Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/6752555f-9831-362c-ac7b-5430459e0293.roa
File:                     6752555f-9831-362c-ac7b-5430459e0293.roa (raw, json)
Hash identifier:          dwUeDeXMTuPeUMbAMhqy/tZzsXei1O18Ru0eNdWvJIg=
Subject key identifier:   65:19:DF:06:4F:8D:96:10:2A:1F:32:10:A4:6A:CE:C5:89:EF:F1:FD
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584D8128657EBF55AF5D652600C0
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/6752555f-9831-362c-ac7b-5430459e0293.roa
Signing time:             Tue 14 Apr 2026 14:22:15 +0000
ROA not before:           Tue 14 Apr 2026 14:22:15 +0000
ROA not after:            Mon 13 Jul 2026 14:22:15 +0000
asID:                     397193
IP address blocks:        192.33.14.30/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 19 Apr 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:81:28:65:7e:bf:55:af:5d:65:26:00:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Apr 14 14:22:15 2026 GMT
            Not After : Jul 13 14:22:15 2026 GMT
        Subject: CN=531bda76-122b-400c-a80c-104dbf651242
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:82:19:a9:b8:2f:25:f6:38:a0:db:6e:2e:c9:59:
                    fd:a5:67:53:15:82:5a:7d:fd:bb:73:88:5b:a3:67:
                    e5:f7:ac:25:38:21:30:7d:b2:91:c3:33:4f:c5:0e:
                    f6:78:2e:dd:64:1f:50:84:ea:b0:27:e2:76:dd:f9:
                    a8:51:ea:31:6e:ad:82:db:4e:a0:3f:3f:8e:74:be:
                    85:3b:73:e7:ed:d1:f3:05:ff:a3:4f:49:40:02:be:
                    45:7c:17:a0:23:3a:d9:a5:47:65:4e:af:0e:22:6f:
                    bd:d6:5e:97:a9:81:ac:b5:70:22:a4:5b:15:b4:46:
                    98:cb:10:e4:80:61:20:84:8b:27:26:68:02:29:50:
                    35:76:6d:37:0b:9e:9f:a4:f3:b1:e2:25:2d:8c:41:
                    01:2b:2b:04:69:15:b5:d5:04:f4:0c:1e:c9:32:04:
                    26:4b:3c:76:0f:75:94:6d:09:17:59:e5:42:cd:4c:
                    c6:14:aa:7e:6e:17:26:35:d1:78:18:69:9c:20:b3:
                    3f:cd:a8:de:01:2f:50:e8:62:3f:01:6a:9f:74:22:
                    6b:a4:6c:69:ab:b2:3e:b4:12:1b:cc:00:54:ee:d6:
                    b5:b3:0c:50:80:20:38:38:a5:91:13:8e:13:0b:9d:
                    d2:07:bf:f8:45:a1:1c:e9:b9:c5:c1:0f:19:6c:ec:
                    02:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                65:19:DF:06:4F:8D:96:10:2A:1F:32:10:A4:6A:CE:C5:89:EF:F1:FD
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/6752555f-9831-362c-ac7b-5430459e0293.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.33.14.30/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a4:ab:e1:d7:76:46:f7:fd:c7:37:ae:e8:72:0e:e8:4e:5e:46:
         b7:4a:9c:f6:de:90:d2:f2:1b:5c:a6:7f:4c:5a:fb:eb:fa:a7:
         7d:c4:1d:f6:c6:37:80:de:7f:7e:66:56:7a:14:10:19:96:10:
         fc:a4:9c:4f:8b:90:69:75:e8:0e:56:6e:51:2c:54:c1:b2:a3:
         df:1d:60:c4:7e:8c:1a:ad:c6:bf:5c:86:d6:de:46:e2:26:2b:
         bf:0f:2e:26:3f:90:d9:ef:22:f5:cc:c0:6d:2b:49:fa:a0:7f:
         d5:cf:15:15:a2:0c:16:cd:b5:01:84:86:ab:0d:dc:ae:b2:ba:
         b2:38:11:e1:a1:cf:a3:57:83:0b:7a:52:cc:55:b3:ef:19:72:
         3d:a6:0c:c3:ea:40:60:29:64:a6:13:5e:45:77:6e:8e:a8:3e:
         d9:66:5c:9b:99:e6:00:d5:7a:cc:c3:42:31:79:ff:1a:23:d8:
         a2:52:39:22:b0:5d:68:3f:2c:71:6c:50:b3:c7:52:86:a7:8b:
         f5:0e:da:9d:e8:fb:fd:94:08:a9:61:7c:d8:b3:1f:b6:75:94:
         13:59:20:ad:59:85:d5:64:90:7e:5c:eb:6b:a3:cf:13:4a:39:
         05:20:86:07:dd:c5:20:0f:04:41:a6:10:bc:68:00:43:ba:ec:
         4e:b7:cc:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 01:49:47 2026 by rpki-client