Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/705b83a5-22d9-3feb-8d0a-e04213e3584f.roa
File:                     705b83a5-22d9-3feb-8d0a-e04213e3584f.roa (raw, json)
Hash identifier:          gXbrw5KDzSm/aofiecrBFAmEJXxCKODKJiRWVQ4l0Ng=
Subject key identifier:   68:E7:4F:B9:64:04:21:F4:8E:5C:83:C0:7F:80:F8:04:78:17:BF:CE
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584EC63C65070A09637AAEA1E000
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/705b83a5-22d9-3feb-8d0a-e04213e3584f.roa
Signing time:             Sun 09 Aug 2026 01:00:12 +0000
ROA not before:           Sun 09 Aug 2026 01:00:12 +0000
ROA not after:            Sat 07 Nov 2026 02:00:12 +0000
asID:                     397197
IP address blocks:        192.33.14.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 21 Aug 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:c6:3c:65:07:0a:09:63:7a:ae:a1:e0:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Aug  9 01:00:12 2026 GMT
            Not After : Nov  7 02:00:12 2026 GMT
        Subject: CN=30144076-2a47-433a-8953-3a2b3957b6c1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:2b:36:75:20:20:ba:02:4b:6c:7f:6a:79:45:
                    f6:08:f6:4f:78:aa:95:a0:52:c7:2f:05:ea:cc:00:
                    af:ea:04:30:ed:07:5a:88:db:12:03:d1:14:48:a5:
                    42:47:a0:a0:71:a6:0e:43:16:9e:42:b7:dc:86:09:
                    e8:9e:e5:83:63:3e:9d:b3:56:0c:5f:cd:40:fd:fa:
                    e7:3a:2b:e5:6c:fc:63:f1:c1:6b:2c:9a:cf:01:c2:
                    69:92:aa:8e:17:16:3d:a1:78:f6:08:4f:dc:2f:3c:
                    f4:13:bb:6a:98:38:d0:e1:5f:98:5c:82:8e:7a:7c:
                    6b:e7:35:ff:e2:e9:ce:27:02:6d:a0:75:be:b1:2b:
                    1d:4e:f0:be:d1:cf:8a:a9:ee:56:a4:22:87:23:38:
                    e8:a2:20:ef:d3:62:14:73:c5:9a:df:24:6c:e8:c5:
                    65:8c:33:a6:6f:ad:a7:68:cd:b2:46:32:66:de:d0:
                    23:7a:23:c5:ef:2c:da:94:0c:d6:3c:9c:7b:a4:cc:
                    ee:6b:bf:9e:6a:7e:0d:70:82:15:94:83:83:18:c0:
                    86:56:f4:aa:d3:9a:ac:c0:65:a3:87:31:0f:3f:e9:
                    bb:e2:4e:af:16:5c:bf:c5:fc:db:ca:1d:34:10:f6:
                    f2:d3:26:e9:f8:98:ac:b6:5b:ba:8d:28:89:e2:cf:
                    03:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                68:E7:4F:B9:64:04:21:F4:8E:5C:83:C0:7F:80:F8:04:78:17:BF:CE
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/705b83a5-22d9-3feb-8d0a-e04213e3584f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.33.14.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5d:c4:28:9f:92:37:e1:5b:7e:2e:1c:0b:ff:91:20:ca:07:2d:
         40:93:05:91:7d:e2:2c:66:8a:d4:94:dd:e8:ba:0e:12:1d:df:
         d3:e7:94:76:0c:c1:56:79:9f:23:cc:ac:ea:6e:13:5d:af:58:
         85:b1:01:80:80:72:c0:e5:23:76:93:e0:1f:d9:68:8d:03:50:
         c2:d3:6f:7a:71:1c:fd:a3:16:19:48:36:bc:a7:2f:c0:8e:31:
         3c:91:08:81:9b:7b:fa:b9:d1:f2:b0:29:c7:0a:12:b3:29:92:
         cd:f4:73:84:14:3d:51:5d:cd:57:a3:23:30:07:df:53:ba:37:
         61:87:95:f9:b4:a5:27:d7:e3:b0:95:18:9a:56:c0:e0:9f:09:
         56:ff:4b:2a:c4:41:61:13:10:71:29:9b:e3:13:b0:a5:65:61:
         6a:1f:0d:74:39:64:d6:3d:f2:6b:5a:85:84:d5:31:75:53:c6:
         7c:2b:e4:c4:37:be:30:25:64:ba:06:69:29:64:3f:5f:59:86:
         87:77:11:e2:13:97:55:e1:2d:b4:8f:c1:56:03:92:6a:5a:17:
         38:39:66:a7:a2:23:a3:cc:46:45:3e:92:32:9b:79:a1:52:25:
         c3:ae:68:ca:f6:83:25:0e:2d:7b:9c:d5:d5:d9:29:1d:1a:47:
         a8:14:9e:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 19 20:14:00 2026 by rpki-client