Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/b40fc1f8-fc31-3537-bc19-363d35e7d124.roa
File:                     b40fc1f8-fc31-3537-bc19-363d35e7d124.roa (raw, json)
Hash identifier:          /08/hOmMAnmsEsjyRaaXgmbXuKjCDFFjaLz9pJYA2qY=
Subject key identifier:   EF:B6:F0:EB:C3:F0:66:D7:85:77:57:6B:34:34:3C:E5:1F:A4:B7:DA
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584F68281C7AEEA1A7BF0534EE80
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/b40fc1f8-fc31-3537-bc19-363d35e7d124.roa
Signing time:             Tue 06 Oct 2026 01:00:13 +0000
ROA not before:           Tue 06 Oct 2026 01:00:13 +0000
ROA not after:            Mon 04 Jan 2027 02:00:13 +0000
asID:                     397204
IP address blocks:        192.33.14.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 10 Oct 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:68:28:1c:7a:ee:a1:a7:bf:05:34:ee:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Oct  6 01:00:13 2026 GMT
            Not After : Jan  4 02:00:13 2027 GMT
        Subject: CN=c1d5e2ad-20db-49e8-8367-0ce8d07f924e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:aa:2a:ab:bc:0c:73:6f:df:cc:a3:2c:1b:23:
                    f8:de:9c:ee:b3:e3:37:f0:3a:85:fa:d9:68:43:ce:
                    f6:4b:a8:a3:d5:c2:ed:cf:1c:a8:16:29:96:79:9d:
                    da:6d:ce:1a:d5:a4:c3:e7:22:bf:8c:e7:ec:be:90:
                    14:31:26:29:74:a7:06:23:3c:82:dc:e5:9f:60:ca:
                    82:a5:7f:4d:78:4f:3c:fc:d6:19:8a:70:ec:8c:97:
                    36:66:a8:bc:ad:b6:c3:dd:f2:d2:df:2f:06:34:45:
                    d2:db:54:e4:42:ba:fd:b4:49:0c:53:e5:09:1a:02:
                    c1:25:30:4c:ef:62:5b:9c:dd:51:c1:0c:f4:27:75:
                    1e:88:14:ab:c6:65:5d:60:8d:45:ef:7e:4c:db:9f:
                    f3:b9:73:b6:0c:ba:34:93:f7:23:79:aa:da:de:97:
                    ba:8f:0d:21:ef:e3:56:6b:80:32:8a:ec:98:5b:41:
                    e7:38:44:81:ed:84:a4:d8:69:c0:6d:5c:c4:97:37:
                    ba:2a:f1:9c:7e:5e:c7:8d:92:b5:7a:ce:1f:5f:f0:
                    45:45:17:51:b8:7c:d3:10:38:91:c6:e5:5a:1f:4d:
                    14:0e:55:40:a9:b1:0a:1e:85:59:0c:18:94:8a:f4:
                    fc:14:b1:42:40:b5:98:32:64:bb:25:f8:1f:5c:71:
                    f6:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EF:B6:F0:EB:C3:F0:66:D7:85:77:57:6B:34:34:3C:E5:1F:A4:B7:DA
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/b40fc1f8-fc31-3537-bc19-363d35e7d124.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.33.14.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3f:eb:5c:3a:8d:5a:fb:02:09:61:81:e1:52:3a:1f:42:6e:22:
         3a:7a:1b:9d:54:51:b4:96:e8:4d:76:42:d4:e9:54:6f:d0:97:
         11:3e:19:3f:21:52:33:28:73:3f:d5:6a:ba:04:57:e5:2d:36:
         99:f0:ae:e2:33:57:83:f8:1f:c5:b4:7b:e6:9e:3f:39:62:75:
         93:70:55:86:26:f6:ec:01:36:72:32:5b:60:58:9b:11:5f:93:
         df:29:52:6c:73:60:84:56:ae:12:df:ca:9d:10:0f:21:47:88:
         55:3f:d4:39:e7:13:85:e9:85:0b:60:f8:34:39:c4:19:19:5a:
         e2:fd:bb:f0:a9:a9:d4:4b:99:9d:ee:b9:19:4d:a7:29:15:a2:
         47:6c:3e:33:de:dc:71:23:68:d4:74:a3:5a:08:ab:cd:ff:23:
         39:1f:e7:80:da:8a:3e:8c:05:57:36:4a:e4:ea:79:87:71:00:
         86:99:24:d8:5f:7b:a1:7e:7b:90:af:c7:12:97:48:75:18:2d:
         2f:a2:9b:51:a2:0f:93:78:93:d5:62:7d:64:54:60:8f:99:4a:
         14:89:9c:27:6f:6e:bb:82:6f:5e:1b:29:e0:fd:96:96:97:98:
         93:33:f5:75:ea:4a:fc:75:55:4d:c1:c2:4e:cc:de:5d:d5:64:
         1e:3c:4f:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 8 03:26:18 2026 by rpki-client