Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/d8f11c42-4ba9-3c66-8aec-7cfef974ab47.roa
File:                     d8f11c42-4ba9-3c66-8aec-7cfef974ab47.roa (raw, json)
Hash identifier:          sc52y5G9molaUDFiN4XzoRLYQZAWJ4FDUuKnnnRRkiY=
Subject key identifier:   34:BA:57:50:12:4C:7F:FD:CF:A6:31:B7:FD:EA:16:39:CF:BD:B8:AD
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584E2D9F0A04FC780F53A8BC3400
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/d8f11c42-4ba9-3c66-8aec-7cfef974ab47.roa
Signing time:             Mon 15 Jun 2026 09:00:12 +0000
ROA not before:           Mon 15 Jun 2026 09:00:12 +0000
ROA not after:            Sun 13 Sep 2026 09:00:12 +0000
asID:                     36629
IP address blocks:        192.82.134.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 30 Jun 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:2d:9f:0a:04:fc:78:0f:53:a8:bc:34:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Jun 15 09:00:12 2026 GMT
            Not After : Sep 13 09:00:12 2026 GMT
        Subject: CN=b4e1d75c-9621-4986-a745-54163ded4721
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:c6:d7:a6:65:a6:27:b1:4b:92:2a:57:69:7b:
                    25:8f:2f:b8:91:87:b2:a7:72:f1:bb:85:3b:a8:2e:
                    ba:83:c5:72:4e:3c:20:7a:9b:3f:e1:2f:5e:b3:17:
                    1a:df:22:78:5b:0a:15:91:c7:45:48:d1:f3:23:42:
                    14:0c:ca:7f:bc:aa:7f:f3:44:f3:1d:42:41:e6:3e:
                    e5:50:a5:2c:ee:6e:57:42:ad:f6:e4:db:28:2c:17:
                    cf:bb:52:0b:31:1f:5f:dc:da:97:ab:88:e4:f1:60:
                    1b:17:d6:c9:e3:7e:49:60:9b:1c:ba:da:41:1a:8f:
                    25:34:07:06:94:a7:18:55:9f:1c:88:84:7d:07:96:
                    e0:23:2e:8d:e3:0b:ff:0f:e3:76:89:e6:e9:7e:e8:
                    f8:0d:ca:d4:32:9f:af:4f:b1:70:09:a7:10:49:fe:
                    00:fd:38:a2:71:94:99:37:0a:a2:3a:4e:67:d9:e9:
                    91:56:1a:41:1e:7e:59:e3:48:f4:5b:1b:76:cb:ff:
                    0c:bf:25:06:7a:19:ff:d0:98:29:a9:71:a2:21:73:
                    c2:b1:ec:98:6e:f0:ae:c8:c4:00:cd:0c:f8:07:d9:
                    c7:3e:d1:60:b4:5d:c7:e6:33:eb:45:0a:f4:ae:05:
                    ad:e0:48:83:e1:43:e6:51:0c:62:36:dd:49:f8:ec:
                    4b:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                34:BA:57:50:12:4C:7F:FD:CF:A6:31:B7:FD:EA:16:39:CF:BD:B8:AD
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/d8f11c42-4ba9-3c66-8aec-7cfef974ab47.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.82.134.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         ae:24:3f:99:62:9a:6c:e6:91:93:c6:e0:9e:55:3b:31:85:e1:
         7f:f4:bf:57:31:55:9e:18:8b:51:91:07:68:7b:54:c8:77:d4:
         a1:23:e7:73:01:8a:bf:f7:99:ff:98:5a:92:8a:70:d8:49:df:
         87:55:83:d6:3e:f9:3f:ac:f3:ab:81:fe:b9:ca:e4:05:d5:6e:
         af:19:c7:c9:02:75:01:94:13:93:56:c6:b6:c2:d8:de:6c:07:
         06:31:19:a2:a0:78:59:c7:53:e3:de:91:5b:e1:a6:d7:ab:43:
         18:c0:e8:dd:f3:50:14:44:cf:34:f4:55:e3:18:b2:4b:41:dc:
         3f:be:a1:9b:f4:45:27:f7:eb:5c:f6:2a:da:85:46:90:b6:59:
         b6:7b:e1:43:78:ca:ae:a1:1c:97:79:4c:74:b9:9d:16:44:c7:
         ad:52:ee:05:9c:d3:9e:d2:dc:4c:a4:93:81:93:79:2a:40:d7:
         00:97:58:67:4a:f5:7a:bc:a4:a4:28:83:d8:d0:75:80:00:52:
         e3:11:3b:83:0d:e8:6c:41:9f:2f:5b:ed:a7:91:31:de:ff:ac:
         e5:6a:c5:fd:a7:b4:25:1c:df:b7:eb:8d:4f:31:09:fd:98:d4:
         4d:2e:f7:eb:27:cd:14:2f:1e:ce:6a:84:c8:45:01:ef:f5:fc:
         18:c3:17:47
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 28 20:38:07 2026 by rpki-client