Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/5b9ca1c6-e025-3fa3-8c52-c7f6f873d587.roa
File:                     5b9ca1c6-e025-3fa3-8c52-c7f6f873d587.roa (raw, json)
Hash identifier:          ATqc+jt+M52MQyZHbRc0N5d3WI6FPH2QQ5lcqUtawck=
Subject key identifier:   FB:5F:66:35:91:A3:1C:DD:46:DB:EC:C9:CC:BD:DF:F4:9E:CA:3C:B4
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584F03A773C257E824D35DBEF380
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/5b9ca1c6-e025-3fa3-8c52-c7f6f873d587.roa
Signing time:             Mon 31 Aug 2026 01:00:12 +0000
ROA not before:           Mon 31 Aug 2026 01:00:12 +0000
ROA not after:            Sun 29 Nov 2026 02:00:12 +0000
asID:                     396593
IP address blocks:        192.33.14.30/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 26 Sep 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:03:a7:73:c2:57:e8:24:d3:5d:be:f3:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Aug 31 01:00:12 2026 GMT
            Not After : Nov 29 02:00:12 2026 GMT
        Subject: CN=eac95bf9-4269-4433-b25a-b4c9bbf814e6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e8:ad:fd:ed:04:8a:6b:36:ce:37:55:49:07:2b:
                    bc:91:c6:32:a9:d4:b3:e7:e1:5a:02:17:0d:8e:40:
                    26:95:ee:4a:8c:4e:29:e3:bf:67:19:68:e3:49:2c:
                    26:d2:97:b2:d2:29:b2:94:a7:b6:ec:0f:02:89:a5:
                    48:d0:c5:a6:2f:4a:0c:b2:53:89:13:4f:e0:2e:fd:
                    b1:53:fc:3d:7b:6a:55:b9:ac:7b:07:2b:5f:6a:7a:
                    e9:a5:77:a6:e2:d3:8c:4f:ad:1e:c6:e1:82:d9:44:
                    15:2e:09:63:bf:03:de:28:e4:db:2e:69:1c:59:a4:
                    38:27:1d:e5:ff:0c:6e:4b:eb:77:d7:0f:ac:0f:91:
                    19:6f:8e:81:8f:08:83:86:36:95:67:c0:12:aa:40:
                    e8:77:c0:34:ee:f5:bf:4b:a3:6c:e4:8a:b7:90:a3:
                    74:bb:28:92:50:0c:d2:56:53:48:57:3f:a0:45:b8:
                    06:05:7a:19:52:b8:38:33:64:51:4c:5e:0d:4d:df:
                    7e:84:e2:25:08:dc:a6:69:21:21:b3:a7:9d:3e:e5:
                    86:8c:ba:12:81:a4:0e:7e:61:56:3a:a5:b9:45:67:
                    aa:9c:d7:13:d5:96:f3:4e:53:79:40:71:27:17:65:
                    8a:35:c0:0f:40:5c:df:c3:26:3c:00:48:d7:22:c0:
                    eb:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FB:5F:66:35:91:A3:1C:DD:46:DB:EC:C9:CC:BD:DF:F4:9E:CA:3C:B4
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/5b9ca1c6-e025-3fa3-8c52-c7f6f873d587.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.33.14.30/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         01:6e:e1:b7:8d:79:32:42:1b:d7:66:ae:ab:83:02:53:8c:b0:
         f3:19:c7:58:bb:ec:2b:d8:39:77:83:09:cf:53:3f:f8:79:d0:
         88:d5:e5:69:86:95:27:75:38:3e:5b:35:27:fa:f9:0b:df:27:
         38:c2:38:bc:c7:cf:54:b6:b6:47:c2:68:52:e8:a7:b6:0d:ce:
         c5:05:45:10:fa:b9:3d:1d:55:63:0a:c2:6b:52:c8:c8:9d:97:
         2b:14:e9:0d:8b:ce:ed:e7:e1:43:ec:ef:03:5e:43:9a:99:d1:
         fc:a9:d0:ed:82:47:dd:f5:00:58:a6:c0:19:e5:e0:e2:df:d2:
         87:5a:5a:c1:d3:7a:1b:f3:0e:c8:68:a3:dc:c3:d5:a4:2b:d6:
         35:bd:41:4c:0e:35:d5:da:82:2f:63:59:68:79:91:e7:8e:5e:
         09:e0:b7:a0:b5:88:90:be:ed:06:50:b1:b2:34:a6:c5:ee:d8:
         2d:8d:db:94:7b:88:de:60:79:49:44:89:dc:14:19:03:1b:91:
         51:2e:d3:ff:d5:fa:44:df:b6:c4:aa:25:68:06:01:55:12:d9:
         35:dd:20:5f:f3:0b:19:d3:43:88:6c:15:41:e1:89:66:f1:58:
         0e:a9:6d:43:c0:05:3c:c8:c5:62:21:e1:02:66:5f:d7:f5:53:
         1a:02:58:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 04:30:10 2026 by rpki-client