Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/e0f16e71-83fc-3d93-9985-074e6b6df9e7.roa
File:                     e0f16e71-83fc-3d93-9985-074e6b6df9e7.roa (raw, json)
Hash identifier:          bD+aB6d3A9W0hIWqFPTcmxQqy0zMdaaJ5slO7TA8+Ok=
Subject key identifier:   88:70:74:A9:9E:31:26:2C:22:9F:22:92:CC:92:A3:21:00:F3:A5:77
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584F68281570FF67DB5B9CE17200
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/e0f16e71-83fc-3d93-9985-074e6b6df9e7.roa
Signing time:             Tue 06 Oct 2026 01:00:13 +0000
ROA not before:           Tue 06 Oct 2026 01:00:13 +0000
ROA not after:            Mon 04 Jan 2027 02:00:13 +0000
asID:                     396646
IP address blocks:        192.33.14.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 10 Oct 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:68:28:15:70:ff:67:db:5b:9c:e1:72:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Oct  6 01:00:13 2026 GMT
            Not After : Jan  4 02:00:13 2027 GMT
        Subject: CN=31d8f98d-1e03-4b1d-8318-6562c733c2d0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:ae:f7:be:7b:af:47:15:ac:f5:99:a5:60:5c:
                    52:6b:b3:ac:6b:50:8f:c4:fc:04:e9:b9:12:47:cb:
                    06:ff:e3:0e:06:8f:97:d9:00:07:a4:61:20:3c:02:
                    d6:19:22:97:0c:f7:3c:60:6f:ac:dc:9b:31:e2:94:
                    59:98:d6:fa:35:fb:07:f7:ed:6d:37:eb:d5:90:ce:
                    e0:36:0f:6e:6c:41:1d:a5:a9:6f:02:74:14:6f:76:
                    60:34:f0:01:c9:ea:f6:da:a3:a5:86:3a:a9:3f:88:
                    07:bf:f6:bf:e1:35:b1:78:66:fe:fd:c0:b9:c3:ce:
                    b1:21:d7:68:20:e4:26:50:21:ab:26:17:b8:de:14:
                    a2:9a:84:26:62:15:a5:64:8b:34:1a:84:c9:69:f9:
                    01:df:7c:ae:98:4f:f2:19:6c:e0:90:ea:56:f1:27:
                    2f:a8:02:b0:8a:ce:32:18:e8:d8:e1:2a:ab:86:3a:
                    7c:98:48:3b:05:f4:6a:63:68:94:ae:38:58:06:21:
                    5c:5a:16:56:71:3e:1d:12:18:63:b5:d6:08:3d:30:
                    bf:a7:f9:3a:49:70:4b:0a:74:cc:28:df:d5:b9:25:
                    6a:21:60:91:a0:15:9d:47:01:80:68:3c:4f:09:ac:
                    81:46:c6:b0:bd:fa:ad:db:1c:0c:25:35:63:5b:83:
                    1d:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                88:70:74:A9:9E:31:26:2C:22:9F:22:92:CC:92:A3:21:00:F3:A5:77
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/e0f16e71-83fc-3d93-9985-074e6b6df9e7.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.33.14.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1c:39:b5:e1:3e:99:06:32:91:8b:ad:ab:2b:84:5d:81:f0:9d:
         e8:c4:14:52:7d:34:95:b1:cf:3e:30:0e:38:3e:40:29:dc:be:
         cd:44:ed:18:af:e0:53:67:83:c6:6c:cb:a6:ee:8c:0f:e0:29:
         a1:26:a6:a1:ea:45:d2:96:19:9b:65:3d:cb:cc:dc:58:24:ce:
         c6:27:77:06:2e:1e:86:fd:fd:f0:2e:51:56:0a:57:b0:f8:d6:
         b7:81:f8:56:d7:27:a0:1f:48:fe:c7:a3:9c:a8:5b:8f:54:06:
         ea:b6:20:b8:81:25:9d:35:2f:43:c0:79:04:2e:19:91:a5:57:
         fb:5b:39:0e:53:3f:27:61:cc:4b:84:d8:42:f1:fd:a6:2f:d8:
         dc:0c:52:f9:6f:ee:5d:1b:45:f8:fe:16:b7:38:a2:24:66:91:
         a3:51:1b:5c:bd:80:10:b6:bc:3f:13:de:39:81:e9:50:db:3c:
         85:38:e2:c3:af:1b:97:8d:8a:28:2c:dc:39:a5:4c:8b:b9:fd:
         bf:84:7a:02:1f:58:83:2b:db:66:c9:ec:84:90:a7:53:5e:8d:
         8e:d8:0e:b1:0b:94:bc:3a:a8:1b:b7:4e:42:4f:52:96:24:64:
         69:e5:37:ed:d4:da:94:3e:86:50:98:83:be:da:40:42:9b:c6:
         8e:18:71:b5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 7 22:53:48 2026 by rpki-client