Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/9749006c-3e9f-302b-a477-5f49543e58f8.roa
File:                     9749006c-3e9f-302b-a477-5f49543e58f8.roa (raw, json)
Hash identifier:          CjXgfKj5OS1pW4QGacoevb0RVpwIi6jpp6rZbeWciY8=
Subject key identifier:   9D:6C:D0:B1:68:9B:D4:F0:C8:B8:65:DD:2A:DE:7B:3C:48:AA:8C:C8
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584F682824B84636D0DB85FB7700
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/9749006c-3e9f-302b-a477-5f49543e58f8.roa
Signing time:             Tue 06 Oct 2026 01:00:13 +0000
ROA not before:           Tue 06 Oct 2026 01:00:13 +0000
ROA not after:            Mon 04 Jan 2027 02:00:13 +0000
asID:                     396546
IP address blocks:        192.33.14.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 12 Oct 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:68:28:24:b8:46:36:d0:db:85:fb:77:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Oct  6 01:00:13 2026 GMT
            Not After : Jan  4 02:00:13 2027 GMT
        Subject: CN=c6db8612-ea30-4209-8fa7-294c4df1a9a1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:88:fc:66:8e:2a:68:de:2b:fe:b8:4b:69:0d:
                    ce:ce:ba:a5:ed:31:90:ef:fb:81:de:71:11:74:74:
                    f3:31:9d:ed:b2:2a:93:a3:41:ae:dc:54:63:56:88:
                    ac:6b:af:be:6a:dd:ce:e9:19:57:c0:c9:4d:fc:1f:
                    71:5b:8d:6d:35:ed:42:0c:f5:d6:05:65:62:c0:9c:
                    7c:d4:c1:f2:1e:ca:07:f3:bf:b0:c2:bd:a2:35:18:
                    5b:d4:12:04:17:45:29:d1:8d:d3:39:dc:ce:8a:0a:
                    b5:dd:d8:42:d5:79:9d:87:25:1b:bb:52:71:e7:88:
                    9d:8e:6a:0a:71:10:9e:16:30:70:39:6c:71:00:c4:
                    62:be:2d:3d:93:82:c9:29:22:86:e9:a1:e8:81:7c:
                    27:5c:f7:cc:10:4e:59:d0:dd:4c:0c:2d:e9:58:00:
                    d5:18:7d:cf:64:32:35:04:65:2c:05:18:9d:5e:4d:
                    2b:89:4d:49:58:a4:93:7c:63:0f:3f:fd:ea:ef:60:
                    4c:11:bc:a0:c4:31:d7:29:a4:3a:3c:a6:2e:2c:ac:
                    13:d3:94:7d:ec:29:48:87:c7:f2:44:78:fa:4f:dd:
                    cb:f2:a3:1e:74:d9:24:24:39:c6:6e:24:74:4e:3b:
                    fb:48:77:91:90:c7:ad:1d:d0:28:a4:42:5c:6b:83:
                    8d:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9D:6C:D0:B1:68:9B:D4:F0:C8:B8:65:DD:2A:DE:7B:3C:48:AA:8C:C8
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/9749006c-3e9f-302b-a477-5f49543e58f8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.33.14.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         bc:8c:e1:99:be:8c:fa:a2:c8:5a:41:1d:0d:2a:ac:5c:4f:e5:
         f1:b8:2e:42:46:e2:34:40:f0:01:0d:43:e5:3a:0f:7f:b3:e5:
         11:f8:25:89:15:a9:52:af:e7:ed:78:b8:78:38:9a:d8:41:eb:
         5c:8a:1d:c8:77:df:1c:ab:6d:c5:5f:52:40:cb:c9:35:0f:cd:
         a9:86:ab:4d:38:4f:08:20:59:b5:ee:cb:f9:e5:ff:3f:9a:be:
         09:96:9e:0f:9d:10:c1:1f:ca:f4:a5:04:1e:fa:d0:28:62:2b:
         b4:37:c3:0f:8e:fb:63:38:b1:04:77:29:e1:ce:b6:29:40:e0:
         d9:d6:be:fb:9d:b1:ed:bb:d2:82:ba:5d:f4:3d:cf:00:2a:c8:
         4f:ff:f4:be:9c:8c:fc:d6:fe:78:95:01:93:0c:fb:0b:2b:32:
         09:e8:7b:dd:fa:0b:b4:79:90:c3:7b:eb:a1:2e:54:6c:52:6a:
         e9:29:62:e7:58:f6:13:2d:60:ce:1e:15:e7:65:b9:23:54:13:
         dd:d2:6a:d9:59:14:39:d0:b9:d5:f6:e5:53:39:29:c4:48:b9:
         01:3c:c1:75:5c:a0:c5:68:46:d9:cd:d5:67:e6:0c:ee:49:a7:
         6d:12:14:fe:94:d9:6b:15:20:02:97:1d:d3:7e:a3:94:48:dd:
         84:c7:d4:9e
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9oKCS4RjbQ24X7dwAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz
NmMyMB4XDTI2MTAwNjAxMDAxM1oXDTI3MDEwNDAyMDAxM1owLzEtMCsGA1UEAxMk
YzZkYjg2MTItZWEzMC00MjA5LThmYTctMjk0YzRkZjFhOWExMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAq4j8Zo4qaN4r/rhLaQ3Ozrql7TGQ7/uB3nER
dHTzMZ3tsiqTo0Gu3FRjVoisa6++at3O6RlXwMlN/B9xW41tNe1CDPXWBWViwJx8
1MHyHsoH87+wwr2iNRhb1BIEF0Up0Y3TOdzOigq13dhC1XmdhyUbu1Jx54idjmoK
cRCeFjBwOWxxAMRivi09k4LJKSKG6aHogXwnXPfMEE5Z0N1MDC3pWADVGH3PZDI1
BGUsBRidXk0riU1JWKSTfGMPP/3q72BMEbygxDHXKaQ6PKYuLKwT05R97ClIh8fy
RHj6T93L8qMedNkkJDnGbiR0Tjv7SHeRkMetHdAopEJca4ONawIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFJ1s0LFom9TwyLhl3SreezxIqozIMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4
ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvOTc0OTAwNmMtM2U5Zi0z
MDJiLWE0NzctNWY0OTU0M2U1OGY4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4
YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj
MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz
ZGNiYzM2YzIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwCEOMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBALyM4Zm+jPqiyFpBHQ0qrFxP5fG4LkJG4jRA8AENQ+U6D3+z5RH4JYkV
qVKv5+14uHg4mthB61yKHch33xyrbcVfUkDLyTUPzamGq004TwggWbXuy/nl/z+a
vgmWng+dEMEfyvSlBB760ChiK7Q3ww+O+2M4sQR3KeHOtilA4NnWvvudse270oK6
XfQ9zwAqyE//9L6cjPzW/niVAZMM+wsrMgnoe936C7R5kMN766EuVGxSaukpYudY
9hMtYM4eFedluSNUE93SatlZFDnQudX25VM5KcRIuQE8wXVcoMVoRtnN1WfmDO5J
p20SFP6U2WsVIAKXHdN+o5RI3YTH1J4=
-----END CERTIFICATE-----
Generated at Sat Oct 10 11:05:26 2026 by rpki-client