da:59:cf:17:61:0f:1a:40:7e:d1:28:fc:e7:5f:55:
                    49:2e:6e:61:bf:a9:cd:bd:18:8d:37:24:33:30:e3:
                    96:d9:0c:32:86:a9:c6:66:81:16:21:8e:8a:12:70:
                    e2:0d:93:59:f5:01:dc:82:c8:ae:0c:16:39:69:87:
                    73:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E2:88:C2:49:6C:FB:1D:CB:EC:45:8E:73:84:21:72:34:1C:F6:5D:36
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/8c7ffc7a-8cf7-37b5-a7c8-71659a7d1ef9.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.82.133.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         bc:ad:85:a5:5c:a2:66:c4:7a:03:91:d5:44:90:58:91:1e:1a:
         75:1d:cb:47:42:37:99:4f:01:4b:fe:5e:7c:48:b2:d5:52:10:
         60:14:ea:36:2b:a6:1c:0d:ec:b8:e6:e6:c3:e0:5f:60:1d:56:
         54:6e:14:5d:dc:55:06:a3:22:9c:b5:7c:ea:70:de:61:01:78:
         5f:b9:10:93:d3:9c:6b:e0:2d:21:5d:bc:de:5c:e6:02:1f:d8:
         4f:7e:be:90:dd:29:01:0e:b1:0f:04:44:10:f8:e9:8e:45:db:
         c8:ba:14:36:bc:e7:c2:a1:ce:b2:08:01:bc:4b:fc:21:ad:c8:
         51:fc:84:94:82:6e:02:75:28:82:bc:37:29:94:76:65:34:9c:
         ce:f4:50:09:56:b5:70:d4:6a:c3:18:0e:b8:a5:db:b0:42:d6:
         bb:e5:ca:d3:d6:aa:52:69:7c:7b:36:69:e4:ae:0b:c4:53:11:
         43:bf:33:68:bd:d4:d6:75:aa:4d:d0:3b:19:cc:80:60:1f:75:
         12:e4:f2:1d:32:86:d2:00:6e:78:69:7d:3e:63:e8:73:b4:5d:
         f8:4e:a7:a4:4d:04:14:40:59:5d:8a:7d:b1:c0:16:2a:1c:0f:
         b3:b4:2b:d1:08:1c:08:d6:c0:34:5d:2a:e9:76:69:4e:33:01:
         63:08:16:ca
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE4xzw35JmcPmtsI14AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz
NmMyMB4XDTI2MDYxNjIxMDAxMloXDTI2MDkxNDIxMDAxMlowLzEtMCsGA1UEAxMk
N2Q4OGEyZjEtNzk1Yy00ZWYwLWExYWItMmQxZTgyYzM0ZmNmMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAi/hGBVcxkyaQb2L0Or4czYFcG1k22xQiKzOr
PCepg9MJX4mhghjj30cH1CoFcnLUWAdcvdQrWKrhnU7vBYyww7c6Q6XIhqvmYFOE
5rJeG9BzgpWP1lxB7mWZ736ry0haku5nOQQhhnAwNUfIpev/tLEt2XZ+R0fY9BGn
DW/AtAtdBYPtd5/kUPhCsiAjK3YBZKPuJL6nfLQaTMbrUK9oWcXgyFrxYAfvI2KU
KsVgyFycj2mYc1jqkoPR2CPpxzGrTYvaWc8XYQ8aQH7RKPznX1VJLm5hv6nNvRiN
NyQzMOOW2QwyhqnGZoEWIY6KEnDiDZNZ9QHcgsiuDBY5aYdz6wIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFOKIwkls+x3L7EWOc4QhcjQc9l02MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4
ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvOGM3ZmZjN2EtOGNmNy0z
N2I1LWE3YzgtNzE2NTlhN2QxZWY5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4
YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj
MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz
ZGNiYzM2YzIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwFKFMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBALythaVcombEegOR1USQWJEeGnUdy0dCN5lPAUv+XnxIstVSEGAU6jYr
phwN7Ljm5sPgX2AdVlRuFF3cVQajIpy1fOpw3mEBeF+5EJPTnGvgLSFdvN5c5gIf
2E9+vpDdKQEOsQ8ERBD46Y5F28i6FDa858KhzrIIAbxL/CGtyFH8hJSCbgJ1KIK8
NymUdmU0nM70UAlWtXDUasMYDril27BC1rvlytPWqlJpfHs2aeSuC8RTEUO/M2i9
1NZ1qk3QOxnMgGAfdRLk8h0yhtIAbnhpfT5j6HO0XfhOp6RNBBRAWV2KfbHAFioc
D7O0K9EIHAjWwDRdKul2aU4zAWMIFso=
-----END CERTIFICATE-----
Generated at Sun Jun 28 19:34:55 2026 by rpki-client