Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/bd2faaab-feb4-3aae-ab80-3bbafd15e1a5.roa
File:                     bd2faaab-feb4-3aae-ab80-3bbafd15e1a5.roa (raw, json)
Hash identifier:          2QnnYLfYenu1/C2HLVJdB4fr6AVv1nXTD0bFMEAgRyM=
Subject key identifier:   F3:CF:42:73:09:9A:E7:71:03:D8:84:C3:E5:B2:88:D9:E3:53:21:8D
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584F71EDBB779C2E9322D6D8BD80
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/bd2faaab-feb4-3aae-ab80-3bbafd15e1a5.roa
Signing time:             Fri 09 Oct 2026 13:00:13 +0000
ROA not before:           Fri 09 Oct 2026 13:00:13 +0000
ROA not after:            Thu 07 Jan 2027 14:00:13 +0000
asID:                     396560
IP address blocks:        192.82.134.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 12 Oct 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:71:ed:bb:77:9c:2e:93:22:d6:d8:bd:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Oct  9 13:00:13 2026 GMT
            Not After : Jan  7 14:00:13 2027 GMT
        Subject: CN=bb3192ce-ae4d-4cb7-8692-b30e8e9ef079
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:10:7d:34:30:af:a9:fb:42:13:ef:3c:9b:e5:
                    0f:49:e8:dd:df:c4:8d:15:11:de:5b:fb:5d:b5:b5:
                    dd:46:d8:f7:09:8e:09:06:91:2f:a4:fe:64:6c:64:
                    1d:f3:3b:dd:78:13:7f:42:46:cc:37:fb:6e:9b:b8:
                    11:83:e9:5f:ac:e6:42:ab:4a:48:52:b7:a8:e6:1e:
                    9a:6f:15:7e:89:5b:e1:27:bd:16:6c:bb:47:dc:76:
                    d3:d1:40:0f:fb:9d:3d:ee:94:ba:3b:6e:cd:16:32:
                    3d:92:0b:8c:9f:62:ac:79:7e:52:14:85:52:93:20:
                    7f:3a:51:30:aa:c2:4b:7b:ef:e4:79:83:67:d3:e5:
                    40:8a:24:bb:61:5d:6a:9f:86:6c:1e:ab:6d:fe:89:
                    72:d3:9a:a7:f4:ee:fd:ab:70:16:de:3a:3e:28:74:
                    ea:7a:22:c9:b1:ab:69:93:88:99:e3:17:b9:07:2c:
                    9a:bd:40:85:2f:1a:82:c3:b1:6b:2b:b3:52:de:c1:
                    9a:54:05:2d:c1:00:86:f2:cd:a6:2e:ea:0b:3b:35:
                    9c:d6:f3:58:04:d0:08:6b:1b:e4:33:0f:c5:b6:fa:
                    ea:c7:11:6d:ac:70:fd:de:f2:2c:69:0c:90:26:b0:
                    d3:e0:45:24:ed:59:a9:ac:85:c9:34:aa:3f:d9:1a:
                    b7:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F3:CF:42:73:09:9A:E7:71:03:D8:84:C3:E5:B2:88:D9:E3:53:21:8D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/bd2faaab-feb4-3aae-ab80-3bbafd15e1a5.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.82.134.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         78:b9:22:cd:b3:d5:5d:d3:aa:b5:81:77:c1:c6:43:c2:8a:a6:
         f6:09:75:1e:bb:36:60:12:ab:9c:63:c3:03:4a:8c:fa:1d:0d:
         c6:9d:b7:0a:f0:55:6a:4e:7d:1a:59:c1:bd:9f:2e:4b:f2:9c:
         65:6f:35:7e:af:21:9b:68:f2:d7:02:67:ab:ab:60:b3:a7:e3:
         52:34:40:e5:05:3b:80:66:5e:60:4e:44:b3:af:c0:a7:c0:d7:
         5b:04:86:7d:c6:23:a6:b9:37:db:4b:e0:8e:85:ed:09:72:22:
         84:5d:eb:e7:fa:95:4a:4f:46:18:f8:81:ff:e2:d2:84:67:ac:
         61:11:11:42:c5:92:a4:11:bc:a9:35:d8:c4:39:ab:cd:81:a8:
         47:16:83:4a:55:b5:f2:f9:57:95:7b:e5:fb:50:b9:ef:53:7a:
         46:ba:b0:e1:69:cd:c3:d2:bf:80:af:e1:75:57:c8:dc:be:e6:
         d7:91:ec:3d:ff:f9:71:e6:be:ff:72:85:71:10:eb:de:99:e8:
         a2:9f:18:63:10:d2:b9:29:b0:9f:63:9e:f4:e4:e3:ca:7b:25:
         b2:9a:e0:0e:be:ba:31:73:ff:03:39:69:aa:90:4a:a9:71:fc:
         b1:39:77:98:30:71:58:ab:65:1e:1e:de:79:a6:34:cc:0b:5c:
         f3:16:cd:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 9 17:42:18 2026 by rpki-client