Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/fb7536e8-8426-311a-a2c8-94d2bfee2364.roa
File:                     fb7536e8-8426-311a-a2c8-94d2bfee2364.roa (raw, json)
Hash identifier:          E9y7AAmwZXb/XA/F9RCPdSGW+7bqCJlThRzbF+OUsaU=
Subject key identifier:   B1:69:6C:0D:60:3D:E1:DB:77:B9:3A:F4:EA:08:FF:E9:08:A3:CB:78
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584D5243C31BA346A0F75CD31400
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/fb7536e8-8426-311a-a2c8-94d2bfee2364.roa
Signing time:             Sat 28 Mar 2026 19:13:19 +0000
ROA not before:           Sat 28 Mar 2026 19:13:19 +0000
ROA not after:            Fri 26 Jun 2026 19:13:19 +0000
asID:                     396827
IP address blocks:        192.82.133.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 01 Apr 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:52:43:c3:1b:a3:46:a0:f7:5c:d3:14:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Mar 28 19:13:19 2026 GMT
            Not After : Jun 26 19:13:19 2026 GMT
        Subject: CN=b0b4a10d-ba21-4a83-afd7-8a2d735ed789
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:81:46:ad:3d:49:77:e1:eb:68:ac:6c:de:08:a8:
                    7d:b7:21:6d:68:6a:df:ff:66:9c:79:a6:a0:1f:58:
                    30:7d:c5:e5:1f:b5:1c:33:da:89:87:d6:28:9a:1d:
                    6f:86:15:ad:79:b3:25:05:70:41:e2:a6:a1:2d:83:
                    3a:60:86:41:76:cf:ae:92:70:d5:81:7e:d2:82:71:
                    81:65:b7:29:b6:01:6e:5f:e3:49:96:5a:fd:b4:1f:
                    b3:f7:20:bf:0a:6e:66:2a:fd:d9:19:aa:bb:53:c9:
                    39:3d:20:45:02:21:fc:d9:00:ed:b3:01:40:c6:f8:
                    c1:de:65:92:63:c3:4a:30:6b:b6:6c:01:5d:a2:bc:
                    0d:d2:c2:17:5f:4d:0f:d8:90:7c:45:99:2b:8d:f6:
                    5d:ef:fa:99:36:0f:91:77:66:9f:4c:d4:b5:dc:f7:
                    e8:65:57:10:92:96:d9:a0:a5:38:3a:38:40:0b:29:
                    dd:a8:23:84:41:d6:35:f0:3d:5b:9c:7e:44:0b:9f:
                    a6:31:27:ae:d0:fe:1b:24:d9:51:bd:0b:29:ba:61:
                    23:4a:6c:3b:09:71:47:dc:ca:ab:43:45:f7:64:b3:
                    6b:98:5c:93:e4:75:07:ec:b2:af:fb:74:72:37:8c:
                    e7:cc:01:d2:30:a7:ca:66:57:fe:44:50:eb:5d:30:
                    d5:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B1:69:6C:0D:60:3D:E1:DB:77:B9:3A:F4:EA:08:FF:E9:08:A3:CB:78
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/fb7536e8-8426-311a-a2c8-94d2bfee2364.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.82.133.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         9e:f7:5b:03:6a:9a:72:f8:8b:37:ba:43:8a:19:97:a6:ba:8b:
         9f:6d:6c:92:7a:af:fa:0a:30:fa:fa:c7:5b:c5:15:94:d5:4a:
         90:43:dc:44:f6:26:be:13:76:23:76:68:f2:6c:6d:20:38:89:
         07:1d:a5:45:91:a3:84:38:77:12:c7:fe:33:4a:2b:ae:09:ad:
         00:1f:f0:b0:5a:07:dd:b5:e8:86:15:bb:55:dd:b9:65:40:80:
         44:e2:3b:62:90:15:e9:a7:b6:03:88:f7:66:7b:6b:90:89:29:
         f0:9e:a9:1e:51:17:44:98:90:9e:34:13:81:3c:61:f1:87:55:
         d5:da:cc:a6:bb:25:e8:e5:80:42:19:21:a3:28:90:49:e7:4e:
         a5:d7:e4:4e:46:8d:e6:5d:13:3f:2f:04:e1:6b:8d:44:0f:f7:
         5c:e6:2c:13:21:0b:a6:36:f2:78:ec:85:8a:8b:e9:f7:56:b3:
         e9:ca:ea:22:36:7f:0a:21:2c:e1:49:01:ba:d9:96:fb:95:e3:
         fb:40:ed:5f:db:d5:8a:58:d4:22:20:4a:a7:16:35:a8:91:df:
         9e:ba:b0:ed:08:a1:76:8d:17:04:0d:a2:d2:c5:d9:d9:aa:78:
         72:18:5e:bb:56:bf:23:70:ae:67:d7:0e:b7:be:b7:9a:f8:c6:
         b5:01:95:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 22:38:11 2026 by rpki-client