Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/f4fd8b5f-602c-35a4-9610-ba3df5b80072.roa
File:                     f4fd8b5f-602c-35a4-9610-ba3df5b80072.roa (raw, json)
Hash identifier:          DSyg7WgiTKq2kRrT0wB8I5t5aTQ96yRsGdBWezASzts=
Subject key identifier:   6E:8D:A3:C1:E2:90:63:7F:F9:78:D4:4C:77:14:E5:EC:86:D6:87:BF
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584ED4325C58FE91693546090FC0
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/f4fd8b5f-602c-35a4-9610-ba3df5b80072.roa
Signing time:             Fri 14 Aug 2026 01:00:13 +0000
ROA not before:           Fri 14 Aug 2026 01:00:13 +0000
ROA not after:            Thu 12 Nov 2026 02:00:13 +0000
asID:                     40647
IP address blocks:        192.82.133.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 21 Aug 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:d4:32:5c:58:fe:91:69:35:46:09:0f:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Aug 14 01:00:13 2026 GMT
            Not After : Nov 12 02:00:13 2026 GMT
        Subject: CN=fa96942a-7bcf-4bae-991f-289c7cf2860e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:e0:06:14:e1:08:24:79:f4:c6:b6:bf:c4:72:
                    66:18:9c:29:c3:b7:58:f1:5a:27:c6:54:27:f2:a6:
                    f5:a0:b9:88:31:cb:5f:0e:55:22:4e:00:77:23:05:
                    4b:1c:8f:0d:68:c7:3d:32:a5:c0:04:0a:9d:19:68:
                    92:2b:76:bf:1e:e5:01:d8:3c:e1:d5:aa:0f:fd:c4:
                    ab:75:26:e6:7a:e8:65:bc:53:ba:06:c9:12:60:3f:
                    ff:ae:d3:61:05:1d:cf:44:a5:84:e7:41:c8:2b:b3:
                    d0:c2:80:33:ad:9d:3a:da:cd:94:76:97:78:c6:04:
                    7f:23:1e:78:14:04:03:3f:ae:b9:ca:0b:8c:61:31:
                    69:03:2e:f0:0d:ac:18:81:ae:f4:35:bb:ae:16:46:
                    a6:66:14:52:69:19:ac:45:65:51:46:8f:2c:3a:f7:
                    d4:8d:b3:7a:59:fe:87:34:57:d9:81:20:bd:82:bd:
                    16:97:4e:42:ac:b5:f5:4b:09:d9:e0:a8:1e:8a:8f:
                    8a:eb:bc:84:b2:4e:78:bb:2e:39:64:32:4c:98:c9:
                    7f:3f:dd:31:52:14:d8:ae:fb:64:01:a9:ee:72:18:
                    62:8e:07:56:52:20:b9:8e:04:8a:d3:b9:6c:5e:3f:
                    ff:d0:f4:3f:bd:31:1e:6d:fc:a4:3d:d6:d9:1e:2b:
                    1f:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6E:8D:A3:C1:E2:90:63:7F:F9:78:D4:4C:77:14:E5:EC:86:D6:87:BF
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/f4fd8b5f-602c-35a4-9610-ba3df5b80072.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.82.133.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         24:21:08:9a:3c:7f:b2:ba:71:16:bc:97:1a:cf:55:2f:9d:80:
         40:0a:bc:e0:b8:76:b2:d9:fe:35:94:80:b2:f0:bc:9b:ca:d7:
         4c:64:64:93:35:ab:4b:27:15:06:f9:a3:42:e3:29:fe:5f:bb:
         3c:93:34:29:a3:5a:9d:8e:1c:96:06:91:06:c2:6a:f4:bb:72:
         63:e7:bf:0d:30:1a:b1:3d:8c:95:2c:6c:6f:78:c4:03:df:33:
         87:fb:a7:8b:74:b5:75:ca:07:7f:9a:dc:ea:69:49:81:85:0b:
         4f:d8:ee:bb:4a:8a:4b:3a:04:ad:08:c1:27:c0:f8:90:6c:95:
         49:ab:8e:3c:86:33:d5:d0:bc:85:ee:fe:6f:c9:ea:cf:3c:8c:
         2e:f5:98:9c:21:f3:5e:b2:84:5e:e1:9d:25:92:ac:e0:4c:63:
         5e:f7:d1:d1:67:bd:3e:6d:4a:ad:1a:64:c4:9a:5f:98:09:6c:
         1a:7b:78:dd:3e:ad:d3:fc:04:10:77:94:b0:be:01:23:39:d2:
         b5:b6:33:9b:6b:40:01:ba:eb:03:80:3c:46:c1:88:93:a5:88:
         ab:b5:e8:50:4f:cc:ae:28:b5:08:4b:86:1f:11:a2:fe:6f:12:
         69:5b:6c:00:ae:a5:8f:be:b7:c4:f0:66:c2:a8:59:cc:6c:97:
         75:36:39:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 19 20:23:48 2026 by rpki-client