Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/952bbe3b-79c2-341d-b71b-48bf68a5557c.roa
File:                     952bbe3b-79c2-341d-b71b-48bf68a5557c.roa (raw, json)
Hash identifier:          +mRxr9L74pJbYTfkK54qDpIeA6P5Rv6ufpp1wY2lf24=
Subject key identifier:   72:6C:6E:E3:3E:EB:92:01:07:DE:62:56:3F:B3:17:D9:91:0B:18:36
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584ED43257F1667207C4A5B59920
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/952bbe3b-79c2-341d-b71b-48bf68a5557c.roa
Signing time:             Fri 14 Aug 2026 01:00:13 +0000
ROA not before:           Fri 14 Aug 2026 01:00:13 +0000
ROA not after:            Thu 12 Nov 2026 02:00:13 +0000
asID:                     396550
IP address blocks:        192.82.133.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 21 Aug 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:d4:32:57:f1:66:72:07:c4:a5:b5:99:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Aug 14 01:00:13 2026 GMT
            Not After : Nov 12 02:00:13 2026 GMT
        Subject: CN=b25ed02e-47bb-4fd2-8fbe-fd5255ac2995
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8d:6a:b7:21:85:68:c1:ee:d7:3a:05:ab:28:5e:
                    9d:3d:9d:00:c8:d8:8f:c9:5d:81:3b:28:ba:76:e5:
                    cc:51:a6:6d:71:9b:50:ec:79:e3:17:df:e7:0f:cd:
                    ce:1a:86:77:4e:33:b2:bb:52:d4:54:7f:e1:0c:04:
                    07:66:d5:36:8d:e0:a2:04:3c:7e:b1:2d:d8:54:91:
                    d1:3f:4e:1a:4c:47:e8:da:33:72:db:20:16:6a:ae:
                    5c:05:bf:25:bb:f9:c0:43:e3:c8:ba:aa:0c:44:02:
                    9b:e4:20:16:7c:98:f9:65:65:0f:82:27:1b:22:cb:
                    d2:ba:62:6b:dd:91:7f:20:de:f4:c9:fa:9d:99:62:
                    ee:03:74:33:34:e8:eb:00:8d:c2:13:20:61:85:ca:
                    f2:49:2d:01:05:e1:5f:72:d6:63:a9:75:87:4b:0d:
                    e8:37:07:92:d0:81:a0:d3:4e:31:75:40:60:ca:e4:
                    ae:47:44:5b:c1:bf:48:d0:8f:95:0a:dd:cd:51:e1:
                    fb:dd:3b:2e:4a:6d:1e:f1:56:0b:13:29:a8:ef:05:
                    43:76:c2:bb:36:d0:25:3b:bd:02:27:7d:89:8f:44:
                    bd:49:72:06:88:da:ed:11:55:24:21:73:15:24:36:
                    00:37:41:36:76:0e:c3:c9:d3:13:95:f0:69:d5:8c:
                    15:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                72:6C:6E:E3:3E:EB:92:01:07:DE:62:56:3F:B3:17:D9:91:0B:18:36
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/952bbe3b-79c2-341d-b71b-48bf68a5557c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.82.133.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         bb:4a:6b:bb:36:a7:74:4b:85:d5:0f:66:31:d2:da:78:17:26:
         a9:02:5b:c8:6f:a6:ef:d4:f7:7b:34:b2:0e:03:e1:eb:f5:72:
         c4:68:12:0e:ad:27:b0:28:cf:3c:94:a0:3b:4f:a7:79:af:a2:
         17:ec:22:be:51:86:2f:41:88:45:17:1d:ac:7c:f3:4c:a9:98:
         00:5f:da:cf:43:b8:3d:6f:c3:ae:08:45:3a:01:54:3d:1c:ac:
         be:af:95:34:3a:c7:d0:4f:24:cd:01:88:27:1a:a1:d3:81:12:
         67:02:3f:55:8e:63:5a:a5:1b:04:b7:ba:27:6f:6f:53:33:09:
         33:f7:b8:fb:27:78:96:24:34:68:6b:96:d2:06:06:87:78:2a:
         79:1e:56:58:01:89:18:c8:eb:d9:df:36:d8:e9:3f:85:52:79:
         20:14:74:80:a3:c2:c7:c8:bc:44:5c:f2:4b:24:da:ec:4c:b2:
         07:d0:82:1e:d5:1e:b6:26:26:e7:e8:f4:70:81:30:e0:7b:22:
         92:86:9c:e6:12:a4:81:6b:d3:25:1e:3a:5e:3f:fa:cc:26:ad:
         55:88:20:54:71:99:a6:3b:c1:98:77:33:bc:8d:55:14:81:77:
         c0:2d:d5:46:06:1c:c6:b0:4f:71:d6:c8:c3:ec:39:29:a8:0b:
         9e:74:e8:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 19 19:32:21 2026 by rpki-client