Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/8627cd74-ad2e-3e54-a0b1-7727f5da635d.roa
File:                     8627cd74-ad2e-3e54-a0b1-7727f5da635d.roa (raw, json)
Hash identifier:          sy7jvY18Ck2mi6WVPejQCdo47EF4Cqf+4OZM1H/WUlA=
Subject key identifier:   80:C4:52:69:DF:C9:1F:39:AE:8B:F1:27:5A:4C:90:00:67:DB:70:31
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584D83CB0022A48A7DA0CCD3E080
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/8627cd74-ad2e-3e54-a0b1-7727f5da635d.roa
Signing time:             Wed 15 Apr 2026 13:00:30 +0000
ROA not before:           Wed 15 Apr 2026 13:00:30 +0000
ROA not after:            Tue 14 Jul 2026 13:00:30 +0000
asID:                     397194
IP address blocks:        192.82.133.30/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 19 Apr 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:83:cb:00:22:a4:8a:7d:a0:cc:d3:e0:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Apr 15 13:00:30 2026 GMT
            Not After : Jul 14 13:00:30 2026 GMT
        Subject: CN=fe825da5-fc47-4e48-9486-67abd997194d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:92:79:14:a9:a0:08:29:f0:76:b5:e3:b0:78:58:
                    46:10:95:c2:70:f4:51:d6:1e:d0:98:fc:31:a0:55:
                    ae:9b:9d:b4:8c:cc:27:15:c3:a7:78:ea:04:61:34:
                    4a:46:e3:ce:e8:2d:11:ee:58:8d:ee:e2:b7:83:7f:
                    54:34:5e:92:eb:26:2f:f2:2b:ae:0c:b6:ac:9a:6b:
                    b3:cc:54:ae:f7:2c:0c:ab:12:b2:c4:e2:c6:21:01:
                    21:93:b2:c9:cc:db:4c:a6:27:47:d0:9e:a1:ac:92:
                    5c:0a:81:ca:5e:c9:41:b7:2a:6d:f0:06:fb:50:53:
                    ed:f3:cf:f7:69:fb:f7:f2:db:41:53:de:40:9a:39:
                    7c:d3:01:41:f1:69:ae:64:d8:c7:bb:16:e6:bc:c9:
                    73:ca:1e:ad:26:8e:bf:0f:f9:c8:3c:76:21:37:94:
                    f1:58:17:a1:27:9c:a4:cd:c0:f3:28:4b:2f:48:26:
                    bb:bb:e5:7d:78:37:af:4d:c9:db:cd:38:f6:9b:26:
                    d9:b1:1d:b9:d4:fc:f0:04:e2:bd:5e:16:1e:51:98:
                    de:90:4f:fa:cd:3d:f3:3b:47:3a:f2:4e:19:51:97:
                    df:d1:d7:95:c3:03:3d:17:95:aa:c8:41:7d:56:9f:
                    95:64:08:2f:44:38:79:81:68:be:b1:17:4a:3d:13:
                    92:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                80:C4:52:69:DF:C9:1F:39:AE:8B:F1:27:5A:4C:90:00:67:DB:70:31
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/8627cd74-ad2e-3e54-a0b1-7727f5da635d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.82.133.30/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         c0:05:28:ce:00:36:98:2c:1e:72:1d:39:c3:8f:84:13:84:33:
         10:e4:af:49:2d:15:6d:8e:c3:38:71:98:d5:b3:d7:48:56:92:
         a9:9f:70:1e:aa:98:94:b6:ee:4b:27:b8:29:24:a6:1f:2d:a7:
         aa:5b:98:02:6f:45:14:aa:9f:ae:7c:22:2d:85:53:c6:3b:c5:
         34:4d:9a:f6:d3:58:f4:e1:dd:a8:3a:f7:89:a2:c4:4c:18:16:
         ea:dd:7e:bb:49:50:4d:62:3d:3f:e0:84:47:7c:a4:34:cb:db:
         f7:71:75:2f:48:52:73:00:1a:fe:19:ad:23:da:51:af:1e:23:
         9d:6d:b1:52:77:08:6f:da:10:06:ff:e1:3f:91:d1:70:9b:c9:
         4f:e9:98:53:51:83:9f:bc:52:1b:9c:ca:82:a7:e4:b5:dd:f5:
         d3:97:d4:c5:65:ab:34:a2:a0:d5:42:86:a8:2d:65:81:bf:bb:
         c6:81:28:93:4a:6a:7d:d2:fb:80:18:81:1c:b5:51:f7:63:f8:
         e5:f2:88:a3:09:2a:f3:ed:86:3b:7f:4f:e3:a0:c0:f1:cc:fc:
         32:99:21:d6:01:61:4a:64:aa:fb:ee:89:f6:24:b0:3a:0d:ea:
         cb:95:0d:82:d6:c3:4b:4c:a8:c4:ba:47:11:9b:5b:da:cc:8d:
         d3:dc:3e:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 14:13:38 2026 by rpki-client