Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/6242ff5a-b05a-3cc9-860e-015cd66af9b4.roa
File:                     6242ff5a-b05a-3cc9-860e-015cd66af9b4.roa (raw, json)
Hash identifier:          aOi2kMS4lBG97uvyGUYGC6YbZgpcwmGOs2ZpUmEl0+M=
Subject key identifier:   79:69:C6:79:70:23:B9:17:C1:9B:AD:C3:22:AD:85:72:45:60:7C:6F
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584F68281AB5BD270E2A6B58AE40
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/6242ff5a-b05a-3cc9-860e-015cd66af9b4.roa
Signing time:             Tue 06 Oct 2026 01:00:13 +0000
ROA not before:           Tue 06 Oct 2026 01:00:13 +0000
ROA not after:            Mon 04 Jan 2027 02:00:13 +0000
asID:                     396687
IP address blocks:        192.33.14.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 10 Oct 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:68:28:1a:b5:bd:27:0e:2a:6b:58:ae:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Oct  6 01:00:13 2026 GMT
            Not After : Jan  4 02:00:13 2027 GMT
        Subject: CN=79723e73-ac2b-4df7-be3f-420fa119f0cd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:c9:be:00:ca:ae:19:a3:e4:a8:7e:af:86:cb:
                    5b:57:af:43:aa:1f:6b:1e:79:b0:7a:57:6e:69:73:
                    c0:42:ce:fd:4e:4a:3c:3a:2c:7f:3e:50:d1:ad:15:
                    3d:19:52:53:93:a5:66:f6:b8:63:44:b7:46:32:6a:
                    ae:0a:05:1c:df:e4:8e:43:b5:ff:79:06:60:9d:2b:
                    ea:1c:e4:08:cc:7b:5e:51:2d:7e:71:23:42:7b:63:
                    31:c8:fa:a3:e8:5e:c9:9b:cf:d0:47:83:28:9c:5f:
                    02:e8:f4:d6:4b:ed:4d:d5:56:15:0b:28:bc:54:38:
                    14:a2:8d:c5:cb:07:7c:a5:6a:7d:8a:06:39:88:7b:
                    8f:9c:5c:90:2b:4f:29:43:00:75:f1:54:63:c7:15:
                    a3:db:92:b5:b6:d4:ec:0d:a8:15:51:6f:da:c2:e2:
                    c6:5a:e3:b7:08:96:ec:e2:21:aa:83:a2:0b:be:5a:
                    7f:49:62:e8:36:0d:e2:29:10:7b:62:ea:97:83:bd:
                    42:53:cc:9b:b0:01:f6:f3:2d:59:ac:f9:ec:f4:5c:
                    68:e4:44:ac:25:60:5b:2b:c5:d5:e5:cf:83:de:24:
                    61:7d:93:34:b8:fa:ce:12:e5:91:eb:c0:88:09:24:
                    11:be:8c:ea:94:e5:54:99:c8:a3:09:99:e7:93:f1:
                    ae:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                79:69:C6:79:70:23:B9:17:C1:9B:AD:C3:22:AD:85:72:45:60:7C:6F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/6242ff5a-b05a-3cc9-860e-015cd66af9b4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.33.14.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         56:11:8e:d2:18:91:0f:9c:80:bb:5e:d9:35:f4:2e:5d:db:92:
         a6:d6:29:82:3b:b4:1c:15:20:f5:4e:52:5f:ee:4d:38:b9:fa:
         fc:35:c8:1b:e6:62:5d:1f:d2:67:29:fb:d3:d6:f9:c3:6d:ae:
         0e:b0:68:dd:5b:b6:7a:89:47:70:4a:24:82:56:7f:af:8f:47:
         58:6e:a5:b3:10:eb:71:01:c8:6b:d4:7c:8a:e4:1e:a4:41:d8:
         0e:63:b8:6c:bd:6e:6b:01:8f:5e:75:00:6d:e4:c4:84:d5:33:
         fe:81:b8:20:51:54:f7:04:7c:6f:42:84:ed:3b:75:e9:e1:22:
         21:68:2f:bc:1d:06:39:f9:3e:bb:0e:e8:96:9b:90:e4:5e:7c:
         a4:62:2b:c8:c4:d5:2f:4c:be:9d:60:f8:49:85:83:21:53:93:
         e9:a7:23:10:9d:42:e6:e6:ac:41:18:5f:95:18:03:de:26:d7:
         ac:18:be:0a:36:ba:fa:b9:d6:95:94:77:07:10:f6:80:c8:b8:
         f0:43:53:94:75:e6:91:fa:c6:46:4a:1d:95:49:d6:6a:53:3d:
         4c:24:3b:8f:8c:8e:2f:4f:c4:c4:9c:30:2e:ba:69:e8:16:7e:
         5a:d2:3d:08:da:67:96:a8:23:6d:ca:b9:08:38:a1:db:7f:b7:
         b4:58:1f:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 8 17:48:47 2026 by rpki-client