Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/1e242d71-a572-3d9c-b9e4-f12a120e4927.roa
File:                     1e242d71-a572-3d9c-b9e4-f12a120e4927.roa (raw, json)
Hash identifier:          WHjNoVWRQRttXaSpWBXbGQn+d2AWQpzs8jv+iq0eRKA=
Subject key identifier:   DB:48:24:4D:15:1B:A8:75:6F:E6:D4:C0:B6:68:05:A8:FC:07:19:5A
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584EC63C633FA6B57E670E9AC240
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/1e242d71-a572-3d9c-b9e4-f12a120e4927.roa
Signing time:             Sun 09 Aug 2026 01:00:12 +0000
ROA not before:           Sun 09 Aug 2026 01:00:12 +0000
ROA not after:            Sat 07 Nov 2026 02:00:12 +0000
asID:                     36627
IP address blocks:        192.33.14.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 21 Aug 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:c6:3c:63:3f:a6:b5:7e:67:0e:9a:c2:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Aug  9 01:00:12 2026 GMT
            Not After : Nov  7 02:00:12 2026 GMT
        Subject: CN=a4d23a53-94af-49f2-b99b-45d50bbab700
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:ee:3f:e0:81:4f:63:4d:5c:3a:f7:88:27:fd:
                    b0:19:1d:1e:0d:00:71:e3:00:af:26:44:66:bd:88:
                    b9:d6:bd:11:c8:cb:ce:92:94:f6:68:5e:93:1b:2f:
                    d7:58:91:32:b3:a8:22:fe:c9:66:33:d8:59:4b:24:
                    27:5b:02:8e:16:ab:70:91:ed:96:8d:85:34:a2:80:
                    3d:9e:7f:d0:dc:29:41:ee:54:f8:62:29:f8:8a:2e:
                    ed:22:f0:a7:eb:2e:93:84:5b:f1:42:5d:73:af:45:
                    b2:da:90:d1:c3:3b:8d:5e:0e:58:11:c8:b4:8e:ee:
                    73:0b:f9:ec:9a:58:bc:23:1a:f8:14:e0:c5:a1:41:
                    0c:a3:4f:e2:88:67:56:d4:17:00:f4:9d:51:e6:42:
                    9b:42:63:5a:04:26:96:ad:aa:47:8a:9e:c6:f3:a9:
                    63:77:d6:f6:92:2e:76:2a:f5:f5:76:89:2b:ed:af:
                    d8:85:e0:f4:85:e8:79:54:00:d3:25:20:ca:3d:35:
                    ce:4e:65:45:6b:db:35:35:5e:73:b2:b6:14:59:e4:
                    5c:69:33:2e:f0:15:95:26:13:36:f6:85:3d:12:74:
                    4d:ea:5d:f3:06:5e:c5:d6:0c:89:13:05:7d:c1:d4:
                    3b:e0:19:5d:6e:0d:0d:27:9b:57:46:6e:47:4c:61:
                    22:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DB:48:24:4D:15:1B:A8:75:6F:E6:D4:C0:B6:68:05:A8:FC:07:19:5A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/1e242d71-a572-3d9c-b9e4-f12a120e4927.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.33.14.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         8a:73:96:70:ef:3c:51:3b:60:fa:04:1a:86:05:ad:ee:02:e3:
         02:52:5e:da:b1:f4:50:2e:eb:f2:02:da:3c:fc:f4:8d:ad:ca:
         05:87:17:08:f7:19:c6:5f:78:67:32:b4:40:df:4d:01:1a:1a:
         65:ff:8d:00:cb:82:24:d8:46:6a:aa:da:18:0a:3e:11:5f:17:
         7b:42:28:9e:2d:3a:b0:d9:9a:68:c0:ed:f6:9e:47:23:d2:d5:
         4f:04:9d:f5:0d:e9:4b:dc:a9:3b:9e:38:d4:65:e2:24:20:c2:
         12:7e:9b:9d:b7:bc:a2:58:42:61:7f:48:c5:26:6c:37:c4:f4:
         c2:0a:32:61:34:27:50:f4:31:8b:2b:cd:7c:89:4a:f8:8c:d2:
         46:f0:1a:3e:9f:d1:7e:f5:66:4b:0b:e9:f6:d6:3a:44:4d:05:
         81:c4:de:b9:81:5b:29:4b:65:bc:30:04:99:d5:9e:8d:62:ca:
         98:e5:d5:44:bb:f5:38:43:ef:eb:58:4b:90:fa:85:de:27:87:
         4e:59:4f:cf:95:83:2f:43:aa:ae:32:c5:8d:48:8a:a6:47:64:
         ad:80:28:8e:20:21:33:97:7a:30:69:e9:5f:d9:48:50:a6:ed:
         f6:48:1e:0c:d9:41:92:7c:47:04:0b:83:f5:d3:e1:9c:ba:23:
         85:3e:08:41
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE7GPGM/prV+Zw6awkAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz
NmMyMB4XDTI2MDgwOTAxMDAxMloXDTI2MTEwNzAyMDAxMlowLzEtMCsGA1UEAxMk
YTRkMjNhNTMtOTRhZi00OWYyLWI5OWItNDVkNTBiYmFiNzAwMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnO4/4IFPY01cOveIJ/2wGR0eDQBx4wCvJkRm
vYi51r0RyMvOkpT2aF6TGy/XWJEys6gi/slmM9hZSyQnWwKOFqtwke2WjYU0ooA9
nn/Q3ClB7lT4Yin4ii7tIvCn6y6ThFvxQl1zr0Wy2pDRwzuNXg5YEci0ju5zC/ns
mli8Ixr4FODFoUEMo0/iiGdW1BcA9J1R5kKbQmNaBCaWrapHip7G86ljd9b2ki52
KvX1dokr7a/YheD0heh5VADTJSDKPTXOTmVFa9s1NV5zsrYUWeRcaTMu8BWVJhM2
9oU9EnRN6l3zBl7F1gyJEwV9wdQ74Bldbg0NJ5tXRm5HTGEihQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFNtIJE0VG6h1b+bUwLZoBaj8BxlaMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4
ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvMWUyNDJkNzEtYTU3Mi0z
ZDljLWI5ZTQtZjEyYTEyMGU0OTI3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4
YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj
MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz
ZGNiYzM2YzIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwCEOMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAIpzlnDvPFE7YPoEGoYFre4C4wJSXtqx9FAu6/IC2jz89I2tygWHFwj3
GcZfeGcytEDfTQEaGmX/jQDLgiTYRmqq2hgKPhFfF3tCKJ4tOrDZmmjA7faeRyPS
1U8EnfUN6UvcqTueONRl4iQgwhJ+m523vKJYQmF/SMUmbDfE9MIKMmE0J1D0MYsr
zXyJSviM0kbwGj6f0X71ZksL6fbWOkRNBYHE3rmBWylLZbwwBJnVno1iypjl1US7
9ThD7+tYS5D6hd4nh05ZT8+Vgy9Dqq4yxY1IiqZHZK2AKI4gITOXejBp6V/ZSFCm
7fZIHgzZQZJ8RwQLg/XT4Zy6I4U+CEE=
-----END CERTIFICATE-----
Generated at Wed Aug 19 17:07:42 2026 by rpki-client