Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/1c6f839c-5120-3dd1-a7df-aac619cb605d.roa
File:                     1c6f839c-5120-3dd1-a7df-aac619cb605d.roa (raw, json)
Hash identifier:          XxJoS2+EVUBDAugjHowRZ4VylEjEcq+pSrpM+Bk9lQ0=
Subject key identifier:   A3:3D:DB:16:76:70:2F:D7:76:CA:63:14:87:32:A5:23:70:43:6E:DF
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584F71ED75C5F85C42D13B357120
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/1c6f839c-5120-3dd1-a7df-aac619cb605d.roa
Signing time:             Fri 09 Oct 2026 13:00:13 +0000
ROA not before:           Fri 09 Oct 2026 13:00:13 +0000
ROA not after:            Thu 07 Jan 2027 14:00:13 +0000
asID:                     396588
IP address blocks:        192.82.134.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 12 Oct 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:71:ed:75:c5:f8:5c:42:d1:3b:35:71:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Oct  9 13:00:13 2026 GMT
            Not After : Jan  7 14:00:13 2027 GMT
        Subject: CN=d55e743c-54d9-48e4-805e-9827db2111fc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:80:d1:17:57:ce:64:5f:ae:d6:78:63:fb:4c:94:
                    82:cc:f8:68:ca:2c:6a:57:c7:55:81:f2:d1:5f:dd:
                    38:78:81:f0:32:77:3f:18:2d:53:fb:cf:b0:52:50:
                    92:d0:01:e5:f6:84:fe:eb:1f:ed:6e:c0:6f:29:84:
                    e4:f3:31:da:46:65:4f:62:63:91:66:37:ff:26:8b:
                    30:38:45:0d:33:11:97:7b:82:d7:70:1a:c1:00:57:
                    04:ac:a3:ae:81:44:16:7d:7c:da:e5:9b:bd:49:df:
                    7e:2e:d6:48:9f:6e:a6:7b:0e:be:34:01:39:9c:7c:
                    bb:d9:83:6d:6c:e1:b9:2b:82:c0:36:d5:82:3a:91:
                    55:6e:32:c4:b0:13:79:62:6e:33:ce:c5:4e:9e:b3:
                    ef:37:d9:71:09:07:08:54:3d:d9:39:f2:16:e9:3f:
                    93:ea:92:93:2b:19:bb:15:e6:42:e4:d7:77:2c:84:
                    1d:4a:59:da:11:40:a8:be:4a:8b:f7:2a:79:22:61:
                    5b:25:85:61:94:f8:c7:66:e7:a2:6f:b3:78:9c:31:
                    d1:bf:2c:09:f7:23:73:9d:e8:97:15:4a:2e:8c:01:
                    ba:40:4d:2d:15:50:d2:4b:56:ad:27:bf:04:fe:00:
                    00:c4:6e:66:05:56:1f:39:8a:0c:93:98:f0:ac:4c:
                    12:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A3:3D:DB:16:76:70:2F:D7:76:CA:63:14:87:32:A5:23:70:43:6E:DF
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/1c6f839c-5120-3dd1-a7df-aac619cb605d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.82.134.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         9f:d5:a2:3b:2f:95:02:5c:b6:55:6e:58:95:1b:cc:65:dd:3f:
         e8:ae:48:a3:de:9b:71:b0:88:fd:d5:b2:d7:f5:b7:3d:b2:25:
         41:ad:ea:3b:13:48:24:74:b4:3b:2c:b5:8c:d6:d2:3a:c5:4c:
         df:77:91:42:c2:06:56:0b:8b:3b:ab:92:b5:fb:0d:af:6c:35:
         ec:95:73:93:87:3e:bc:65:c0:9c:3c:aa:67:54:49:31:8a:33:
         e8:9e:44:e1:1e:f6:e4:2d:a0:c4:9a:47:92:bc:78:4e:e4:26:
         90:48:d7:a2:39:b0:7e:9b:77:92:a5:93:cd:5d:e5:5f:83:02:
         bf:e7:dc:82:ea:6e:f8:28:9b:71:89:81:43:ed:36:cc:fa:df:
         a4:7b:71:fe:44:fe:f2:16:cd:d7:1b:48:26:03:0e:5b:13:0a:
         f8:6c:aa:c6:b6:b9:5e:7b:6c:92:26:ab:cd:b3:96:33:20:2f:
         7f:cc:a4:8a:de:dd:cd:b4:ee:7b:01:34:57:3b:62:a5:89:a6:
         ba:cc:3d:be:c3:21:10:98:d1:07:85:59:73:5d:49:26:54:fd:
         56:d8:20:9d:8d:18:ce:f2:fc:07:82:b2:38:12:52:20:c1:6b:
         9f:b3:ed:d0:a4:37:96:78:5b:3b:c2:49:44:2d:bd:a0:ad:00:
         dc:93:e0:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 9 21:05:45 2026 by rpki-client