Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/b9badfe9-637a-3702-8f9f-427ef592db8a.roa
File:                     b9badfe9-637a-3702-8f9f-427ef592db8a.roa (raw, json)
Hash identifier:          xJzHswHoji2MDcmzr4WqwFGPaBOOcPo8pMk9HbkHrEA=
Subject key identifier:   F2:45:83:80:96:C0:B0:91:4E:0A:CC:95:F3:50:5E:A9:97:82:9F:32
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584E2D9F3F9BF11824E902FE1200
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/b9badfe9-637a-3702-8f9f-427ef592db8a.roa
Signing time:             Mon 15 Jun 2026 09:00:12 +0000
ROA not before:           Mon 15 Jun 2026 09:00:12 +0000
ROA not after:            Sun 13 Sep 2026 09:00:12 +0000
asID:                     397203
IP address blocks:        192.82.134.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 30 Jun 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:2d:9f:3f:9b:f1:18:24:e9:02:fe:12:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Jun 15 09:00:12 2026 GMT
            Not After : Sep 13 09:00:12 2026 GMT
        Subject: CN=3b7aee89-02cd-4d20-96db-7a4ecefcc708
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:86:8b:b5:45:59:2a:97:04:a8:29:05:fe:47:e1:
                    96:35:3d:ec:4d:a7:a4:45:77:d5:09:6a:73:d8:5b:
                    dd:4a:c3:f8:35:3b:ee:9b:06:fc:f7:64:50:d1:18:
                    ad:e2:85:c5:43:63:1f:fd:95:9e:d6:6f:8b:95:1b:
                    f0:71:a5:2c:96:05:cf:53:33:af:99:dc:3d:06:59:
                    c0:12:c5:a1:a2:95:0b:0d:5e:d8:63:5e:ff:68:2b:
                    4a:3d:1c:1f:6b:8b:e9:77:de:d8:09:92:ed:5c:77:
                    7e:03:73:93:41:5c:bd:d4:99:63:eb:d8:67:62:17:
                    c7:6d:6c:03:da:12:86:29:36:5a:d2:1a:af:36:21:
                    fb:56:41:f9:8e:d7:f1:1a:a0:36:12:41:b0:1a:b9:
                    53:4d:d0:d3:fb:cf:4a:fb:0b:3b:cb:2d:7f:66:c4:
                    5d:49:59:dc:03:d8:d4:77:d5:d8:94:fa:15:4a:ba:
                    39:36:12:9c:88:4f:5c:9b:a4:f0:84:a4:bf:b5:99:
                    93:f4:5a:74:0a:64:10:d8:f0:ad:46:b2:ae:ab:75:
                    05:7f:dc:de:17:81:90:31:6e:2a:ae:64:c0:e4:c0:
                    52:95:f2:59:d9:01:58:da:b2:fb:6e:89:bc:db:45:
                    6c:98:cf:48:0e:fb:74:1d:37:c8:88:18:79:6a:5e:
                    cf:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F2:45:83:80:96:C0:B0:91:4E:0A:CC:95:F3:50:5E:A9:97:82:9F:32
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/b9badfe9-637a-3702-8f9f-427ef592db8a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.82.134.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         25:5d:41:dc:a9:38:34:e6:0e:7c:8e:85:49:83:f9:41:43:30:
         89:ca:a5:47:9c:61:7c:e2:09:7b:cf:60:a4:67:d6:f3:2c:a1:
         20:fa:06:d6:9a:51:e6:f3:9b:05:64:c3:ec:a4:79:c3:a1:e9:
         95:e8:72:7b:d3:5d:47:cd:6a:88:80:d4:55:1c:88:c4:c0:b6:
         68:16:c0:9a:ae:a5:94:66:eb:99:bb:60:c9:4f:c2:ea:e6:8f:
         55:eb:be:a2:f0:ee:3a:f2:3f:13:01:2f:e0:a4:cd:93:d1:f9:
         85:64:1c:6d:7e:a7:19:a4:6a:28:df:e5:14:fc:5a:2a:8a:d8:
         c8:5c:e4:c2:8b:00:1e:9f:2e:7d:43:f4:33:06:40:97:81:99:
         d3:74:b2:25:f6:65:97:e8:7b:b5:a8:16:8b:8a:db:52:66:91:
         2a:a8:80:6c:59:41:4a:91:1f:91:8c:c7:c6:f0:3d:6c:9a:0f:
         4a:fd:bf:39:66:fe:42:35:29:f4:9c:d8:b9:8e:0f:f7:1c:47:
         25:42:ab:d4:84:d8:81:a9:22:42:17:1c:d3:ae:91:e9:10:64:
         12:b4:c5:c4:55:8f:a0:5c:63:11:05:c7:44:ff:ef:c6:1a:95:
         16:f1:8c:48:22:a8:33:45:0a:49:a9:8c:7d:65:e2:fb:d4:2e:
         ac:62:32:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 28 19:36:29 2026 by rpki-client