Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/129bf59f-7a64-3953-9852-6ad54a695574.roa
File:                     129bf59f-7a64-3953-9852-6ad54a695574.roa (raw, json)
Hash identifier:          owihRsWqvwzDnl9in9QCV6OX3limgInQBIyqXrjDiHs=
Subject key identifier:   D8:CF:8B:EE:3D:7E:44:2E:32:5A:3C:E1:97:D4:51:8C:82:D4:02:94
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584EC63C6BF32647C9A825EEA380
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/129bf59f-7a64-3953-9852-6ad54a695574.roa
Signing time:             Sun 09 Aug 2026 01:00:12 +0000
ROA not before:           Sun 09 Aug 2026 01:00:12 +0000
ROA not after:            Sat 07 Nov 2026 02:00:12 +0000
asID:                     396605
IP address blocks:        192.33.14.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 21 Aug 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:c6:3c:6b:f3:26:47:c9:a8:25:ee:a3:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Aug  9 01:00:12 2026 GMT
            Not After : Nov  7 02:00:12 2026 GMT
        Subject: CN=5556913e-55ee-4cb5-bf16-07c412bc98af
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:02:b9:01:c1:3e:1a:ee:61:01:21:a3:dd:78:
                    73:0c:2f:71:85:8c:e4:cc:08:e7:6c:1b:f5:97:01:
                    02:db:18:39:42:0e:b7:af:2b:26:98:3f:fd:43:b4:
                    84:da:69:cc:79:1a:37:c4:f9:5a:18:a7:c0:76:4c:
                    41:90:f9:2e:91:35:f7:79:ec:d2:0e:b6:f8:71:98:
                    85:e7:e6:bf:95:e2:ce:ca:35:0a:b7:b1:1e:5a:dd:
                    d7:26:00:19:70:b4:be:cf:37:43:4f:d1:92:c0:13:
                    cd:00:80:0b:8a:c5:3c:ad:93:84:9f:1f:c0:0a:9b:
                    71:0a:d4:e5:38:3a:68:84:39:97:65:f1:4f:40:8a:
                    fb:04:74:53:ba:1c:04:e8:f9:a5:3e:be:da:cf:03:
                    54:72:e2:c2:eb:9d:d3:29:96:fe:ad:90:65:fc:0b:
                    40:f6:85:46:b5:2e:1d:fc:8c:2d:72:f7:62:a1:dc:
                    16:41:86:6e:e7:6d:a0:cb:14:83:54:ad:73:c9:1c:
                    49:fc:aa:1d:15:09:81:62:e7:45:c4:24:0e:01:1a:
                    93:f7:ca:cf:ae:10:fc:61:e0:ff:e7:65:09:cc:a2:
                    6f:38:95:0f:27:1c:97:9f:9f:b1:66:7c:fe:d6:87:
                    4d:68:83:ac:fb:ee:6d:6c:e0:78:73:12:eb:65:ee:
                    41:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D8:CF:8B:EE:3D:7E:44:2E:32:5A:3C:E1:97:D4:51:8C:82:D4:02:94
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/129bf59f-7a64-3953-9852-6ad54a695574.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.33.14.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         46:65:da:c4:49:91:13:f7:fe:0f:f7:9f:97:37:94:c5:2e:ee:
         73:b3:e5:8a:88:64:24:61:03:7f:b1:7d:1c:7e:bb:d5:1b:c2:
         5c:98:e1:3b:95:7b:9e:18:1f:f9:62:a9:3e:06:38:7d:f4:3a:
         7f:69:f2:1f:87:7b:c4:97:8a:d9:8e:28:30:e5:f4:a3:12:3b:
         72:48:3a:bc:ca:b1:b5:e4:3f:0b:cb:46:51:54:40:64:31:aa:
         69:9e:b2:38:4b:c1:ab:b1:a6:6f:5c:80:59:7b:3b:aa:f2:a9:
         2e:0c:c7:d1:ac:11:5a:50:c2:2d:dc:24:b5:82:80:89:40:86:
         9c:ed:da:1c:7a:f6:d1:35:00:8c:8a:5a:01:18:6b:e3:df:b2:
         57:d3:af:70:9c:c0:0b:bb:f9:43:b7:e3:a3:4c:9e:66:90:6a:
         b4:90:08:fa:b2:a9:e1:db:54:72:3d:ad:a4:c4:40:98:88:1c:
         89:aa:29:ba:eb:ab:c6:56:b3:a2:b8:26:4a:f3:9c:1e:2c:31:
         f7:c6:62:74:26:89:82:fe:2f:fc:78:b1:3b:3f:a9:f8:e0:9f:
         05:82:6a:e6:7f:aa:5f:7a:09:fb:46:59:ea:98:7d:86:65:27:
         42:19:e5:ea:5b:7a:2b:da:e1:e2:63:6d:34:b7:88:e2:e0:9b:
         ac:8a:26:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 19 17:08:30 2026 by rpki-client