Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/ac552bc5-be2c-3a4a-9100-3062fd47fa3b.roa
File:                     ac552bc5-be2c-3a4a-9100-3062fd47fa3b.roa (raw, json)
Hash identifier:          d9or2sIhQ+msfo++rRyuLPZRMJ+jT+CtN645qp8KarM=
Subject key identifier:   E7:FB:D4:FE:4D:BF:08:EB:48:F3:9B:66:C9:79:BD:00:42:A3:D8:D5
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584EC63C67DF0BA85E95F8F689A8
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/ac552bc5-be2c-3a4a-9100-3062fd47fa3b.roa
Signing time:             Sun 09 Aug 2026 01:00:12 +0000
ROA not before:           Sun 09 Aug 2026 01:00:12 +0000
ROA not after:            Sat 07 Nov 2026 02:00:12 +0000
asID:                     396629
IP address blocks:        192.33.14.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 21 Aug 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:c6:3c:67:df:0b:a8:5e:95:f8:f6:89:a8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Aug  9 01:00:12 2026 GMT
            Not After : Nov  7 02:00:12 2026 GMT
        Subject: CN=c43623c9-3d6e-48ec-849d-660cb7fc4e89
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:2f:75:6e:bc:25:67:01:c9:7e:2b:97:ba:6e:
                    02:43:bc:96:8a:40:22:45:41:f2:bf:12:79:25:54:
                    04:11:b5:ab:bf:18:a4:d2:1f:57:47:eb:70:59:76:
                    48:42:9e:ac:fe:50:25:e5:eb:8b:02:8a:ce:2f:a4:
                    46:e1:19:7f:6a:59:ec:f4:c0:2f:6b:ee:b6:52:be:
                    8b:bd:cf:e3:2d:f4:52:06:40:f2:19:1b:9f:82:16:
                    cb:8e:ed:59:52:cc:82:72:73:84:63:92:d8:6f:45:
                    f1:3e:7f:2b:f1:b0:e6:28:28:4e:c4:c8:93:c9:1b:
                    f2:a8:cc:b3:81:fe:ca:a8:b4:7f:a7:91:70:3b:57:
                    44:ec:64:2a:d0:57:0a:7b:54:9e:a8:b6:85:64:b3:
                    c7:ea:d7:56:d2:86:46:83:9a:d7:f9:30:e8:8a:2d:
                    af:d2:f6:17:ed:e3:8d:e0:ae:5e:2e:7b:62:fc:68:
                    fc:2e:b8:62:c6:f6:7d:45:9a:b4:70:0c:53:99:5b:
                    60:00:6f:48:58:30:26:c9:75:5d:03:86:a6:69:fd:
                    21:a8:b1:22:43:27:05:85:c7:96:de:69:07:c7:6b:
                    d6:1b:01:01:ad:af:c2:1c:c7:2b:22:86:6e:9e:97:
                    36:ec:96:48:4d:57:ce:6c:49:70:0a:be:78:5e:f6:
                    36:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E7:FB:D4:FE:4D:BF:08:EB:48:F3:9B:66:C9:79:BD:00:42:A3:D8:D5
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/ac552bc5-be2c-3a4a-9100-3062fd47fa3b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.33.14.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a9:9d:b6:15:3e:9c:84:4e:04:7a:59:af:61:c6:ab:d5:4d:66:
         b9:d4:a8:04:2b:49:14:e6:c2:83:a7:73:2f:85:b0:00:8b:b1:
         75:d8:b1:ab:30:fe:33:60:e2:ae:9d:88:3c:84:b7:a2:fc:b7:
         68:7a:b1:15:a6:73:91:fc:38:98:f9:61:c1:dd:20:3c:77:93:
         77:0d:cd:0d:78:c5:4e:3a:38:db:85:63:a7:6f:1e:cf:d6:9f:
         7d:ed:e8:e6:18:56:35:24:55:47:2c:33:87:02:5a:fc:e7:97:
         41:a2:74:ac:f6:e4:23:04:36:e2:02:08:a3:5f:fd:54:ff:d6:
         2d:c2:d3:54:0f:46:83:85:57:ea:12:6b:81:03:c1:00:f6:9f:
         f8:0b:ed:52:51:7a:44:9b:e7:e8:32:d0:be:b1:d1:9f:81:02:
         5b:b8:e8:59:b0:ce:0f:07:db:62:ee:22:b1:b9:08:07:02:69:
         35:37:21:cd:2d:f9:12:6c:1b:dc:74:c1:13:18:96:9d:1a:05:
         58:c5:56:32:21:86:43:59:4d:01:76:6d:f6:c3:a8:3d:bd:ec:
         3b:77:01:d7:de:56:24:f5:07:6a:13:e1:9d:b5:a7:33:c0:09:
         17:17:ed:27:13:d2:b0:a6:be:87:25:43:02:a7:83:a0:5e:e6:
         92:1c:33:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 19 19:52:41 2026 by rpki-client