Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/97643887-f29c-31f3-a16b-0fe0fdd9891e.roa
File:                     97643887-f29c-31f3-a16b-0fe0fdd9891e.roa (raw, json)
Hash identifier:          +iLBlU/5Da80HBJq3wxwQp0WXiyOqfQ+m8l22MYYXm8=
Subject key identifier:   65:70:82:D1:6D:7E:20:50:D6:7E:BE:C4:81:D3:9F:20:AE:78:5D:16
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584F68281FF6B6C5765F89454880
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/97643887-f29c-31f3-a16b-0fe0fdd9891e.roa
Signing time:             Tue 06 Oct 2026 01:00:13 +0000
ROA not before:           Tue 06 Oct 2026 01:00:13 +0000
ROA not after:            Mon 04 Jan 2027 02:00:13 +0000
asID:                     396758
IP address blocks:        192.33.14.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 10 Oct 2026 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:68:28:1f:f6:b6:c5:76:5f:89:45:48:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Oct  6 01:00:13 2026 GMT
            Not After : Jan  4 02:00:13 2027 GMT
        Subject: CN=3f4131c1-53b1-4b06-8e58-0b3762263d0b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:07:0b:e7:d5:7c:68:43:4f:35:ff:9d:77:50:
                    42:96:e6:58:27:ea:1f:6b:37:0e:50:fe:a8:10:02:
                    64:7c:c1:a4:fd:c5:4f:91:19:a7:2f:9b:97:5b:48:
                    6e:73:b6:89:5a:6f:ef:ab:eb:19:62:dd:7f:05:71:
                    96:38:9c:3a:25:53:b5:b9:25:44:10:a7:3a:d3:65:
                    e8:91:fa:fa:7c:ae:92:67:54:c1:c0:de:bd:96:0e:
                    37:3c:43:7a:6a:5d:d7:42:6f:ca:90:31:77:f2:be:
                    20:fa:0f:0c:48:98:3b:07:b8:68:90:ec:e2:ec:4c:
                    2f:99:dc:c1:be:c0:e6:6f:17:41:84:ac:d6:1c:18:
                    ff:ac:af:65:5b:6c:ca:0b:c4:60:4b:d7:04:a3:0c:
                    ab:80:d0:cc:3a:9f:d7:92:cd:96:7d:f4:52:55:5f:
                    e8:d2:9a:62:fa:bb:f9:14:3a:8d:6a:35:75:be:42:
                    a5:f1:08:5c:03:f4:29:c1:71:a7:a4:03:1f:5d:58:
                    88:81:49:e9:0d:02:3d:5b:ed:ef:b1:58:d2:4e:52:
                    a2:4b:56:57:c1:68:55:99:59:3f:fc:cc:3b:6d:e0:
                    10:72:da:68:38:32:e8:d4:0e:10:42:35:ce:a2:99:
                    92:90:3d:58:0e:32:ef:da:56:68:4a:69:52:27:d7:
                    d3:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                65:70:82:D1:6D:7E:20:50:D6:7E:BE:C4:81:D3:9F:20:AE:78:5D:16
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/97643887-f29c-31f3-a16b-0fe0fdd9891e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.33.14.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         87:ac:70:03:12:99:b4:ea:58:c9:4e:bb:37:3b:0b:64:8f:85:
         bb:10:4e:0f:51:f7:21:c6:66:c1:70:78:95:20:f1:7c:8e:f1:
         79:cc:92:d1:a3:aa:d1:33:18:00:ad:5a:2f:b4:dc:1e:17:bd:
         ac:f3:86:71:5b:42:2e:57:6d:cf:c0:c8:df:d2:25:fb:b4:ba:
         a7:c8:cd:fc:24:8d:2e:6f:23:ef:7a:20:0e:4b:dd:ff:70:9f:
         4b:77:ac:3d:d8:d6:5d:47:9c:ca:b7:de:9b:8f:9c:10:3e:ad:
         e4:2f:07:3d:e3:be:06:8c:b6:7c:60:57:1a:78:29:8d:0b:ca:
         02:72:72:27:1f:27:2e:e0:5f:00:31:02:af:e8:8e:00:b3:98:
         ae:f8:db:f5:7d:94:2b:37:b4:e7:2f:2b:11:11:75:76:3c:97:
         df:b2:a5:5f:3b:dc:d3:6c:4d:15:0f:e1:cb:ca:d8:e9:2f:51:
         45:d0:50:5a:1b:db:a9:63:35:46:f7:a5:6c:97:81:4a:c6:72:
         37:1a:c2:50:4a:73:4f:05:49:7f:fc:2a:69:00:79:3a:2e:0a:
         60:ec:94:70:db:ff:7c:42:f5:aa:e9:b4:dd:f1:f7:4d:7e:3f:
         83:85:47:ce:ec:e5:84:69:ea:22:d2:04:a8:23:0e:30:b7:1b:
         84:c9:9f:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 9 11:51:15 2026 by rpki-client