Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/22ba5f33-0c31-3f08-a606-d9f640e6bcc3.roa
File:                     22ba5f33-0c31-3f08-a606-d9f640e6bcc3.roa (raw, json)
Hash identifier:          zAYNxpgC8acegiOfv8UdgWxeK4Nxu6zz5TGIsObSYdo=
Subject key identifier:   6E:C8:3A:A5:BB:7B:DC:62:19:B6:CC:44:F7:46:35:84:51:7A:4F:F5
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584D81286D9504C5E290B7579340
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/22ba5f33-0c31-3f08-a606-d9f640e6bcc3.roa
Signing time:             Tue 14 Apr 2026 14:22:19 +0000
ROA not before:           Tue 14 Apr 2026 14:22:19 +0000
ROA not after:            Mon 13 Jul 2026 14:22:19 +0000
asID:                     36616
IP address blocks:        192.33.14.30/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 19 Apr 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:81:28:6d:95:04:c5:e2:90:b7:57:93:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Apr 14 14:22:19 2026 GMT
            Not After : Jul 13 14:22:19 2026 GMT
        Subject: CN=2cde1b15-6453-4154-849a-d08fef08bbb2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8a:9d:b2:c8:ad:ba:c8:66:be:8e:cc:3f:bf:f5:
                    d5:48:4e:39:f6:22:46:a7:a5:35:10:9d:58:6d:e6:
                    fd:3c:d1:62:ef:fd:44:3a:c7:aa:31:bf:f5:b1:57:
                    9f:51:93:cb:ea:c1:2b:7e:1f:a7:a3:fc:5a:53:07:
                    2b:87:4f:c5:2f:ab:5a:71:21:10:69:91:0a:53:d7:
                    06:79:e4:d4:d1:ab:75:74:8f:0c:4e:f1:e5:82:44:
                    5d:7e:5f:4d:d1:f4:e2:c6:15:1f:2f:9e:e1:ae:61:
                    3f:f4:a8:f4:a8:71:a1:0d:bc:5e:10:68:e2:86:cb:
                    0a:7e:43:ad:95:2c:3d:34:ca:c5:2d:b9:e4:45:a3:
                    14:b7:2f:db:b3:e3:d3:9c:68:72:06:e0:69:35:75:
                    aa:d0:f1:c6:67:07:1b:9e:98:b5:46:27:b1:58:c8:
                    f5:1c:3c:92:e9:ac:50:ed:99:4f:4f:e8:a2:e7:f7:
                    1b:da:ad:69:f4:4f:6b:01:20:32:8a:b0:5c:4d:66:
                    31:ce:ca:9c:3c:9a:db:a5:c8:26:2b:b1:23:78:7f:
                    c3:81:db:5c:15:78:9a:c0:b2:f5:c0:1e:a2:a7:1e:
                    dd:e6:d7:7c:7c:bd:5f:36:4f:96:d6:68:3e:19:81:
                    44:37:61:f8:ee:32:3e:9b:0a:ac:02:32:bd:9a:9b:
                    17:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6E:C8:3A:A5:BB:7B:DC:62:19:B6:CC:44:F7:46:35:84:51:7A:4F:F5
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/22ba5f33-0c31-3f08-a606-d9f640e6bcc3.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.33.14.30/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a0:4f:f6:82:7b:76:8e:ed:4a:cd:1b:e0:48:1f:8f:3a:84:41:
         10:10:8d:48:13:4f:50:f8:b2:8d:ca:e9:5e:79:61:7d:da:40:
         cd:74:7f:98:7f:a5:d2:24:89:96:65:6a:bc:4b:18:24:01:a7:
         a7:91:a8:c7:69:14:bc:d6:6e:2b:86:ad:60:b6:6f:c4:8c:4d:
         0d:0c:46:44:2d:3d:91:5b:dc:68:f0:af:24:80:19:9b:0e:ac:
         74:d6:2c:ef:07:35:39:82:b4:db:f1:bd:32:9e:a6:3d:25:5d:
         03:13:1a:16:d5:a8:91:f4:b0:13:03:a2:86:03:b0:bb:2d:24:
         6b:b5:a6:2c:53:d1:98:43:45:59:06:64:99:e9:97:48:6a:92:
         22:ea:69:72:b7:14:47:b2:d8:f9:6f:99:63:92:e1:42:c1:96:
         01:f7:50:96:d4:21:8b:b8:e0:a7:3a:93:92:91:a7:79:82:ae:
         bc:30:ce:38:b0:2a:58:bb:7f:84:17:c2:62:c5:7c:7b:83:ce:
         64:31:31:ed:ce:15:80:98:ce:e7:03:0e:28:01:62:04:bb:67:
         73:13:bc:f3:ee:ef:28:f5:41:0d:d8:c2:28:29:78:b3:81:77:
         9f:b8:db:4f:3a:b2:ea:ef:43:47:12:ee:48:5f:a1:15:7b:33:
         03:87:66:5d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 11:59:55 2026 by rpki-client