Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/2f150ca4-82a3-34be-b47a-583f8e857b53.roa
File:                     2f150ca4-82a3-34be-b47a-583f8e857b53.roa (raw, json)
Hash identifier:          U7YD3HCHbtces5+Pqja3VGE3K45tV8NJ+EmRi6KEcPM=
Subject key identifier:   39:E0:9B:C2:C4:03:1B:3C:FC:03:EA:1D:75:3F:55:5A:A7:6C:A2:8D
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584F03A845ADEA717F3B10A57B80
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/2f150ca4-82a3-34be-b47a-583f8e857b53.roa
Signing time:             Mon 31 Aug 2026 01:00:12 +0000
ROA not before:           Mon 31 Aug 2026 01:00:12 +0000
ROA not after:            Sun 29 Nov 2026 02:00:12 +0000
asID:                     36622
IP address blocks:        192.33.14.30/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 22 Sep 2026 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:03:a8:45:ad:ea:71:7f:3b:10:a5:7b:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Aug 31 01:00:12 2026 GMT
            Not After : Nov 29 02:00:12 2026 GMT
        Subject: CN=21bc7c3e-cb9a-4f91-82eb-97bb45aa7701
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:67:b1:6d:be:b5:e6:6a:90:67:df:ce:a9:91:
                    64:c7:b5:cf:0f:77:ba:5d:de:b5:6f:a1:ed:f7:14:
                    41:2c:15:e1:1c:5b:79:aa:74:96:9a:db:db:e3:c1:
                    f4:e6:22:83:32:13:6b:fa:75:74:cd:f0:ec:a7:ae:
                    36:3e:39:ef:05:81:0f:e2:c5:a4:2a:d7:11:b5:7c:
                    b3:86:f9:c8:57:ab:28:bd:ce:42:22:b7:e4:63:d1:
                    61:2b:b0:10:d7:46:3b:f2:1e:2f:cc:98:f0:36:06:
                    58:c8:4a:b2:12:2a:fe:32:37:74:22:35:0a:f4:80:
                    23:ac:71:0b:84:9e:25:14:7b:c5:dc:c3:97:b0:0c:
                    11:14:bc:70:bc:38:7b:8d:8c:7b:00:8a:49:58:ad:
                    d8:00:52:8b:b3:e9:6e:f4:c1:ce:b8:f4:b9:d2:85:
                    d7:ce:fe:52:76:93:74:8f:88:89:76:57:7c:36:95:
                    8a:9e:2a:9b:a8:29:a3:5b:0c:73:18:14:1e:cc:a6:
                    7c:c8:83:2e:37:c0:e0:ed:86:bf:a9:13:a7:de:d2:
                    2a:d6:35:1b:d2:38:13:5f:a6:e3:f6:82:e2:ad:a6:
                    c4:88:9c:5e:ef:f8:50:91:0b:3d:a1:51:57:fe:3c:
                    9b:24:40:26:b2:b7:bf:7b:0f:56:4d:33:4e:16:6f:
                    cf:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                39:E0:9B:C2:C4:03:1B:3C:FC:03:EA:1D:75:3F:55:5A:A7:6C:A2:8D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/2f150ca4-82a3-34be-b47a-583f8e857b53.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.33.14.30/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         74:fe:cb:58:94:71:d6:2e:c5:14:88:a2:9e:4d:7c:3c:5c:3a:
         5d:c3:89:1d:e9:6e:2e:f8:ee:86:d8:15:f0:13:e2:94:5b:06:
         44:6b:40:d1:f6:e3:80:93:28:c0:f8:88:c4:c0:b5:02:ce:f8:
         75:5b:0a:5d:b7:23:b1:98:52:d7:cb:f7:84:90:c8:15:90:39:
         35:0c:7f:80:da:cb:c4:ec:16:38:ab:26:fb:5a:cb:16:36:b7:
         02:75:63:c0:9b:50:76:40:5a:2d:87:5f:4e:db:77:08:c2:4b:
         fe:39:17:4e:9a:6d:c8:fe:cf:ac:c2:b2:6a:c7:64:43:80:90:
         a9:f5:2f:2a:d5:44:b4:66:42:68:42:02:13:0e:18:43:17:01:
         7b:6f:4c:e5:a4:c3:f7:4c:c2:30:85:41:df:df:9f:c7:0f:f7:
         af:12:62:82:e0:1c:2e:92:b7:c0:2e:59:a3:6f:34:78:88:34:
         96:91:d1:d3:79:7a:c2:ec:6a:e4:a0:4d:6c:85:fc:93:e3:26:
         66:a0:a2:0b:7c:82:5b:43:d2:64:3e:82:a5:fe:20:c6:9f:49:
         e6:90:ac:6e:35:2c:09:a8:b1:1b:aa:ed:55:fa:c6:65:5a:d5:
         f1:94:28:9d:56:c1:9e:c1:1d:ca:1c:fb:25:ec:38:b7:53:03:
         6c:44:7c:e1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 21 10:48:24 2026 by rpki-client