Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/a9e6bb26-9865-31f5-8fcb-3b490c26156a.roa
File:                     a9e6bb26-9865-31f5-8fcb-3b490c26156a.roa (raw, json)
Hash identifier:          OGYazAto5/5eWWE7MFRG6hnWwr/P2OPhNS3XYkSBtmM=
Subject key identifier:   8E:7F:56:15:92:94:87:AD:39:33:99:5A:29:28:50:77:45:AE:0F:8F
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584D812858CF0025B49B7F460CA0
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/a9e6bb26-9865-31f5-8fcb-3b490c26156a.roa
Signing time:             Tue 14 Apr 2026 14:22:09 +0000
ROA not before:           Tue 14 Apr 2026 14:22:09 +0000
ROA not after:            Mon 13 Jul 2026 14:22:09 +0000
asID:                     396553
IP address blocks:        192.33.14.30/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 19 Apr 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:81:28:58:cf:00:25:b4:9b:7f:46:0c:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Apr 14 14:22:09 2026 GMT
            Not After : Jul 13 14:22:09 2026 GMT
        Subject: CN=bfd5e6de-f830-4a3f-8919-7279ab5c8801
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:a1:1a:2b:12:1b:7f:8d:e9:63:a7:7c:8b:50:
                    61:25:57:0d:8b:9b:df:ee:00:f1:12:90:3d:15:a1:
                    9e:48:6f:5a:a0:4a:5a:9e:b6:59:06:ec:e7:1b:33:
                    01:5d:a7:27:10:35:48:b4:2f:f4:6a:c1:4c:93:08:
                    3c:26:b4:44:e4:47:1c:74:06:a9:04:87:6b:b2:36:
                    10:f5:f9:9b:ef:a7:1e:7d:3d:27:5d:bb:06:03:bd:
                    88:eb:c1:61:75:4c:2f:b9:5a:1c:e0:c0:a4:0a:85:
                    1b:75:e7:51:aa:6f:88:ea:e2:31:08:48:0c:91:8d:
                    de:71:a1:ff:e0:17:10:2e:09:8d:f9:1e:0a:8c:e0:
                    7e:64:d8:0d:00:fe:07:63:30:ae:e7:ee:18:a4:ad:
                    92:8b:fa:db:a0:15:25:9c:b9:e6:47:2f:97:2a:64:
                    ac:4d:8e:b4:89:28:53:8e:2c:18:ce:1b:33:d3:e8:
                    77:2b:04:b0:fa:4f:d3:12:4c:de:ad:67:bb:8f:d0:
                    49:7f:93:d3:4e:c2:ae:53:1d:bc:63:16:35:44:c8:
                    10:1c:73:69:e8:98:2c:5c:89:42:16:32:15:c4:38:
                    f8:f2:d0:74:2b:98:cd:9a:bb:ea:a8:1f:c6:82:d1:
                    69:05:4b:0b:15:ec:c4:84:29:a3:3b:8b:c1:e7:80:
                    e4:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8E:7F:56:15:92:94:87:AD:39:33:99:5A:29:28:50:77:45:AE:0F:8F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/a9e6bb26-9865-31f5-8fcb-3b490c26156a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.33.14.30/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         8f:e6:c8:bf:0c:4d:c5:37:15:0c:e8:58:d3:7a:b8:9a:ca:33:
         3e:43:f2:b1:db:16:11:7d:dd:c9:f7:1f:2f:c0:ca:f3:58:62:
         cc:a1:fe:e4:45:f2:80:73:86:be:eb:9b:e3:e9:83:6f:d1:1a:
         a1:5d:88:4e:27:66:31:dc:77:dd:c5:66:d7:18:08:ef:cd:10:
         79:14:e0:98:c2:05:81:06:a1:c8:10:1b:1d:c5:a3:25:27:cf:
         cb:03:ed:77:f1:f0:ec:dc:ec:60:04:70:45:51:84:4e:8d:2c:
         58:43:ef:61:6b:ad:e3:18:6a:4f:3e:8e:a3:49:10:75:31:05:
         72:6e:ac:90:bd:44:e1:57:d9:73:52:45:9c:f2:cd:98:00:e5:
         13:94:c9:b6:85:03:6c:03:f5:0a:fc:8c:c3:7c:20:ad:49:9b:
         45:b7:93:c4:97:79:04:59:a9:31:1a:ca:37:56:2e:68:ce:ef:
         02:3d:30:5f:9a:16:4c:cc:c5:8c:58:fb:b0:a6:af:05:53:bf:
         6c:d3:82:81:23:d5:4c:0f:72:55:66:f0:2e:74:26:3a:59:21:
         26:72:c9:97:50:5b:49:3c:8f:64:40:1c:e8:95:98:6a:01:a6:
         e2:da:ae:8b:f3:9e:f7:63:d9:98:c4:e3:3c:51:30:ff:25:f6:
         88:67:0d:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 14:52:25 2026 by rpki-client