Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/3c6fe822-6458-32a7-b1c6-b3c977df50c6.roa
File:                     3c6fe822-6458-32a7-b1c6-b3c977df50c6.roa (raw, json)
Hash identifier:          0iCYS4NyxMIaVHlFt/RHXznCnzigyp0bHkgvT/N/FS4=
Subject key identifier:   11:34:E5:FD:38:2F:15:53:38:16:94:01:53:5E:F6:D3:48:5B:B6:6C
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584EC63C698FAF6340439B146B00
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/3c6fe822-6458-32a7-b1c6-b3c977df50c6.roa
Signing time:             Sun 09 Aug 2026 01:00:12 +0000
ROA not before:           Sun 09 Aug 2026 01:00:12 +0000
ROA not after:            Sat 07 Nov 2026 02:00:12 +0000
asID:                     396572
IP address blocks:        192.33.14.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 21 Aug 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:c6:3c:69:8f:af:63:40:43:9b:14:6b:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Aug  9 01:00:12 2026 GMT
            Not After : Nov  7 02:00:12 2026 GMT
        Subject: CN=bbb5714e-4df7-4b5c-ba0e-abcd9ab72e15
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:87:ec:62:72:c5:90:04:1f:7f:1d:62:91:9b:
                    50:d5:f7:b2:b6:b4:9d:af:f0:af:bf:69:f8:c6:24:
                    ef:a2:c6:7b:e6:ba:99:ce:e2:40:9e:10:d3:21:ff:
                    1f:e9:55:d0:ae:59:30:1b:53:27:e1:cd:39:31:da:
                    9f:7c:20:64:84:83:93:9c:b1:d2:d1:5e:63:1b:e8:
                    e4:c4:c3:84:08:ec:d4:28:8a:89:d1:a9:f7:29:e3:
                    52:74:c8:bf:b7:23:fb:fc:33:c1:2f:dc:84:e5:e9:
                    16:c6:a4:8f:41:9e:4d:59:fb:0f:7d:11:a2:9e:5f:
                    bc:11:d3:50:dc:44:da:ab:4b:b6:58:2b:91:5a:53:
                    6b:65:17:79:54:fe:0e:de:9c:2b:9d:9f:44:9c:76:
                    b5:43:b2:27:2e:0e:56:7c:fc:6b:3b:20:d0:11:d7:
                    e6:53:da:11:6a:fc:06:1f:2f:f5:40:35:37:95:a7:
                    05:69:d5:28:29:f6:a5:e2:1b:1b:a7:ad:b4:e9:cb:
                    86:4d:b6:3e:f9:42:a1:b9:bc:8f:36:5e:c8:12:83:
                    bb:47:08:14:be:a3:db:bd:d2:21:f8:15:e0:1d:79:
                    0c:b5:28:cb:e0:57:46:8e:18:19:1f:cd:99:57:b5:
                    c1:91:96:55:41:7e:3b:1f:0a:27:d8:59:61:e7:98:
                    22:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                11:34:E5:FD:38:2F:15:53:38:16:94:01:53:5E:F6:D3:48:5B:B6:6C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/3c6fe822-6458-32a7-b1c6-b3c977df50c6.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.33.14.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         67:7e:b7:f2:d6:28:cb:e2:d6:94:67:11:cc:60:84:e2:94:43:
         21:c6:2b:e1:a0:15:4f:fe:f9:ac:50:3b:21:11:f2:44:31:39:
         12:24:6a:e9:f0:5e:ae:22:05:4c:74:19:b1:78:9f:a7:0e:60:
         ea:04:05:3f:2e:e6:ee:3c:f2:6a:12:d7:67:08:71:a3:c8:40:
         4c:bf:2b:89:13:79:99:af:03:8d:24:6b:f7:f9:d3:ce:90:c8:
         e3:76:f9:bd:3c:b5:55:9f:06:ec:b4:a9:e7:60:d4:ef:6a:fc:
         cc:a4:c9:09:72:f3:4e:f6:6e:15:ff:df:96:db:20:2e:10:d3:
         1f:1a:a9:4b:e8:53:5d:ca:95:4b:cd:b1:a1:ca:52:c2:93:55:
         99:76:8e:f1:bb:e1:29:bd:6f:55:79:e0:b1:b7:2e:2c:c2:8f:
         ff:e5:8a:b7:68:2f:8b:bc:76:09:51:b5:74:5e:dc:f3:54:71:
         80:db:56:54:15:ec:f8:7d:54:1a:e3:4c:0d:fa:db:4c:e4:bc:
         1a:e6:11:41:47:44:80:62:19:94:d7:1a:c6:51:b0:b7:36:76:
         85:ee:8e:90:e2:21:a6:d5:7d:74:ba:54:26:d0:2f:24:dd:d2:
         ef:f8:8b:30:f7:fe:2d:ed:ff:29:d5:36:96:c6:56:62:fa:4e:
         f5:00:29:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 19 19:35:43 2026 by rpki-client