Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/3aae43f3-cc4c-3320-b4ff-f02926392b11.roa
File:                     3aae43f3-cc4c-3320-b4ff-f02926392b11.roa (raw, json)
Hash identifier:          mR2RXnRyKK9wC17zKonjGYxWPvZkmGHSi4v03kQR3u0=
Subject key identifier:   68:C1:6A:F4:82:4C:20:25:44:8E:8F:30:F3:96:DA:C4:74:8E:6A:12
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584F7782E2F7A957ED06E2E46B00
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/3aae43f3-cc4c-3320-b4ff-f02926392b11.roa
Signing time:             Sun 11 Oct 2026 13:00:12 +0000
ROA not before:           Sun 11 Oct 2026 13:00:12 +0000
ROA not after:            Sat 09 Jan 2027 14:00:12 +0000
asID:                     396604
IP address blocks:        192.82.133.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 14 Oct 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:77:82:e2:f7:a9:57:ed:06:e2:e4:6b:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Oct 11 13:00:12 2026 GMT
            Not After : Jan  9 14:00:12 2027 GMT
        Subject: CN=abc53e40-b764-4283-a8a8-bab92827c830
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:18:51:71:a1:03:60:ee:00:2a:f8:d2:63:bc:
                    a6:cf:1b:3d:56:0e:38:81:e3:cc:6a:70:e0:e5:9f:
                    1e:05:e9:a9:10:d5:f3:f8:66:2a:bb:fe:e8:3f:4c:
                    e8:d1:75:bc:5a:cd:88:28:1d:5a:be:0a:8d:ce:bd:
                    00:87:ee:8e:9c:14:d8:46:bb:34:d7:09:79:2b:56:
                    43:b4:28:db:50:00:a4:18:a1:59:0d:ba:69:ca:f0:
                    31:35:35:d9:00:a1:45:d4:02:1b:27:f7:8f:c5:96:
                    f9:06:f4:7b:cb:2c:05:ab:ab:d1:cf:95:a7:9b:f0:
                    88:cf:ac:2c:3e:69:0a:ac:be:ff:28:60:2a:3e:cd:
                    36:d0:f9:8a:1c:e1:b0:99:ac:c5:9a:e4:8b:37:97:
                    91:c4:3d:de:d3:61:8a:ba:50:95:fa:54:54:ab:73:
                    52:04:f9:6e:ab:04:db:0c:cd:9e:00:65:dd:2b:8c:
                    76:df:18:9b:d2:d4:42:68:ff:00:30:19:6a:49:aa:
                    44:ea:b1:a7:37:9c:c0:bb:c1:f5:14:1d:ce:c3:b5:
                    39:31:b6:ab:3d:80:47:4e:c6:73:73:17:52:2e:a4:
                    15:8d:94:f7:f3:a9:5e:06:93:27:03:ce:d1:ff:20:
                    b6:c2:1d:95:93:50:48:68:dc:1e:56:32:06:9e:9d:
                    20:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                68:C1:6A:F4:82:4C:20:25:44:8E:8F:30:F3:96:DA:C4:74:8E:6A:12
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/3aae43f3-cc4c-3320-b4ff-f02926392b11.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.82.133.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0e:e0:5e:0d:8f:f6:6b:92:6b:87:d1:78:ee:29:93:7e:a1:9f:
         c6:1f:5c:b6:06:a4:e9:fe:07:3d:41:6c:1d:45:1a:84:9f:ce:
         4e:cd:ca:07:8b:a8:c6:7a:8c:60:a9:c5:e9:31:47:4d:ad:2b:
         c0:c4:7b:71:6e:a1:87:2e:14:68:db:99:e8:6c:cd:f3:b7:a4:
         21:21:85:17:b6:44:bc:0e:2a:ad:c9:ac:50:39:78:6d:1a:85:
         9a:a1:b8:63:1c:c1:4e:99:f8:53:19:73:69:1a:e5:7f:ef:31:
         43:54:72:69:75:65:9e:64:68:22:ce:3f:c7:0f:bc:55:bc:3f:
         23:a0:db:f8:ca:f1:eb:d5:c6:de:9c:6b:8c:d5:92:b0:24:9f:
         89:b7:e1:c8:e6:be:7f:48:e3:63:d7:d1:88:d4:0b:b2:ab:24:
         85:43:97:3a:22:34:5c:31:48:6a:9e:74:ed:8e:1b:17:57:d6:
         d8:90:dc:fb:8c:86:3a:67:22:fe:e2:2d:2c:a3:7b:56:38:46:
         a4:e4:4a:03:ff:5b:da:18:c6:05:3d:1d:82:b9:5a:7e:9c:66:
         76:01:d4:35:42:73:a0:b1:f0:af:d9:5e:f0:86:30:3a:b9:f7:
         c0:73:35:aa:c2:81:0e:5f:8a:4d:99:10:16:d7:1d:b3:30:d5:
         8f:58:9d:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 11 22:36:22 2026 by rpki-client