Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/952bbe3b-79c2-341d-b71b-48bf68a5557c.roa
File:                     952bbe3b-79c2-341d-b71b-48bf68a5557c.roa (raw, json)
Hash identifier:          40m1ryo3yILg3zXADzusBpYctjltXwGB/vvDTcZx/VE=
Subject key identifier:   16:F2:6A:6C:DB:D2:92:6F:6C:98:7E:58:D0:7E:F0:DB:66:40:59:42
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584D5243C1685A30196AF7AC8B00
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/952bbe3b-79c2-341d-b71b-48bf68a5557c.roa
Signing time:             Sat 28 Mar 2026 19:13:19 +0000
ROA not before:           Sat 28 Mar 2026 19:13:19 +0000
ROA not after:            Fri 26 Jun 2026 19:13:19 +0000
asID:                     396550
IP address blocks:        192.82.133.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 01 Apr 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:52:43:c1:68:5a:30:19:6a:f7:ac:8b:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Mar 28 19:13:19 2026 GMT
            Not After : Jun 26 19:13:19 2026 GMT
        Subject: CN=940bcbd6-cbad-4559-9cfc-557c32551052
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:6a:e9:e5:f1:ae:6c:bc:e4:3f:9d:5d:78:6e:
                    6f:77:cc:ec:16:9d:da:d4:df:de:a6:0f:25:db:9a:
                    d5:95:05:d2:fd:22:e3:db:72:ae:ad:10:33:fc:ee:
                    89:1a:da:a6:86:92:07:85:c6:b2:d6:8f:95:d2:e1:
                    2a:08:7b:fa:2a:df:93:9e:c2:46:55:fe:02:a2:99:
                    df:0d:23:b6:c0:e9:96:4a:34:6b:2a:37:4c:b7:3a:
                    fd:6c:24:4b:aa:69:3e:b9:c4:6f:0e:e4:96:ff:8b:
                    f0:dd:2f:8d:0e:9a:df:67:bd:a5:62:02:57:cc:96:
                    a1:24:18:31:05:20:82:20:8a:dc:31:a8:c0:9c:d3:
                    88:50:89:ac:80:74:8b:1a:fa:f3:c8:69:8b:8d:94:
                    81:e4:d5:16:be:5b:2c:59:15:25:23:a8:9c:b4:a6:
                    d9:01:f8:96:ca:e2:a6:1a:31:06:ac:c3:91:27:47:
                    5e:97:c6:80:11:41:28:18:1d:f3:64:16:f2:0e:8b:
                    26:33:68:70:72:a4:7d:ab:39:0d:d0:05:9d:09:ca:
                    2f:d3:91:48:8f:08:02:1e:b7:e0:d2:93:97:42:0a:
                    d3:00:68:59:85:da:02:72:0a:17:91:6b:00:3c:15:
                    83:72:65:08:3a:2d:f0:29:69:c5:8d:90:aa:78:8c:
                    f8:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                16:F2:6A:6C:DB:D2:92:6F:6C:98:7E:58:D0:7E:F0:DB:66:40:59:42
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/952bbe3b-79c2-341d-b71b-48bf68a5557c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.82.133.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         67:42:93:d3:d9:0f:08:18:dc:c3:00:fa:9a:32:d0:f2:09:e4:
         48:88:dd:3b:cf:12:43:52:2a:88:62:1e:7e:4e:24:80:13:5d:
         77:1a:75:3e:bf:71:11:be:99:51:d8:86:9a:50:65:70:77:42:
         b2:93:20:8e:c6:d8:74:5e:e0:3f:0c:36:af:fa:56:67:e9:63:
         59:26:74:36:75:5c:63:50:b7:55:5f:36:5b:8b:df:72:d1:ea:
         3a:72:45:5f:30:d2:35:cf:a1:fd:ac:08:31:47:5c:b8:b1:31:
         3f:8e:b4:83:4b:4e:c9:9e:9f:c4:bd:57:b0:76:a5:54:b2:ae:
         0a:fb:4d:fc:9e:7a:09:8f:68:45:92:8a:c9:10:d9:c0:e4:f2:
         49:8d:b7:fd:58:37:5f:77:e7:d9:85:5d:27:56:a4:b6:d1:65:
         94:be:8c:d6:50:69:6d:8e:9b:7c:bb:21:b7:c8:3c:b5:a5:73:
         b3:22:dc:bc:45:e5:21:13:42:f3:8d:c6:7a:fb:b9:61:7a:aa:
         f9:e6:c7:77:a0:fa:2d:a3:34:d1:6d:61:5d:92:56:64:ac:64:
         6c:68:4e:b2:8c:db:fd:51:63:5d:d1:f4:19:8c:0e:97:56:f7:
         86:d5:56:7a:bd:7d:d9:87:8e:41:62:99:18:6e:1d:e4:94:fb:
         a8:92:7a:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 30 01:28:21 2026 by rpki-client