Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/cd268255-0575-3e0f-ac6f-2b4c553a9dfb.roa
File:                     cd268255-0575-3e0f-ac6f-2b4c553a9dfb.roa (raw, json)
Hash identifier:          NDlpX14HAZcyXj0wC/vDr5Odmwjkf2TbKemOtoDD0Eo=
Subject key identifier:   A5:4D:2D:08:EC:88:D5:DE:C1:DF:8F:87:FC:E0:35:5D:27:FE:24:C8
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584ED00208E5D2742B4EB66B2000
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/cd268255-0575-3e0f-ac6f-2b4c553a9dfb.roa
Signing time:             Wed 12 Aug 2026 13:00:12 +0000
ROA not before:           Wed 12 Aug 2026 13:00:12 +0000
ROA not after:            Tue 10 Nov 2026 14:00:12 +0000
asID:                     397212
IP address blocks:        192.82.134.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 21 Aug 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:d0:02:08:e5:d2:74:2b:4e:b6:6b:20:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Aug 12 13:00:12 2026 GMT
            Not After : Nov 10 14:00:12 2026 GMT
        Subject: CN=97d1aafb-bd5d-489c-9957-07e0f3866b88
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:3f:a2:23:09:6a:e3:73:20:b1:1e:28:05:fc:
                    6f:2f:d9:d8:86:34:72:37:b1:2f:ee:98:c2:e5:23:
                    fb:65:fc:bd:3f:07:6e:d8:a3:73:c2:9b:c6:aa:8b:
                    ae:c0:89:c5:8b:c7:5d:11:70:c3:bc:07:2b:a6:91:
                    58:22:df:67:e9:c3:76:1e:42:ea:ed:75:3a:f0:9b:
                    69:65:e2:4c:31:2e:bf:c5:28:e0:31:d1:ec:92:16:
                    d7:07:71:6b:a6:ca:11:84:0f:aa:67:3c:da:d4:fd:
                    d4:06:b9:a1:0e:5a:cd:b1:7d:7d:71:a8:d4:0b:1f:
                    d0:c2:23:96:07:78:60:a6:cb:3d:73:02:35:60:4b:
                    db:7d:57:ca:68:4c:1c:0b:1e:47:88:fa:53:a8:73:
                    3c:5e:98:2e:73:47:c1:14:7d:d4:7e:8e:33:c1:68:
                    09:24:e0:9d:b2:11:41:c3:63:c0:3e:c0:fd:ec:57:
                    6f:c1:ac:ae:46:37:3e:07:a6:02:e8:3e:ae:6f:73:
                    3a:3e:70:22:ab:37:23:cb:c7:12:93:7a:ed:f5:d8:
                    4a:b3:bc:a0:5b:dc:74:2c:49:6c:f9:34:47:53:a9:
                    ec:1c:cf:85:56:44:8d:4f:29:18:2a:e0:12:fd:da:
                    99:74:e8:d5:64:ee:f2:40:44:e4:db:ea:1b:e5:ba:
                    81:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A5:4D:2D:08:EC:88:D5:DE:C1:DF:8F:87:FC:E0:35:5D:27:FE:24:C8
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/cd268255-0575-3e0f-ac6f-2b4c553a9dfb.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.82.134.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         24:ae:2a:01:00:b6:13:35:93:a7:67:17:58:9d:3d:e5:c5:9b:
         36:4f:b5:bb:6b:f5:69:99:de:0c:49:0b:47:68:7f:1c:ee:2d:
         3f:07:15:13:84:56:8a:ab:ec:d6:c5:10:57:3d:9d:1b:4f:94:
         d4:04:89:27:b3:0c:aa:8d:eb:ec:de:32:2c:95:79:65:23:7d:
         95:aa:40:05:f4:d5:d1:f4:05:4a:8a:84:3a:de:fb:b2:16:18:
         4a:dc:32:7c:0d:43:85:88:e6:f8:88:02:7c:5c:a5:11:a6:86:
         f3:24:53:ff:6e:cb:12:95:06:01:d3:68:da:1e:b1:68:7f:08:
         60:36:d4:5f:3f:fa:5f:c0:e8:91:ee:5b:ee:53:d8:bf:93:e7:
         d2:cb:67:05:59:0f:f9:98:bb:87:ef:b4:59:49:88:be:82:bb:
         85:0f:c4:8c:21:50:56:01:b5:59:c4:fa:65:13:d8:63:ce:a9:
         28:54:5f:1c:77:71:d8:1a:23:8f:9e:71:71:d9:52:78:ca:a9:
         a4:65:db:0d:c0:c3:3b:f4:f2:51:76:cc:2a:ea:dc:c1:bf:d3:
         8f:94:f9:55:71:21:01:30:2b:8b:9b:d6:ec:cc:45:e6:79:4b:
         97:c1:c5:aa:dd:e2:8f:d4:7a:e7:e0:05:a9:30:f1:b1:15:21:
         a9:6f:c8:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 19 18:44:38 2026 by rpki-client