Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/7ddd7740-cde6-306a-bb0d-c5538841bbdc.roa
File:                     7ddd7740-cde6-306a-bb0d-c5538841bbdc.roa (raw, json)
Hash identifier:          qSlFREAJCNxBC4EwYQgCjCmglIKk/aL4i8YrVzzrOHg=
Subject key identifier:   4A:A9:4E:71:60:EB:DC:24:1A:35:5E:C9:4B:06:1D:75:FE:BD:D5:13
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584F68281FA193033436F09ACCC0
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/7ddd7740-cde6-306a-bb0d-c5538841bbdc.roa
Signing time:             Tue 06 Oct 2026 01:00:13 +0000
ROA not before:           Tue 06 Oct 2026 01:00:13 +0000
ROA not after:            Mon 04 Jan 2027 02:00:13 +0000
asID:                     40717
IP address blocks:        192.33.14.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 08 Oct 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:68:28:1f:a1:93:03:34:36:f0:9a:cc:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Oct  6 01:00:13 2026 GMT
            Not After : Jan  4 02:00:13 2027 GMT
        Subject: CN=ed6e3a78-3dd9-4dc0-b16b-9a51a13e9009
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8e:96:5d:5e:0e:0a:b8:04:5e:6c:cd:98:c1:0a:
                    b6:d2:b2:00:eb:ae:df:65:81:8a:a4:30:ed:11:31:
                    4c:fc:14:55:48:24:36:af:0b:95:19:f7:19:c6:ab:
                    d6:a7:9d:5a:76:67:58:c2:b3:1c:f8:45:75:fd:dd:
                    5f:76:a8:82:60:df:c8:9b:5d:22:33:70:f9:ab:a2:
                    fd:75:44:3f:5b:d0:8d:75:56:ca:b9:25:7c:ea:ed:
                    71:dd:00:1c:c8:c8:52:73:9f:75:3e:8e:3c:a8:13:
                    95:de:33:01:53:1a:ac:40:96:e4:a6:e7:0f:b2:56:
                    7b:d9:61:2d:64:9f:4b:9a:f9:04:05:ae:12:6b:f6:
                    27:a5:40:02:d0:e3:fa:95:9b:2d:36:50:33:77:f5:
                    f5:0a:39:56:b8:83:73:72:a8:ec:2f:b5:6d:64:48:
                    40:9b:7c:dd:33:42:3b:5c:81:09:9f:79:d0:0c:9f:
                    7d:f0:e1:83:1d:c1:5e:ed:67:b8:6f:5f:6e:c8:92:
                    99:92:f2:88:9b:af:12:53:e0:f4:a4:c0:39:71:46:
                    ad:f6:0f:6b:b8:06:9e:c3:59:3c:32:82:e0:2d:57:
                    92:b5:9a:d2:7d:04:a6:58:81:b5:46:50:e6:79:d6:
                    00:96:5f:e5:0d:f4:39:68:3a:13:1a:64:57:67:c1:
                    7d:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4A:A9:4E:71:60:EB:DC:24:1A:35:5E:C9:4B:06:1D:75:FE:BD:D5:13
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/7ddd7740-cde6-306a-bb0d-c5538841bbdc.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.33.14.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         be:f3:f0:35:c7:80:7f:a5:dd:39:7b:d4:81:32:af:15:1f:d2:
         c5:99:42:65:d3:53:49:ec:66:d8:55:a9:a2:24:06:2e:09:5f:
         e2:e7:02:a6:67:88:27:0c:e1:3e:97:bd:68:f2:79:a0:eb:ba:
         8f:95:0c:c2:77:e7:77:89:88:83:37:f1:ca:21:87:a0:a5:d6:
         6f:35:f4:4a:0e:39:80:c9:6b:e0:ca:29:e6:d5:9b:69:20:7c:
         c4:03:d2:90:46:4e:ee:fb:d6:ca:00:67:cd:6a:9f:09:d9:c4:
         b7:44:ef:c0:cb:8b:8d:83:f7:d4:5b:2d:0c:17:7f:0d:dc:4a:
         27:99:db:cb:70:80:46:65:c8:40:42:e5:de:b6:ed:c1:1b:f3:
         00:10:42:f1:07:b8:b2:cf:10:10:46:52:5e:4d:8e:e2:26:0a:
         06:87:1d:dc:04:7e:bb:e1:42:4e:fa:a8:0d:3c:d0:9b:60:3c:
         e5:75:14:6f:10:b0:92:99:11:49:61:fe:fa:e4:df:f7:4d:13:
         38:51:05:e6:28:6e:34:f8:86:7f:06:88:16:3a:fe:8b:63:2e:
         13:99:ff:31:d1:b9:ca:ab:0a:42:4c:2d:0b:52:25:50:20:8c:
         ce:95:dc:f0:02:e5:b5:ce:45:ad:62:06:79:3d:34:91:63:71:
         47:24:bd:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 6 20:03:38 2026 by rpki-client