Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/414792d2-b1c1-36ba-810c-f20112337471.roa
File:                     414792d2-b1c1-36ba-810c-f20112337471.roa (raw, json)
Hash identifier:          MHCcUTyFDpu+NIS8ZaVl1Hx+J/OuQ0za1Vx+VsSu89o=
Subject key identifier:   87:B8:36:51:68:96:2A:E0:9B:F2:7C:05:3A:5F:5A:A7:23:05:AE:29
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584F71ED7ED1DF036B0528681780
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/414792d2-b1c1-36ba-810c-f20112337471.roa
Signing time:             Fri 09 Oct 2026 13:00:13 +0000
ROA not before:           Fri 09 Oct 2026 13:00:13 +0000
ROA not after:            Thu 07 Jan 2027 14:00:13 +0000
asID:                     396585
IP address blocks:        192.82.134.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 16 Oct 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:71:ed:7e:d1:df:03:6b:05:28:68:17:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Oct  9 13:00:13 2026 GMT
            Not After : Jan  7 14:00:13 2027 GMT
        Subject: CN=5f616479-7baf-4cef-8ab3-59a77a4a9b5c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:3a:36:da:69:f0:3d:36:86:4e:91:39:a5:95:
                    1a:92:ed:61:ca:af:22:c3:3d:19:3b:25:55:df:10:
                    31:3c:b1:e7:c0:8d:fd:1d:37:f1:94:7e:d1:33:7c:
                    b1:94:1f:c0:1f:63:49:8a:4f:fb:20:f9:98:35:48:
                    60:20:7c:f8:5d:a6:df:27:1e:a4:28:9e:c6:39:eb:
                    3f:da:c1:5e:dc:de:bd:10:0c:f3:b6:7c:b9:fc:ec:
                    67:5b:fd:86:ff:1c:fe:2f:29:5f:c1:15:77:dd:76:
                    db:07:0c:2a:77:43:75:e7:5a:4e:e8:b9:e2:61:ab:
                    82:bd:aa:25:e5:e0:f3:7b:2e:78:c4:46:3c:56:13:
                    fc:06:0a:49:34:d3:b4:bf:3f:c1:6f:26:8a:e8:14:
                    ca:b1:59:94:eb:95:53:46:fa:91:e4:a2:51:31:2e:
                    5d:1b:e5:6b:9c:9e:e3:08:4b:97:ed:23:cd:ff:45:
                    a3:c7:d0:11:b0:26:26:4b:03:8a:5e:fe:88:f8:62:
                    29:74:96:bf:88:2e:e2:07:2e:b9:11:96:12:13:45:
                    b3:67:eb:e0:26:15:d4:38:08:4d:74:85:49:bc:be:
                    3b:4f:b5:f2:7a:19:67:c5:93:0a:00:4e:d6:75:63:
                    c6:3d:47:6a:35:be:d2:22:c6:bc:1d:1d:a1:98:78:
                    d1:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                87:B8:36:51:68:96:2A:E0:9B:F2:7C:05:3A:5F:5A:A7:23:05:AE:29
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/414792d2-b1c1-36ba-810c-f20112337471.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.82.134.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a0:75:f9:33:20:cd:53:57:e8:4a:6b:b6:de:83:a9:4d:81:fd:
         57:dc:9f:f7:d5:69:80:8e:22:42:7b:23:19:75:fe:5b:8f:a9:
         39:62:ee:59:74:ec:80:a3:d5:46:52:2e:b7:20:f5:91:d5:99:
         aa:93:09:c9:fd:0c:dd:ce:33:31:f6:3d:3d:9b:63:12:34:50:
         18:4a:76:aa:52:d1:50:ba:22:8b:26:99:f9:44:df:41:43:30:
         ba:96:a0:be:9d:21:b5:0a:5c:be:81:b4:da:d3:8a:9f:d1:ac:
         55:7b:ef:b8:de:a3:11:75:a1:a8:9d:ae:f7:dc:61:93:09:1c:
         ac:3f:20:88:dc:fb:a4:e0:f5:69:7e:0d:67:35:41:ad:7b:43:
         7e:ca:71:05:88:ba:e0:78:5a:aa:31:28:fe:7d:74:9d:fe:50:
         c4:d0:da:3e:fe:27:e9:29:fe:d3:b8:05:4c:98:30:47:48:8a:
         5f:f5:82:6c:1f:ea:b7:99:63:6b:33:74:af:98:7e:18:fa:d3:
         91:13:22:6d:c6:70:ae:df:f4:9b:2f:b5:54:5a:32:0e:78:89:
         28:6c:85:51:d7:c2:d3:b5:48:82:6f:f4:50:44:28:27:c0:fe:
         7d:1d:76:22:e7:78:81:78:3a:59:5d:2b:56:cf:f0:ff:aa:34:
         88:ec:19:b6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 14 20:08:54 2026 by rpki-client