Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/f6622da3-0844-3b4f-a412-a1c26857e5bb.roa
File:                     f6622da3-0844-3b4f-a412-a1c26857e5bb.roa (raw, json)
Hash identifier:          z7YDDNoG6OEAyoebRjAvTWJBy2by49o5lHkA008aXt4=
Subject key identifier:   BC:40:20:5B:B8:52:75:88:AD:DD:ED:7B:F7:45:1C:2C:8D:6E:15:00
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584D5243C4101F017B8D1853A940
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/f6622da3-0844-3b4f-a412-a1c26857e5bb.roa
Signing time:             Sat 28 Mar 2026 19:13:19 +0000
ROA not before:           Sat 28 Mar 2026 19:13:19 +0000
ROA not after:            Fri 26 Jun 2026 19:13:19 +0000
asID:                     396605
IP address blocks:        192.82.133.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 01 Apr 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:52:43:c4:10:1f:01:7b:8d:18:53:a9:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Mar 28 19:13:19 2026 GMT
            Not After : Jun 26 19:13:19 2026 GMT
        Subject: CN=cba17f28-530e-4de1-81e4-ec159e5b62a8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e2:25:2d:33:9c:38:b6:61:ff:f5:7e:b3:db:3b:
                    37:cf:da:85:4a:38:3f:9e:48:07:e0:3f:78:eb:df:
                    08:a0:44:1e:5b:9e:29:3b:b2:ab:27:cb:ff:7c:10:
                    86:16:1f:e1:3c:65:fa:f4:72:cc:ba:73:13:aa:d6:
                    fa:f9:4c:7c:80:bd:5b:de:d1:35:d6:68:05:e5:f4:
                    77:0e:80:94:43:ae:75:78:84:af:fe:c8:44:91:88:
                    21:b5:64:63:1a:f3:eb:59:0d:24:e2:92:f9:9a:61:
                    42:e7:ab:bb:8b:6c:f7:c7:17:f5:db:aa:3d:c7:8d:
                    6b:85:53:c7:53:df:fa:11:a9:86:47:27:00:5e:0f:
                    86:67:85:96:3b:b5:e8:30:5f:8a:41:ba:65:74:89:
                    4a:a6:69:31:ed:8b:8b:de:da:bc:4e:8f:5d:0a:81:
                    bd:bc:ab:bb:87:ec:3f:e0:cc:25:73:74:02:fa:95:
                    f8:05:40:65:77:55:b0:42:8e:1b:ab:8e:8e:29:1d:
                    2a:86:3b:43:cb:87:9f:81:67:9c:46:69:09:72:ce:
                    ca:c5:9e:ea:61:1b:f3:4b:22:16:ec:1c:a9:cf:0b:
                    01:13:36:9e:03:38:1b:aa:f6:79:78:ee:7a:93:c0:
                    f8:62:a1:5d:37:ea:d6:a5:4c:46:f5:68:be:88:2e:
                    64:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BC:40:20:5B:B8:52:75:88:AD:DD:ED:7B:F7:45:1C:2C:8D:6E:15:00
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/f6622da3-0844-3b4f-a412-a1c26857e5bb.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.82.133.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         10:d1:65:f1:b2:41:95:a0:1a:24:34:c2:64:a5:49:da:21:c6:
         05:f4:62:cd:e0:e5:e5:57:23:ad:a5:3b:89:0d:1b:06:76:81:
         86:55:1d:42:ae:f8:83:8a:27:ef:c7:7c:66:5c:f5:2d:6d:1a:
         98:c6:dd:a2:07:29:10:3b:ef:5b:0e:2d:a7:ee:93:ae:f9:b7:
         98:ff:e2:16:29:02:bf:f5:1a:b9:f8:bf:06:d8:46:40:85:84:
         2c:f5:9c:fd:7a:12:21:55:6f:a7:33:21:92:ea:8f:33:1e:a4:
         b0:bc:04:14:22:0d:a3:9f:4d:bc:41:32:09:ef:c8:40:78:c3:
         a5:33:35:e3:4d:c2:de:e9:53:f7:90:6d:29:7f:20:d6:f9:63:
         e0:06:3a:1c:fb:9b:40:0f:5c:90:82:b0:db:67:e6:32:cd:49:
         47:56:8c:aa:03:f3:a1:16:2f:da:71:16:af:35:99:84:da:cf:
         6a:02:da:cc:09:3e:af:7a:7f:d5:6a:3a:bb:22:10:29:03:97:
         f2:69:78:01:e0:3d:36:e3:de:c3:81:28:a0:77:54:05:f9:7f:
         b0:2a:0c:28:21:32:c1:40:9e:bf:f8:20:c4:1d:6d:5b:82:9a:
         96:f4:82:4a:c6:54:2e:ea:73:5a:02:d1:55:cd:73:eb:c7:b3:
         8c:02:4b:bd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 30 00:01:53 2026 by rpki-client