Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/402be707-d944-35d7-a337-d0c73bb60d92.roa
File:                     402be707-d944-35d7-a337-d0c73bb60d92.roa (raw, json)
Hash identifier:          duw0ie50eofvoD4WI1WyvnhOiGnrqTY/05PyJyp/vhg=
Subject key identifier:   E5:70:B4:C0:7E:B0:3F:83:09:8A:67:BB:4D:8F:A5:86:C2:1D:5D:87
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584F03A7863F6B95CCB5F6AC3C80
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/402be707-d944-35d7-a337-d0c73bb60d92.roa
Signing time:             Mon 31 Aug 2026 01:00:12 +0000
ROA not before:           Mon 31 Aug 2026 01:00:12 +0000
ROA not after:            Sun 29 Nov 2026 02:00:12 +0000
asID:                     396560
IP address blocks:        192.33.14.30/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 30 Sep 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:03:a7:86:3f:6b:95:cc:b5:f6:ac:3c:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Aug 31 01:00:12 2026 GMT
            Not After : Nov 29 02:00:12 2026 GMT
        Subject: CN=a1a29026-a060-48ef-b6ee-9a637a6efdcf
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:a3:2f:d8:a6:b1:a9:78:3b:f3:2f:1c:c0:ba:
                    72:08:c7:20:79:d1:d2:45:19:6d:09:bd:ce:39:6b:
                    e8:73:4e:2c:51:ad:80:63:02:10:27:02:9f:da:ce:
                    4b:ed:41:9a:df:05:97:40:03:02:43:05:5f:31:85:
                    a9:6d:30:58:dd:dd:28:17:4a:d1:cd:61:00:3e:c1:
                    a9:91:a9:30:8d:82:db:2a:71:fb:e7:0f:81:9d:05:
                    83:59:4a:2e:24:25:85:6c:80:78:4f:09:4e:09:2e:
                    9f:1a:91:77:d7:e9:8d:45:ce:c3:d0:2f:dd:86:f5:
                    71:e1:0f:27:c3:88:1b:df:ae:b4:d8:60:56:82:17:
                    db:2d:c5:34:5f:d0:ec:bc:b4:c9:69:aa:7e:f4:37:
                    03:35:32:9c:ec:a8:54:ef:3d:b8:dc:c4:7a:40:98:
                    4b:9f:3e:02:a9:bc:5a:50:16:2a:b3:a0:87:23:14:
                    9d:fd:8e:8f:b9:da:98:8a:60:65:39:04:f0:e2:16:
                    3d:64:d3:e4:51:41:a1:da:13:2d:05:92:f8:f1:32:
                    0b:2c:5c:49:86:14:fb:f5:bd:6a:e3:2a:0d:57:70:
                    81:a6:b6:00:24:fc:e1:a6:c4:cf:7a:0f:56:01:03:
                    ba:51:95:49:e2:19:8e:b8:be:ba:24:5f:1f:a3:20:
                    22:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E5:70:B4:C0:7E:B0:3F:83:09:8A:67:BB:4D:8F:A5:86:C2:1D:5D:87
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/402be707-d944-35d7-a337-d0c73bb60d92.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.33.14.30/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         b1:70:68:06:23:fb:9c:e2:45:f6:00:52:8e:8c:58:f4:5e:d3:
         ec:b5:6a:80:99:40:95:9f:f9:5e:e1:a4:c3:4c:8c:92:11:1e:
         2e:b2:13:e2:0e:90:19:62:80:fe:83:23:8b:9a:a9:5c:59:11:
         73:93:c4:ff:81:b2:07:28:9e:2c:94:da:84:7a:2b:24:e8:70:
         60:d5:3b:cb:90:3b:08:c8:0f:d4:49:72:79:de:2a:05:5a:af:
         43:85:b7:c8:7f:ae:94:97:8d:74:5c:92:b0:3f:55:24:8a:39:
         c2:62:49:2f:d5:5c:c5:14:d9:8f:ed:35:b7:d9:6e:b6:d1:19:
         39:98:ff:49:f2:84:43:6d:09:a5:3b:bd:ee:b7:e3:89:97:8e:
         31:ce:f1:61:56:94:ee:db:71:a1:bd:47:e0:1f:3b:21:35:28:
         cc:ce:7b:3e:19:5c:8a:df:a6:5f:fd:5f:bd:12:17:5d:b9:58:
         7c:45:64:1a:3f:1f:d7:49:0e:d9:ec:b8:93:42:14:55:b1:ee:
         78:15:6c:ec:dd:f3:29:4e:8b:79:c3:14:e8:6a:9b:00:da:56:
         9b:e8:c2:8a:18:b7:06:81:c7:89:21:72:8e:33:be:c3:4b:e6:
         49:24:e9:15:53:1b:8c:c1:44:06:24:77:0b:84:d8:4a:bc:9a:
         d9:f3:37:e0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 28 19:47:11 2026 by rpki-client