Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/80b1e873-a0f7-337e-bb4b-3e45983d06b5.roa
File:                     80b1e873-a0f7-337e-bb4b-3e45983d06b5.roa (raw, json)
Hash identifier:          KSmSOUAmUeUr+AKqINj7x8ePG1tJoNo9ZToJJWICPIg=
Subject key identifier:   C6:39:C6:9A:3F:24:BC:A8:9B:CA:49:02:A8:25:12:38:A4:75:F8:84
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584F68282519CE378E88E2CA6058
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/80b1e873-a0f7-337e-bb4b-3e45983d06b5.roa
Signing time:             Tue 06 Oct 2026 01:00:13 +0000
ROA not before:           Tue 06 Oct 2026 01:00:13 +0000
ROA not after:            Mon 04 Jan 2027 02:00:13 +0000
asID:                     396654
IP address blocks:        192.33.14.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 12 Oct 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:68:28:25:19:ce:37:8e:88:e2:ca:60:58
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Oct  6 01:00:13 2026 GMT
            Not After : Jan  4 02:00:13 2027 GMT
        Subject: CN=6754959c-31f9-40f4-b10c-3a1022fe0083
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8d:40:93:77:93:50:6d:fa:da:11:fb:b0:41:de:
                    e8:89:8d:89:70:3a:a9:57:29:88:38:2e:91:57:a6:
                    ab:23:85:1d:a6:5b:df:2e:57:cd:0e:85:fe:bb:e0:
                    93:7d:11:24:04:eb:12:48:c6:d7:e8:35:e0:70:06:
                    e6:33:18:00:c0:65:95:29:56:10:34:0a:7b:fd:81:
                    60:b3:e6:15:19:12:d3:3b:74:8b:ce:86:ac:29:f4:
                    28:18:65:c7:74:ef:e4:b1:ba:be:77:3c:8d:fb:95:
                    3e:24:e8:a8:2b:fd:29:db:11:e0:b1:22:a4:a5:af:
                    c2:99:c0:79:ea:93:58:2e:3a:18:7b:68:aa:03:ce:
                    93:1e:c7:c4:58:3a:ea:73:be:9b:b1:48:a2:39:e1:
                    0f:62:6c:e4:64:85:82:88:c2:81:5d:7e:bb:d2:92:
                    11:4d:81:d9:5a:d4:09:9a:87:6e:be:d2:54:ed:e6:
                    1e:70:25:71:5f:60:52:2e:18:dd:e6:6d:2f:8a:0d:
                    29:e9:49:39:45:b8:d0:68:34:9a:60:df:ac:1c:a7:
                    6b:98:c4:f1:47:07:76:ff:4e:cf:5d:0b:ef:b8:fd:
                    1b:5b:92:c5:81:0a:21:43:c3:04:38:be:57:0c:0c:
                    7f:14:bc:6d:2d:35:ae:e5:c5:c7:06:f0:bd:1d:4a:
                    0f:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C6:39:C6:9A:3F:24:BC:A8:9B:CA:49:02:A8:25:12:38:A4:75:F8:84
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/80b1e873-a0f7-337e-bb4b-3e45983d06b5.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.33.14.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         86:15:a9:0d:df:d3:f7:9b:08:dd:8f:52:ce:15:a1:53:eb:3f:
         8d:4d:d0:0f:03:ef:44:51:eb:6a:99:f6:5f:b9:1c:1d:fb:cd:
         04:f7:cb:a6:45:94:9a:d5:07:ad:fc:1a:55:75:b5:17:61:cd:
         4f:b2:1a:b5:0b:6e:f2:e7:73:65:a5:4d:f6:9c:75:14:c3:ab:
         a7:a2:62:75:09:81:ca:27:0f:27:94:77:6f:0d:69:bf:6f:5d:
         eb:68:95:6e:c4:72:b4:eb:0f:d9:e3:1d:be:85:2a:79:80:dc:
         d3:e6:28:3b:cb:c3:2d:db:0b:88:73:fa:c8:54:12:09:d4:d6:
         84:78:95:bb:5d:80:b5:43:1e:35:68:ff:de:3d:76:52:be:b8:
         c8:54:0e:42:e6:55:41:15:2d:4d:f2:4e:1c:1e:dd:c9:eb:de:
         5a:31:eb:46:14:20:92:a9:9b:46:61:16:e9:3e:a9:2c:58:ad:
         aa:01:1d:75:55:42:b5:ef:3b:5f:91:a5:f2:53:8c:bb:ae:a8:
         0b:cd:3a:7b:f5:1b:e4:a9:23:97:08:a5:d0:b8:2e:76:08:29:
         db:75:3c:5f:c4:cf:cf:04:1f:d8:9e:78:28:ac:ae:18:19:57:
         d6:59:1a:b0:82:8f:55:a5:3c:eb:07:a2:98:26:bb:cb:46:6d:
         0b:05:89:96
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9oKCUZzjeOiOLKYFgwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz
NmMyMB4XDTI2MTAwNjAxMDAxM1oXDTI3MDEwNDAyMDAxM1owLzEtMCsGA1UEAxMk
Njc1NDk1OWMtMzFmOS00MGY0LWIxMGMtM2ExMDIyZmUwMDgzMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjUCTd5NQbfraEfuwQd7oiY2JcDqpVymIOC6R
V6arI4UdplvfLlfNDoX+u+CTfREkBOsSSMbX6DXgcAbmMxgAwGWVKVYQNAp7/YFg
s+YVGRLTO3SLzoasKfQoGGXHdO/ksbq+dzyN+5U+JOioK/0p2xHgsSKkpa/CmcB5
6pNYLjoYe2iqA86THsfEWDrqc76bsUiiOeEPYmzkZIWCiMKBXX670pIRTYHZWtQJ
moduvtJU7eYecCVxX2BSLhjd5m0vig0p6Uk5RbjQaDSaYN+sHKdrmMTxRwd2/07P
XQvvuP0bW5LFgQohQ8MEOL5XDAx/FLxtLTWu5cXHBvC9HUoP2wIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFMY5xpo/JLyom8pJAqglEjikdfiEMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4
ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvODBiMWU4NzMtYTBmNy0z
MzdlLWJiNGItM2U0NTk4M2QwNmI1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4
YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj
MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz
ZGNiYzM2YzIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwCEOMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAIYVqQ3f0/ebCN2PUs4VoVPrP41N0A8D70RR62qZ9l+5HB37zQT3y6ZF
lJrVB638GlV1tRdhzU+yGrULbvLnc2WlTfacdRTDq6eiYnUJgconDyeUd28Nab9v
XetolW7EcrTrD9njHb6FKnmA3NPmKDvLwy3bC4hz+shUEgnU1oR4lbtdgLVDHjVo
/949dlK+uMhUDkLmVUEVLU3yThwe3cnr3lox60YUIJKpm0ZhFuk+qSxYraoBHXVV
QrXvO1+RpfJTjLuuqAvNOnv1G+SpI5cIpdC4LnYIKdt1PF/Ez88EH9ieeCisrhgZ
V9ZZGrCCj1WlPOsHopgmu8tGbQsFiZY=
-----END CERTIFICATE-----
Generated at Fri Oct 9 17:45:41 2026 by rpki-client