Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/98fff301-52df-3866-b4ce-e280970f5222.roa
File:                     98fff301-52df-3866-b4ce-e280970f5222.roa (raw, json)
Hash identifier:          4z+IoTvkJfEG9KuKPu3OgV+VQ/F9oqXwsdjWYL5xEqY=
Subject key identifier:   AC:8F:5B:12:51:D4:0F:ED:F7:1C:68:F5:57:7B:BC:1F:4D:74:6F:5B
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584F03A773240426073C0EDB7960
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/98fff301-52df-3866-b4ce-e280970f5222.roa
Signing time:             Mon 31 Aug 2026 01:00:12 +0000
ROA not before:           Mon 31 Aug 2026 01:00:12 +0000
ROA not after:            Sun 29 Nov 2026 02:00:12 +0000
asID:                     396547
IP address blocks:        192.33.14.30/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 24 Sep 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:03:a7:73:24:04:26:07:3c:0e:db:79:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Aug 31 01:00:12 2026 GMT
            Not After : Nov 29 02:00:12 2026 GMT
        Subject: CN=8c1ef02b-922e-4109-8cc7-4943057fe147
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:e9:12:a3:0e:c9:24:e5:f2:89:23:ca:6a:9e:
                    c1:e0:90:84:3f:4f:ae:35:b2:f9:a6:34:91:0f:74:
                    44:40:36:01:6e:eb:b0:f3:32:a5:5b:45:ab:59:e5:
                    89:08:7e:2e:35:2a:60:8e:32:1a:eb:38:40:fe:b3:
                    82:5c:39:98:18:49:88:f6:ed:10:60:cd:7a:97:9b:
                    19:82:42:92:6a:dc:72:d2:c2:58:42:a6:62:c7:f8:
                    80:d4:5b:c1:bc:85:c3:5c:6d:55:ec:19:1c:5f:e2:
                    12:18:e1:a7:6a:58:2c:08:62:2e:d1:3f:fc:39:76:
                    eb:e8:44:75:54:9d:d7:6a:07:10:79:8e:9f:c0:4a:
                    98:de:a6:83:be:77:9f:a9:d9:f4:b7:23:99:24:21:
                    be:ea:22:75:a0:ac:be:36:99:5e:fd:e1:22:ec:4f:
                    2d:25:b2:f7:76:b4:3c:d7:ef:73:50:fd:54:e7:e4:
                    56:d1:07:f6:b1:98:11:5e:88:60:2e:45:c7:73:44:
                    c9:f5:08:fa:d7:b1:3a:23:3d:a6:97:64:14:7f:2e:
                    cb:8e:a4:3d:99:ec:e4:a1:2b:b2:5e:9b:14:ba:d4:
                    26:19:99:60:66:7e:58:63:a6:ed:79:a5:21:93:2e:
                    f9:cb:a0:3f:39:80:34:0b:61:3b:18:e4:e6:64:a5:
                    84:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AC:8F:5B:12:51:D4:0F:ED:F7:1C:68:F5:57:7B:BC:1F:4D:74:6F:5B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/98fff301-52df-3866-b4ce-e280970f5222.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.33.14.30/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         ac:bf:47:9c:91:7b:31:48:24:ff:60:cd:47:ca:99:b8:8d:91:
         b6:0a:aa:c9:0b:80:44:4a:30:31:52:fa:09:44:84:70:b6:6e:
         6b:2b:49:3c:d3:18:77:07:60:55:23:28:1a:92:39:81:33:e8:
         c0:35:64:8f:46:29:bf:6e:88:2f:b2:9d:c2:31:2a:bb:5b:b9:
         b4:d8:a4:12:37:87:af:35:2e:17:69:06:63:cd:64:80:8f:ab:
         12:f2:2d:78:4d:05:74:4b:7e:b4:40:53:54:77:44:a4:e9:90:
         39:1b:7c:a7:65:a0:84:30:d6:ea:a7:d5:c2:c9:9f:64:81:13:
         a4:6d:c8:cd:9f:9e:4f:f4:a8:1e:df:7b:18:dd:71:e4:82:ab:
         bf:93:ac:53:b2:e7:44:3a:c8:89:9f:af:6d:4a:2a:9e:d8:44:
         53:95:ab:04:35:50:fc:e5:56:83:3b:ca:b2:c1:cd:5c:8b:92:
         2e:ab:c8:93:db:f3:38:00:ec:eb:56:84:dd:97:9f:9a:59:80:
         bb:ed:1b:3a:13:a6:80:0b:24:38:e1:63:de:ea:15:09:02:8a:
         20:10:6d:55:9a:2c:9f:46:3f:8f:d1:14:5c:5e:bd:ca:b4:ee:
         0f:fd:b3:68:d8:f5:a6:27:2f:df:bb:a7:72:c5:2d:ec:f2:06:
         45:00:05:a2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 18:26:03 2026 by rpki-client