Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/9a646c40-26be-313a-aa95-97648987f73d.roa
File:                     9a646c40-26be-313a-aa95-97648987f73d.roa (raw, json)
Hash identifier:          Sc5pM1Fn7rY2KgUxg4xfxrZEeN/SgIXrR/h23XHQwCc=
Subject key identifier:   E9:90:78:72:B4:9A:AE:98:31:C3:9D:EB:63:28:BF:71:C2:A4:0D:03
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584EC63C6728EB7970C543A94680
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/9a646c40-26be-313a-aa95-97648987f73d.roa
Signing time:             Sun 09 Aug 2026 01:00:12 +0000
ROA not before:           Sun 09 Aug 2026 01:00:12 +0000
ROA not after:            Sat 07 Nov 2026 02:00:12 +0000
asID:                     396564
IP address blocks:        192.33.14.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 21 Aug 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:c6:3c:67:28:eb:79:70:c5:43:a9:46:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Aug  9 01:00:12 2026 GMT
            Not After : Nov  7 02:00:12 2026 GMT
        Subject: CN=ba4db7ec-1eeb-4fa1-8b39-39a53521f452
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8e:0f:76:e7:fc:42:79:a1:8d:79:8a:65:24:f3:
                    3f:6d:67:e5:4f:7b:a3:63:13:22:e4:7d:79:3d:8c:
                    71:2e:1f:5a:ec:a7:99:70:3a:9b:e2:b0:ad:c4:cf:
                    e9:8f:9d:09:41:3f:80:bb:30:f9:14:69:6f:b4:bd:
                    83:b0:33:22:cd:70:af:fd:71:f3:32:69:ac:97:ac:
                    40:ef:66:1c:bb:88:ad:9d:01:53:2c:86:d9:dc:ca:
                    08:48:83:68:1e:f9:ef:e1:0e:b7:15:04:d7:e0:24:
                    8f:84:28:f9:a0:c7:85:18:93:b3:f7:2d:8b:8f:1e:
                    66:d5:65:9c:74:2d:aa:4a:51:5e:8d:ce:ed:f0:36:
                    89:19:37:6e:40:87:12:4d:60:ab:a6:67:a9:b2:b1:
                    93:9e:c0:de:8f:e6:b5:be:7c:40:74:77:6a:db:c5:
                    71:8b:67:6b:f8:f4:fe:9e:94:a8:5d:bf:5d:60:f5:
                    eb:ff:94:f9:f8:9b:8a:ef:5d:34:7c:d3:cd:a3:cf:
                    41:b7:a3:2e:7c:d2:23:6a:f9:37:76:23:97:d5:16:
                    5b:d9:45:d9:c9:07:a3:0a:ef:b3:07:69:49:74:d7:
                    a8:f2:8f:81:9d:1b:79:cf:8d:c1:66:67:0c:8d:9f:
                    59:ea:7d:9b:86:a7:93:6c:89:c4:ae:e2:39:e8:d3:
                    36:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E9:90:78:72:B4:9A:AE:98:31:C3:9D:EB:63:28:BF:71:C2:A4:0D:03
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/9a646c40-26be-313a-aa95-97648987f73d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.33.14.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a0:80:09:6a:38:56:b1:65:80:51:50:0b:2b:12:4b:be:ee:b7:
         fe:1f:05:d1:47:49:d5:b3:7c:48:5c:e2:4a:8b:35:44:66:04:
         bc:ec:46:32:14:26:b9:ab:d4:e2:3e:c1:61:7c:e2:e4:76:3b:
         35:0f:94:81:65:f5:77:33:9c:11:e9:43:c2:d5:9b:cc:21:3f:
         56:70:2c:eb:4d:de:a0:5b:19:f2:19:84:82:b4:13:01:05:b9:
         4c:fc:0e:b6:d0:ea:e3:58:5a:97:d3:16:6c:d7:af:75:72:a8:
         71:b2:83:31:49:31:27:9a:97:b4:35:e3:3a:91:78:a5:ae:ce:
         f2:1a:8d:13:1b:77:9b:66:ed:3f:24:41:4f:34:68:42:9d:e4:
         f8:a8:70:2c:ec:de:a0:f8:56:8c:21:6b:dc:17:45:f5:f2:fb:
         3b:60:ff:9e:ca:0f:1f:8c:8e:a1:7c:71:0f:c4:76:bc:69:86:
         ac:9d:7d:89:78:f6:9b:cd:6d:ca:d1:f1:63:66:fc:ea:73:bc:
         40:73:7d:ae:2a:dd:6b:8c:e9:52:48:db:8a:a9:9f:2f:b3:e3:
         b5:03:c7:6a:3d:82:78:27:13:2e:39:19:a6:5e:40:83:6c:0f:
         0f:de:c9:2d:28:d5:d1:dd:80:08:d1:6d:1b:5d:94:76:f6:85:
         91:cd:88:7d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 19 20:34:51 2026 by rpki-client