Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/13d8ad30-d0ef-3a91-8d42-ec5f1b3ceb47.roa
File:                     13d8ad30-d0ef-3a91-8d42-ec5f1b3ceb47.roa (raw, json)
Hash identifier:          iCxwO4/lJoNqkc01zEmDxp3iyXibkvyLU4oe//XMqnc=
Subject key identifier:   F1:C1:1A:49:E1:84:2A:92:20:4C:A8:12:17:AE:D3:B7:41:72:65:27
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584E2313850B8DDFC2F700B408C0
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/13d8ad30-d0ef-3a91-8d42-ec5f1b3ceb47.roa
Signing time:             Thu 11 Jun 2026 14:21:08 +0000
ROA not before:           Thu 11 Jun 2026 14:21:08 +0000
ROA not after:            Wed 09 Sep 2026 14:21:08 +0000
asID:                     396584
IP address blocks:        192.33.14.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 14 Jun 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:23:13:85:0b:8d:df:c2:f7:00:b4:08:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Jun 11 14:21:08 2026 GMT
            Not After : Sep  9 14:21:08 2026 GMT
        Subject: CN=b56f5a91-e857-4e1a-b1e7-dfff3f2199f0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8d:9a:82:50:fd:d0:6b:a8:fd:c6:b9:ec:03:9f:
                    63:d4:16:9e:e8:4f:12:17:57:58:f8:47:09:a5:14:
                    52:6e:36:c9:42:5c:2e:36:de:4c:53:8b:cc:df:63:
                    ee:5e:3a:c3:41:55:ec:14:de:9e:ce:8f:49:0c:83:
                    c2:95:99:61:de:90:7d:1a:28:6b:ec:c5:fd:5b:62:
                    13:ff:60:79:92:15:66:a4:80:2a:fe:18:0f:5e:32:
                    53:88:08:77:79:1c:1b:2e:ed:9a:32:49:f0:fc:79:
                    45:dd:3f:54:f0:7e:13:a3:fe:67:97:2a:16:e6:39:
                    90:ed:e8:5c:25:5b:61:ed:e6:d0:21:41:32:64:a8:
                    7c:28:f9:36:f5:4d:0f:24:ef:e9:64:79:dd:cc:5b:
                    6d:c8:11:fc:0d:2a:92:75:a2:69:8f:a8:31:75:d8:
                    aa:e2:a2:e3:32:73:84:0d:27:9d:1d:d2:15:23:20:
                    5f:a3:dd:29:f0:1a:cf:af:78:ce:6e:54:10:99:eb:
                    f8:b6:d6:e4:17:b4:40:aa:a9:c6:07:0a:25:ad:7a:
                    06:7c:8c:bc:64:96:f5:eb:26:e2:4a:35:4d:57:ae:
                    9f:8f:dd:f6:7f:57:21:ce:d6:b1:b9:bd:71:ed:45:
                    0c:3b:1a:d9:91:b2:fb:b5:c0:52:87:b3:b5:c9:c6:
                    cb:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F1:C1:1A:49:E1:84:2A:92:20:4C:A8:12:17:AE:D3:B7:41:72:65:27
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/13d8ad30-d0ef-3a91-8d42-ec5f1b3ceb47.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.33.14.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4b:f8:cd:e1:6d:42:36:da:8d:2d:2b:57:57:25:f4:1a:24:ca:
         15:81:8e:c2:f1:8b:21:05:14:54:6a:b4:f7:ba:94:0c:ef:e8:
         30:86:2e:f1:a0:9d:20:19:78:6d:c4:2a:d1:a3:30:00:70:c8:
         9c:37:6d:3d:d9:d4:2c:6a:08:62:b2:c0:60:6d:3f:c8:32:e9:
         6b:10:c2:4d:c8:d6:b2:e0:c3:6c:39:70:a6:3c:d1:81:e9:4e:
         0e:e4:7b:c9:74:bf:f9:31:be:9a:00:1d:a2:35:5b:d0:62:49:
         b7:21:ff:41:2c:04:56:8d:e3:05:eb:b5:5d:0f:48:7e:93:93:
         43:86:6a:00:4b:ce:11:9e:5f:d2:6f:00:32:d0:a1:a2:8d:27:
         37:ea:99:66:c2:23:e4:b2:54:22:d0:42:ea:d3:dd:75:ac:58:
         32:0f:01:dc:aa:c0:34:f2:af:62:d5:4f:d7:be:4a:f9:f0:43:
         2d:ec:50:06:c9:8e:67:1d:c5:59:ac:35:85:df:80:50:5e:ac:
         a0:d6:6a:d8:58:dd:84:af:d6:dd:c6:98:12:c7:1b:6f:72:e4:
         0d:6c:aa:99:ef:a8:b6:b1:f0:e9:93:1f:8b:5e:d1:24:e7:45:
         98:d5:b2:e2:16:0e:a4:88:97:d1:20:a1:3c:c7:73:6a:40:cf:
         87:18:3f:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 16:11:10 2026 by rpki-client