Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/64c1caae-4223-33d2-b076-86e8f4b00a44.roa
File:                     64c1caae-4223-33d2-b076-86e8f4b00a44.roa (raw, json)
Hash identifier:          Eb8lCXikpO+C/e5Bx41xtFWUW2UmctcDN7bpaT1mBWY=
Subject key identifier:   B7:32:4A:7D:C0:4E:FE:7C:E6:95:4D:93:1B:04:4D:42:92:DA:DA:D6
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584F682817481144DC7AC9F1DCC0
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/64c1caae-4223-33d2-b076-86e8f4b00a44.roa
Signing time:             Tue 06 Oct 2026 01:00:13 +0000
ROA not before:           Tue 06 Oct 2026 01:00:13 +0000
ROA not after:            Mon 04 Jan 2027 02:00:13 +0000
asID:                     396682
IP address blocks:        192.33.14.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 08 Oct 2026 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:68:28:17:48:11:44:dc:7a:c9:f1:dc:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Oct  6 01:00:13 2026 GMT
            Not After : Jan  4 02:00:13 2027 GMT
        Subject: CN=5b0e733d-fb46-4d8f-91f2-943912ec3860
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:92:c6:0f:31:86:c7:c1:d4:77:88:25:84:ba:e6:
                    a2:31:28:4a:cc:3c:5e:37:51:07:37:12:8e:ea:b1:
                    20:9e:13:ba:b1:65:22:34:c2:f3:79:f2:56:7e:08:
                    66:c2:3b:4a:e7:13:12:21:f0:8d:1b:2e:4a:82:f6:
                    e0:bf:6d:2f:62:a9:fd:11:aa:aa:40:bc:35:b6:8a:
                    eb:21:46:02:7c:a0:5e:c6:5b:8b:17:2e:bf:e0:2e:
                    5f:0f:80:44:c9:f1:f8:48:d3:4f:51:26:3a:2f:00:
                    24:85:bd:49:b3:d9:b5:2e:fb:3a:64:cb:7e:d4:90:
                    2f:54:e1:d2:22:5f:e2:fa:c5:a9:fe:dc:1e:89:ad:
                    29:c9:70:c2:18:e3:79:30:33:7a:b8:44:fe:d0:20:
                    90:65:9b:51:de:73:b4:2d:f9:1a:22:88:07:43:ed:
                    1e:94:d4:56:8d:10:3e:dd:67:83:35:cf:81:59:d5:
                    a8:00:a0:99:34:70:7e:6a:91:c0:71:9b:a6:83:5b:
                    64:64:7c:20:76:c4:2a:7b:18:60:75:4b:52:95:9d:
                    66:fa:86:14:46:27:d4:ea:c6:d6:ad:70:68:60:56:
                    63:90:27:28:e8:b3:dd:21:56:a3:4b:14:cd:41:b4:
                    d2:14:ef:9e:a9:82:03:34:ba:52:c5:11:37:27:94:
                    80:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B7:32:4A:7D:C0:4E:FE:7C:E6:95:4D:93:1B:04:4D:42:92:DA:DA:D6
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/64c1caae-4223-33d2-b076-86e8f4b00a44.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.33.14.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         54:91:02:98:75:26:95:9c:2d:4e:7b:d2:71:84:5f:d0:47:3c:
         1d:4a:c7:9a:ee:22:55:1b:8a:05:88:2a:69:57:b5:5c:f2:1b:
         a3:12:c0:1e:97:9e:15:76:1c:d2:00:d7:90:7e:60:ce:f5:f4:
         27:03:c6:76:31:13:44:50:32:fe:cd:6f:84:92:fa:21:13:64:
         97:d1:ca:af:f9:5c:af:cb:f0:c1:6c:f1:f6:f1:34:fd:28:45:
         62:90:4e:a7:ac:35:fc:15:ab:00:5b:1b:e3:9a:fd:7e:8b:89:
         6f:5f:8f:64:2d:31:56:44:98:e8:5b:dd:1e:14:da:1d:e4:7d:
         18:d0:44:72:a7:d8:90:87:0e:c2:b3:e1:31:a7:27:85:86:e5:
         e1:8b:0b:a1:bf:6f:45:a8:d1:63:34:ca:70:bd:4c:71:b4:78:
         90:a4:f4:0c:6d:40:81:0b:d7:ca:5c:5a:87:66:61:57:05:db:
         81:83:c9:64:8f:0b:02:e9:d1:a7:10:18:ed:c7:10:87:2a:e4:
         19:9b:97:64:dd:b8:e7:d2:ea:16:93:81:98:c7:dc:5c:4e:e3:
         4b:ed:5f:91:54:49:4f:dc:84:5a:0b:6b:34:6a:ea:b8:53:69:
         96:d0:fe:41:c8:33:e9:72:c2:c0:d4:2d:69:d2:9d:14:36:75:
         98:41:ad:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 7 08:00:18 2026 by rpki-client