Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/dbd2db5e-388b-3142-b130-09ed8be951f1.roa
File:                     dbd2db5e-388b-3142-b130-09ed8be951f1.roa (raw, json)
Hash identifier:          FN0CckIaKOGmZyvclNFRdhiRQ1oLq0+/ypWFvbfF1Qk=
Subject key identifier:   1E:2E:9B:9E:DA:25:F8:1C:76:61:1C:89:73:34:9F:AE:57:AD:21:6C
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584ED4325B592369CEEA88A4A500
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/dbd2db5e-388b-3142-b130-09ed8be951f1.roa
Signing time:             Fri 14 Aug 2026 01:00:13 +0000
ROA not before:           Fri 14 Aug 2026 01:00:13 +0000
ROA not after:            Thu 12 Nov 2026 02:00:13 +0000
asID:                     396582
IP address blocks:        192.82.133.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 21 Aug 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:d4:32:5b:59:23:69:ce:ea:88:a4:a5:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Aug 14 01:00:13 2026 GMT
            Not After : Nov 12 02:00:13 2026 GMT
        Subject: CN=28cb85a2-b07b-454f-abab-4c016662344f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:de:16:aa:97:a9:50:11:b8:aa:a2:b3:e4:fc:68:
                    e6:2d:05:11:32:ef:95:43:ec:98:bc:fc:4e:11:25:
                    97:a8:38:30:33:4e:ba:92:fd:84:7f:6f:05:9e:d4:
                    ec:c1:df:5b:97:84:06:8c:e4:5a:3b:ae:3b:8b:55:
                    64:ef:cf:db:3c:66:ae:ce:aa:97:1a:73:e5:1a:31:
                    37:a2:39:d1:d6:0f:4f:56:dc:35:4a:10:d1:1e:ab:
                    19:ca:be:f3:74:77:69:90:cd:7c:4f:78:37:9c:cf:
                    54:69:ca:04:8f:6a:31:40:07:89:e6:0b:e1:db:e4:
                    d7:4d:50:92:b9:5a:a9:d0:41:0a:48:77:e1:26:83:
                    18:27:0a:db:fe:9c:c1:90:15:48:b3:2f:00:74:17:
                    94:17:e7:43:4c:93:88:f0:de:8c:f2:e7:52:0e:32:
                    08:e3:72:5b:65:40:ce:14:2d:61:f7:9b:4a:1b:6c:
                    3f:0f:ac:23:cc:2d:86:b4:98:5c:af:1f:03:2e:11:
                    f4:ec:ef:31:22:07:8f:2a:dd:61:60:53:80:d7:45:
                    1f:bd:ce:13:08:be:43:79:40:aa:ab:76:4d:07:72:
                    11:39:d6:3a:a6:54:57:82:92:cb:c3:c8:fc:ba:5d:
                    d7:ea:f8:f6:52:15:a6:33:ef:90:c6:da:87:c8:26:
                    b6:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1E:2E:9B:9E:DA:25:F8:1C:76:61:1C:89:73:34:9F:AE:57:AD:21:6C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/dbd2db5e-388b-3142-b130-09ed8be951f1.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.82.133.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4f:b1:89:a8:c4:d3:0b:86:91:4f:0f:bf:a8:fb:74:c9:b8:bd:
         14:b3:3d:e0:2b:ed:f7:4e:5f:50:89:73:3e:e0:0c:ef:ce:4c:
         29:c6:94:db:52:72:5d:d0:f5:f4:be:a3:06:65:fc:27:87:da:
         76:a2:0a:f9:c1:63:dc:1c:aa:f7:02:8c:4d:76:7e:aa:bd:63:
         77:72:4e:d9:24:7c:73:ae:38:6a:96:2c:13:30:7a:28:3f:5a:
         af:64:e7:ca:90:d3:6b:84:d9:f4:6d:d2:c2:2c:3f:42:f1:42:
         a5:bf:a9:55:ab:88:c7:53:d9:e1:59:4d:f6:d7:79:ce:b3:25:
         ca:c1:e3:b9:c0:6b:12:41:69:1c:d9:be:d1:83:ca:90:14:ab:
         2a:d3:f8:a4:b7:b7:48:a9:51:cf:21:ec:4d:46:d3:c1:da:a0:
         9c:ef:53:e6:6c:e6:37:64:f4:90:69:6f:a6:3b:81:46:56:61:
         4c:48:ee:69:b8:ee:45:90:c2:d7:55:1f:d1:d7:c7:bc:dd:b2:
         c3:0c:82:cc:6d:f8:a5:dc:c5:93:50:1d:d1:07:1c:ec:62:f7:
         cb:35:78:c4:d0:2e:b1:47:79:00:0c:6d:6c:fc:16:6a:bd:dd:
         fa:96:26:b5:59:e8:ef:68:15:65:bc:ca:43:c3:2c:78:7a:46:
         11:26:a4:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 19 20:24:13 2026 by rpki-client