Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/2bfb8c9b-3ef8-3a9f-b034-de633815b39a.roa
File:                     2bfb8c9b-3ef8-3a9f-b034-de633815b39a.roa (raw, json)
Hash identifier:          yINTe1RxqWdeGrvKqydhaMLIAlopIFRl8wJJkfuTjqU=
Subject key identifier:   42:C8:63:6B:C4:48:A8:ED:BA:33:14:82:1D:8D:36:11:8F:C6:39:5E
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584E231384DD79289CEDFB3FAAA0
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/2bfb8c9b-3ef8-3a9f-b034-de633815b39a.roa
Signing time:             Thu 11 Jun 2026 14:21:08 +0000
ROA not before:           Thu 11 Jun 2026 14:21:08 +0000
ROA not after:            Wed 09 Sep 2026 14:21:08 +0000
asID:                     396602
IP address blocks:        192.33.14.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 14 Jun 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:23:13:84:dd:79:28:9c:ed:fb:3f:aa:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Jun 11 14:21:08 2026 GMT
            Not After : Sep  9 14:21:08 2026 GMT
        Subject: CN=22a8cfff-62e4-43fd-a4e4-1f9acdb98ef1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:96:42:d3:59:81:ac:86:54:d4:4d:56:7e:79:
                    9c:cd:9c:5d:ab:62:d8:d1:12:fd:64:57:78:26:7a:
                    ca:d0:15:5f:4c:1f:e3:ad:25:98:b9:be:d6:b0:f3:
                    3d:b2:de:e7:22:92:7d:d0:12:58:e2:d9:ca:4e:4b:
                    01:72:65:aa:d7:85:19:7c:a9:ed:ff:de:57:cf:48:
                    11:72:d2:11:04:7b:f6:3e:2b:d0:68:5d:3c:2f:34:
                    31:3f:f1:f1:7d:5a:69:23:7c:75:2a:b3:2c:c9:af:
                    77:42:22:77:7b:a6:cb:8e:ec:0a:3e:d4:66:e4:d0:
                    40:1f:a8:09:e0:29:c6:e5:5b:b9:5a:43:48:68:d5:
                    09:c1:d6:80:26:65:66:3d:a7:83:c9:0c:fa:a3:09:
                    43:df:a9:45:84:ee:84:7c:d8:57:5a:3b:30:5a:0d:
                    7d:8c:f0:93:ed:97:c0:97:fe:cb:65:9a:a8:f9:f8:
                    16:67:8c:3f:44:a0:b1:70:fd:f0:48:8b:d0:66:22:
                    ad:18:de:2a:34:bd:8b:3c:60:57:7a:a1:65:51:bb:
                    89:20:f2:f2:14:e6:61:12:8b:47:6e:39:fe:95:53:
                    51:1b:f7:e5:27:de:b4:02:ed:a3:33:43:ce:f4:a2:
                    2f:a8:71:cf:7b:27:f3:f4:21:75:ff:31:83:e8:90:
                    a2:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                42:C8:63:6B:C4:48:A8:ED:BA:33:14:82:1D:8D:36:11:8F:C6:39:5E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/2bfb8c9b-3ef8-3a9f-b034-de633815b39a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.33.14.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         b6:45:33:df:df:74:d4:10:a9:a3:5b:09:2a:fd:84:2a:46:08:
         46:e6:7f:c9:c4:09:39:b9:59:d0:98:77:f2:eb:c6:a1:01:f5:
         8a:0a:2a:af:20:96:05:67:31:79:16:be:8d:31:12:42:e3:df:
         8f:3e:99:75:d5:29:cc:7b:ab:40:f8:ce:50:b7:a9:6f:97:3a:
         22:7d:00:95:f6:96:99:64:38:66:e5:d6:73:a0:c0:92:61:5b:
         b4:91:31:b4:a9:d6:5e:ca:66:cb:25:74:94:31:95:0f:59:9e:
         a4:35:bb:ac:9d:41:05:1e:fa:a3:12:03:31:9e:f3:df:10:72:
         d1:77:b4:36:cd:46:2f:77:e9:83:34:f3:a9:dd:73:a0:79:36:
         6a:ba:0b:42:e3:d1:44:f0:d0:48:ea:1b:6f:b5:6f:61:41:7b:
         a6:14:5b:63:b9:b3:d9:1b:64:de:6d:0b:4f:41:d3:4a:df:a0:
         6c:d0:a7:28:d7:f3:c1:45:32:50:09:19:af:81:4a:c4:7f:12:
         3f:b1:b1:5b:8e:96:43:04:55:ba:61:84:b3:fd:3d:e6:cf:32:
         b8:21:a6:f1:ac:10:18:ff:bd:62:34:f8:e8:21:28:c2:c1:cf:
         9a:f5:72:56:cc:4a:bb:36:21:e5:43:eb:47:1a:42:d1:bb:89:
         83:6f:d0:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 16:11:08 2026 by rpki-client