Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/021832ec-1727-30da-b12d-4a07ddb37d22.roa
File:                     021832ec-1727-30da-b12d-4a07ddb37d22.roa (raw, json)
Hash identifier:          TSQpscl1YX3V60n1UiIqDTInLXQnFmBWRziVeLg+Wx4=
Subject key identifier:   1C:B5:F2:CD:82:80:53:85:2F:C4:B8:C3:CA:04:03:0D:C6:AC:B2:FC
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584EC63C6421BBD6571A46BF0400
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/021832ec-1727-30da-b12d-4a07ddb37d22.roa
Signing time:             Sun 09 Aug 2026 01:00:12 +0000
ROA not before:           Sun 09 Aug 2026 01:00:12 +0000
ROA not after:            Sat 07 Nov 2026 02:00:12 +0000
asID:                     396688
IP address blocks:        192.33.14.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 21 Aug 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:c6:3c:64:21:bb:d6:57:1a:46:bf:04:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Aug  9 01:00:12 2026 GMT
            Not After : Nov  7 02:00:12 2026 GMT
        Subject: CN=68fdf359-ad02-42b2-89cf-06d805d4153f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:4f:68:05:f0:74:59:00:ad:87:88:51:9c:d6:
                    73:75:42:51:8e:f2:53:cf:98:5f:77:06:0f:4f:a7:
                    a5:55:b0:45:1e:a0:3e:4a:30:b0:9d:87:5b:e6:fa:
                    53:48:e7:e7:7a:23:d4:e1:c8:63:3a:ce:ab:42:2f:
                    7c:70:d0:33:36:78:8c:0d:2e:9d:69:9b:ae:0a:ea:
                    17:76:ad:1f:f2:cc:ac:f0:97:3c:23:78:ad:cf:20:
                    62:8c:4b:72:c0:5f:d2:c0:c0:44:9a:94:c6:1c:54:
                    fa:5a:3b:98:f3:d5:8b:8f:55:1f:4e:ea:72:3d:54:
                    a5:3c:81:1c:dc:4f:b7:87:aa:20:c3:a0:10:8b:b0:
                    30:ea:6d:f8:12:e9:d2:c7:04:62:32:17:1a:0d:e5:
                    17:06:c7:58:67:db:e4:aa:24:b8:48:2f:56:d4:c4:
                    60:98:51:62:84:a5:bd:12:d9:cd:55:9e:1e:bf:8e:
                    b4:46:f9:77:9a:03:fe:c0:23:a6:6b:51:86:97:fe:
                    3a:61:ae:62:fc:0d:3f:4a:b1:0d:34:60:58:f9:01:
                    97:53:33:e8:96:0d:3f:cb:84:54:09:2f:d0:9a:64:
                    15:bd:70:51:ce:06:56:ee:74:0d:d7:ed:30:7f:45:
                    46:a7:64:0f:35:e8:1a:76:54:10:96:cd:79:5d:b3:
                    96:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1C:B5:F2:CD:82:80:53:85:2F:C4:B8:C3:CA:04:03:0D:C6:AC:B2:FC
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/021832ec-1727-30da-b12d-4a07ddb37d22.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.33.14.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3b:4e:cd:a9:52:ce:b3:b0:ae:06:61:98:e0:a3:5f:ce:fa:e5:
         9b:7d:75:aa:c6:04:e8:f5:9c:4e:42:b3:6a:32:58:1d:64:63:
         1f:f1:4b:8d:e4:fa:15:ea:a6:6f:13:91:b8:19:39:a1:df:2c:
         49:48:d7:2c:d1:bc:28:83:6b:80:e0:10:0a:99:d7:16:ed:4b:
         6b:3e:f9:46:b1:40:dd:82:84:2b:c8:17:99:90:03:e3:e2:93:
         70:23:2d:ee:d3:8d:39:31:89:38:63:22:d9:52:f0:26:55:21:
         f4:e2:db:04:50:96:dc:84:fd:1d:40:bf:19:d3:71:c7:89:9f:
         65:c2:2d:96:f2:dd:5b:d9:9c:aa:64:15:97:a6:44:86:6d:52:
         32:a6:47:a5:45:bd:1d:13:2c:c9:d1:65:05:d2:4a:0c:60:d6:
         13:43:7e:36:8f:d4:58:ac:0d:e5:c3:f5:99:c5:22:8b:eb:93:
         49:42:79:0e:ad:a7:35:61:1b:ec:8a:2e:81:7a:a6:18:34:89:
         52:35:56:90:15:91:27:80:86:9f:47:ce:8f:99:e4:79:cd:b8:
         5e:3c:d9:71:06:84:36:36:91:b9:90:9b:5e:c0:66:c1:9c:90:
         d2:e4:7a:bb:59:79:1e:bf:02:ea:9c:8d:13:10:58:5f:f9:d1:
         55:25:c8:af
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE7GPGQhu9ZXGka/BAAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz
NmMyMB4XDTI2MDgwOTAxMDAxMloXDTI2MTEwNzAyMDAxMlowLzEtMCsGA1UEAxMk
NjhmZGYzNTktYWQwMi00MmIyLTg5Y2YtMDZkODA1ZDQxNTNmMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqU9oBfB0WQCth4hRnNZzdUJRjvJTz5hfdwYP
T6elVbBFHqA+SjCwnYdb5vpTSOfneiPU4chjOs6rQi98cNAzNniMDS6daZuuCuoX
dq0f8sys8Jc8I3itzyBijEtywF/SwMBEmpTGHFT6WjuY89WLj1UfTupyPVSlPIEc
3E+3h6ogw6AQi7Aw6m34EunSxwRiMhcaDeUXBsdYZ9vkqiS4SC9W1MRgmFFihKW9
EtnNVZ4ev460Rvl3mgP+wCOma1GGl/46Ya5i/A0/SrENNGBY+QGXUzPolg0/y4RU
CS/QmmQVvXBRzgZW7nQN1+0wf0VGp2QPNegadlQQls15XbOWyQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFBy18s2CgFOFL8S4w8oEAw3GrLL8MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4
ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvMDIxODMyZWMtMTcyNy0z
MGRhLWIxMmQtNGEwN2RkYjM3ZDIyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4
YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj
MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz
ZGNiYzM2YzIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwCEOMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBADtOzalSzrOwrgZhmOCjX8765Zt9darGBOj1nE5Cs2oyWB1kYx/xS43k
+hXqpm8TkbgZOaHfLElI1yzRvCiDa4DgEAqZ1xbtS2s++UaxQN2ChCvIF5mQA+Pi
k3AjLe7TjTkxiThjItlS8CZVIfTi2wRQltyE/R1AvxnTcceJn2XCLZby3VvZnKpk
FZemRIZtUjKmR6VFvR0TLMnRZQXSSgxg1hNDfjaP1FisDeXD9ZnFIovrk0lCeQ6t
pzVhG+yKLoF6phg0iVI1VpAVkSeAhp9Hzo+Z5HnNuF482XEGhDY2kbmQm17AZsGc
kNLkertZeR6/AuqcjRMQWF/50VUlyK8=
-----END CERTIFICATE-----
Generated at Wed Aug 19 17:07:07 2026 by rpki-client