Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/e6ffe03d-1370-3c5c-9249-f53e0ab6d2f8.roa
File:                     e6ffe03d-1370-3c5c-9249-f53e0ab6d2f8.roa (raw, json)
Hash identifier:          bmeaIh6Q6latOZOfsDy2XysvflpqNXKl7tvmWP30D+A=
Subject key identifier:   6E:85:24:E1:E0:98:66:9F:67:F4:60:48:44:D0:2D:DE:60:B0:BD:89
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584F68281BE549DDF4981BF046E7
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/e6ffe03d-1370-3c5c-9249-f53e0ab6d2f8.roa
Signing time:             Tue 06 Oct 2026 01:00:13 +0000
ROA not before:           Tue 06 Oct 2026 01:00:13 +0000
ROA not after:            Mon 04 Jan 2027 02:00:13 +0000
asID:                     396659
IP address blocks:        192.33.14.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 10 Oct 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:68:28:1b:e5:49:dd:f4:98:1b:f0:46:e7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Oct  6 01:00:13 2026 GMT
            Not After : Jan  4 02:00:13 2027 GMT
        Subject: CN=23968e7e-6ada-45bf-b453-61e129ac6947
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:89:19:15:67:7a:72:46:12:d1:6f:a2:e4:af:70:
                    6a:cc:f9:22:ff:e4:06:d9:0b:96:f1:dd:67:91:6a:
                    78:11:f2:1b:ae:4c:7f:0f:80:17:83:dd:0f:d2:da:
                    f6:80:0c:51:eb:ae:82:79:18:01:43:9c:01:91:8e:
                    a5:31:7c:e2:8b:68:fc:b2:67:8a:55:c5:57:85:0c:
                    d8:e3:3d:b9:cb:56:b7:c7:36:df:28:5d:33:9c:9a:
                    45:f5:80:b0:88:9f:db:ec:9d:2f:f0:54:36:1f:3d:
                    18:2f:79:25:6e:3c:2d:9f:be:74:5d:a9:eb:0f:3e:
                    ae:d5:48:fc:2a:28:b7:a6:83:05:17:66:27:a5:47:
                    3a:d6:d8:c2:d4:15:12:58:cf:d3:2e:ed:e9:21:15:
                    7e:71:88:11:12:1f:75:27:fa:83:b2:87:11:36:8f:
                    2a:31:56:4a:ae:98:fe:84:c8:a6:e4:c4:9c:55:c2:
                    97:f9:76:53:1b:6e:12:17:e9:21:b7:f4:d8:0f:43:
                    42:e7:4e:90:d7:4a:c6:21:c7:3a:a0:fc:d1:96:41:
                    a1:9f:ff:3a:04:19:37:78:9b:6e:d4:11:06:3c:fa:
                    a0:bc:ed:c8:52:f6:c8:84:06:29:33:e3:5f:a8:d3:
                    a0:37:8a:4c:e3:4f:06:41:39:bd:7e:2e:0c:e3:50:
                    7c:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6E:85:24:E1:E0:98:66:9F:67:F4:60:48:44:D0:2D:DE:60:B0:BD:89
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/e6ffe03d-1370-3c5c-9249-f53e0ab6d2f8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.33.14.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         90:fc:63:d7:1c:14:c5:8e:dd:ce:1b:44:62:e1:b8:15:12:2d:
         cd:65:01:64:9e:c7:f8:cb:43:4a:90:36:e4:bc:6f:aa:3b:c5:
         7b:e9:42:cc:b1:d6:e8:97:d0:70:41:65:ea:e6:74:14:b3:13:
         e8:e1:b8:d6:47:ad:55:d5:51:3c:10:e7:91:1a:c9:4c:d9:c0:
         a9:fa:a8:36:08:28:5f:a9:f9:75:03:0d:70:97:f0:f2:9f:2a:
         3d:3b:99:d2:a3:bf:a5:d9:9b:73:89:37:f2:04:aa:36:c6:de:
         5b:8b:b2:19:ab:02:f2:e3:96:2b:bc:f7:87:55:33:b0:35:40:
         d9:67:eb:9e:c8:7a:6f:85:32:38:1f:28:7e:f9:b3:63:bd:e5:
         d4:73:7a:41:40:35:10:84:72:d9:12:19:12:ba:12:b2:41:db:
         13:3e:8e:fb:48:df:07:24:38:af:56:20:07:f4:a6:07:e1:fe:
         7e:a5:2d:0f:9d:b6:28:0b:d8:55:41:d1:12:17:4e:a8:53:ba:
         7a:40:42:e3:f0:d3:46:5c:a7:d6:62:fb:11:7b:3c:fd:1d:c0:
         ac:8b:56:6a:88:8b:75:b8:72:a4:1d:82:0c:ca:94:ce:87:ed:
         2f:b9:93:bc:f6:ca:19:5e:7f:f1:4e:18:1f:74:6e:5c:4c:f0:
         2e:0f:67:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 8 12:40:06 2026 by rpki-client