Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/38ee65cf-b2f2-3f0a-b4b0-f2ad15d95fdf.roa
File:                     38ee65cf-b2f2-3f0a-b4b0-f2ad15d95fdf.roa (raw, json)
Hash identifier:          qqW1wJZSSKm5LfoCDJ3cfm8UQSVsyTEcu/5cBsu1l5o=
Subject key identifier:   44:3F:8E:ED:40:3B:57:E4:74:AE:1E:5D:E9:A5:C5:18:A3:AC:4F:C7
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584F03A772DE160EAD121DD20220
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/38ee65cf-b2f2-3f0a-b4b0-f2ad15d95fdf.roa
Signing time:             Mon 31 Aug 2026 01:00:12 +0000
ROA not before:           Mon 31 Aug 2026 01:00:12 +0000
ROA not after:            Sun 29 Nov 2026 02:00:12 +0000
asID:                     396584
IP address blocks:        192.33.14.30/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 28 Sep 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:03:a7:72:de:16:0e:ad:12:1d:d2:02:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Aug 31 01:00:12 2026 GMT
            Not After : Nov 29 02:00:12 2026 GMT
        Subject: CN=0a096e2f-3121-4801-b129-dff52f7352f2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:f6:6a:39:b9:49:5f:be:11:79:a1:45:3c:30:
                    50:10:98:98:ef:23:21:55:cb:f6:7a:23:39:b8:01:
                    46:c0:c0:76:ce:ae:d4:2d:0e:0e:a9:08:a8:47:f6:
                    03:ae:27:7f:d8:c2:06:d0:4b:46:93:a6:ac:6d:35:
                    a0:ac:b0:5c:27:1d:ec:7c:44:85:70:1f:67:aa:56:
                    c7:fb:62:bc:cd:4f:48:e3:a4:7a:d7:7b:35:35:eb:
                    23:51:ce:68:20:48:07:e2:b8:3a:f7:3c:66:90:8c:
                    fa:01:7a:af:08:89:dc:75:f4:a5:90:e8:70:26:74:
                    6f:92:9c:58:04:9d:95:77:c3:1b:fa:33:fa:1d:60:
                    59:12:ee:79:d8:0e:67:e8:a2:01:7e:54:bd:51:d7:
                    07:25:ad:20:3f:45:ba:7f:c0:3d:c5:a4:45:8a:6b:
                    43:77:b8:66:c9:12:fa:eb:0e:9e:ae:0d:0d:3d:7f:
                    df:5c:70:1e:b6:38:5a:2c:32:92:68:64:18:35:4d:
                    b6:e4:5c:a8:7c:1b:f6:60:0b:98:f2:28:14:1f:94:
                    97:2e:e3:18:03:35:5f:ac:04:18:d7:b8:a7:9a:15:
                    a7:d2:17:e2:8b:c8:6b:50:14:15:77:e0:95:5d:56:
                    03:90:dc:fc:36:cd:98:f4:73:d4:58:db:b3:90:5c:
                    e2:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                44:3F:8E:ED:40:3B:57:E4:74:AE:1E:5D:E9:A5:C5:18:A3:AC:4F:C7
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/38ee65cf-b2f2-3f0a-b4b0-f2ad15d95fdf.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.33.14.30/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a7:70:98:49:a6:83:4c:30:bb:04:c2:ad:55:b1:8c:cc:46:1a:
         3c:8d:ea:7a:bb:7e:51:36:3e:65:74:70:a8:33:f3:b0:87:3d:
         66:8a:0f:66:80:6d:0a:52:c7:ea:0f:34:12:42:e1:5a:34:64:
         bd:85:6a:7e:7e:18:95:d1:6a:73:86:a1:ab:a7:e8:43:85:1f:
         c5:20:3e:e5:63:b2:50:3e:a6:53:01:ce:cf:ca:b5:ef:11:4e:
         0c:9e:ef:97:a3:d9:e5:bd:7f:32:f6:c4:ee:04:a4:92:3d:a7:
         0e:33:a1:ec:31:36:e5:44:42:7b:d8:54:d3:66:f9:24:78:e2:
         7b:6f:02:72:f7:a0:3c:72:d5:a4:e7:c2:64:ed:72:ff:6d:ff:
         0a:81:54:9b:34:53:de:95:e8:f9:f2:66:c1:18:81:3c:e2:a8:
         70:7f:8c:3e:20:f6:8a:e0:d6:91:66:87:f7:e4:ad:51:ae:bd:
         fe:5f:b6:65:8a:00:e8:af:5a:f8:f7:46:87:77:b1:11:1e:b2:
         2f:c4:7f:22:2a:d4:b3:46:64:be:63:d8:10:22:40:d1:c2:5d:
         7e:16:5c:a8:e4:1d:2a:fc:0a:b0:6b:16:f5:f2:7b:0c:63:20:
         14:6f:44:3b:e3:bf:c9:31:d3:c4:48:38:ee:cc:f9:9a:36:a5:
         cc:98:9b:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 26 07:32:00 2026 by rpki-client