Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/565c0eb9-1bf6-3215-87d0-b40d398aeb32.roa
File:                     565c0eb9-1bf6-3215-87d0-b40d398aeb32.roa (raw, json)
Hash identifier:          tgsSHJba+UGllTCVILPT36+o2z0ZH8EFsMWF+ONeL6o=
Subject key identifier:   64:F7:E0:41:F0:30:8A:DF:62:6E:35:1A:F6:80:30:30:52:AD:64:FB
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584F03A84B0CA37DADDF51603178
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/565c0eb9-1bf6-3215-87d0-b40d398aeb32.roa
Signing time:             Mon 31 Aug 2026 01:00:12 +0000
ROA not before:           Mon 31 Aug 2026 01:00:12 +0000
ROA not after:            Sun 29 Nov 2026 02:00:12 +0000
asID:                     396571
IP address blocks:        192.33.14.30/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 08 Oct 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:03:a8:4b:0c:a3:7d:ad:df:51:60:31:78
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Aug 31 01:00:12 2026 GMT
            Not After : Nov 29 02:00:12 2026 GMT
        Subject: CN=b15f798b-4db3-419c-8b27-83cd2e9c4520
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:79:a2:77:ab:c3:f3:ea:c5:45:cd:30:7c:a8:
                    37:86:a4:fb:40:fc:35:61:8b:a4:7c:90:60:a5:ab:
                    7f:d3:f8:fe:1e:69:7f:85:6b:3d:66:d0:ad:d7:52:
                    9e:94:4a:1a:6d:9d:e1:bd:da:94:80:15:03:4d:f0:
                    2b:7c:e7:ee:ea:1f:80:df:b3:fd:0b:94:01:10:43:
                    56:d9:5e:ca:28:20:27:e1:6b:06:ae:fa:02:e4:5e:
                    96:82:66:d3:df:2f:8c:3c:a1:fb:90:57:0e:e2:3b:
                    e1:02:44:7c:18:57:88:64:b0:ad:22:b8:d6:23:6b:
                    03:f9:bd:55:c4:0c:ff:bb:fb:f9:cd:cb:4f:fb:ae:
                    d0:13:99:e5:86:95:5d:91:a1:87:76:d7:03:dc:a3:
                    c2:5a:0b:a2:79:82:ae:4e:f9:d8:5c:f1:4b:e5:3b:
                    96:ea:be:f8:b3:b9:8f:0d:f3:eb:ee:3e:61:45:ea:
                    18:36:67:01:52:72:32:3c:8f:76:8b:f2:b1:ed:09:
                    fc:f0:db:43:a7:fe:25:16:bd:15:27:73:f7:ea:76:
                    65:c8:db:56:87:64:20:0a:c3:f3:9c:25:52:8b:29:
                    78:f1:a3:b0:76:54:57:bc:6e:37:86:a9:e2:26:19:
                    ce:c0:2e:d8:53:55:82:95:34:20:3a:2e:7e:7e:85:
                    cf:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                64:F7:E0:41:F0:30:8A:DF:62:6E:35:1A:F6:80:30:30:52:AD:64:FB
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/565c0eb9-1bf6-3215-87d0-b40d398aeb32.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.33.14.30/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         b0:d5:db:4f:5c:e5:a6:21:a6:43:fa:22:6b:5c:52:a4:00:88:
         bd:d3:75:d2:5f:25:cf:03:5e:e7:42:f0:70:7c:26:14:4a:22:
         44:c5:23:7c:43:92:2d:f1:ce:b2:da:e3:25:69:2e:76:18:07:
         dc:2b:6f:44:f1:a6:fa:7d:a9:f9:86:5e:3f:55:f7:c2:d8:0a:
         9e:2b:98:79:83:15:38:a1:87:c7:63:18:87:cd:91:77:b5:d0:
         0e:7e:ff:ac:69:cd:39:3b:c8:7f:7e:19:6f:17:c1:f7:e9:ab:
         61:3c:b6:75:6b:d9:27:c2:27:b9:4a:cf:d5:ce:33:97:d0:9a:
         25:4f:78:dc:ee:01:9d:8a:d1:aa:97:a8:78:0d:e8:2b:84:bc:
         ad:39:ad:bd:8c:36:5f:98:26:3a:9b:1e:cb:aa:a4:2d:56:51:
         4c:70:b0:fb:c3:79:9f:33:b6:72:33:7b:63:56:bc:63:0c:2e:
         9c:95:3a:dc:da:79:3f:0f:cb:cf:01:69:da:09:27:25:2e:91:
         0d:7f:6d:a0:9a:86:9f:20:49:e1:12:f7:95:ca:05:68:d1:d8:
         6a:4d:6e:ea:3a:08:ef:45:fd:a9:9e:f3:df:80:38:cd:98:65:
         df:0b:bf:66:ea:38:c9:d1:06:a5:3d:91:fb:49:c4:7f:78:a0:
         c0:2a:0f:55
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 6 01:17:53 2026 by rpki-client