Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/b3aed5ca-4526-395e-bf3c-08d237e342e0.roa
File:                     b3aed5ca-4526-395e-bf3c-08d237e342e0.roa (raw, json)
Hash identifier:          xkLjSA8sUDhPweREhsUZlGdVzrKZL2yJc5Ts0rhnV80=
Subject key identifier:   9B:A2:F7:0F:D6:DF:4D:73:C5:C9:C9:14:4F:CF:6B:C9:89:CC:25:2F
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584D81285FC2C126D6392398CD80
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/b3aed5ca-4526-395e-bf3c-08d237e342e0.roa
Signing time:             Tue 14 Apr 2026 14:22:12 +0000
ROA not before:           Tue 14 Apr 2026 14:22:12 +0000
ROA not after:            Mon 13 Jul 2026 14:22:12 +0000
asID:                     396573
IP address blocks:        192.33.14.30/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 19 Apr 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:81:28:5f:c2:c1:26:d6:39:23:98:cd:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Apr 14 14:22:12 2026 GMT
            Not After : Jul 13 14:22:12 2026 GMT
        Subject: CN=0c5c14ec-02ad-4c05-a9ba-6b1a9ea5e8db
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:2d:b8:0f:5f:29:64:12:ac:51:26:e1:2f:ba:
                    5a:7f:70:2d:ed:04:0e:21:43:a7:fa:17:df:4d:2b:
                    f0:6f:7f:32:ad:b9:32:ce:c0:c5:fa:63:c6:a9:f1:
                    96:ff:2d:b0:8e:be:f9:c3:68:2e:41:d3:fd:d4:38:
                    db:75:b9:c8:11:52:a7:c3:67:38:25:69:79:4d:b0:
                    7a:da:35:05:54:9c:ed:59:aa:e3:33:84:89:8d:45:
                    07:e2:58:19:1d:1d:a3:c4:65:37:7d:7d:df:9a:c1:
                    7e:c7:ac:a3:a8:2e:9c:47:3c:c3:9e:ea:4a:9b:4f:
                    c7:b7:ca:5c:34:a8:9e:f7:04:42:0c:3b:63:a3:bd:
                    53:a4:6e:b6:30:1c:c0:f1:2e:d9:e4:44:a7:80:2a:
                    ce:cd:bd:93:13:cf:ad:d2:21:f7:f6:ab:0d:b1:d1:
                    aa:72:b7:99:e7:d4:01:96:a9:2c:cf:4f:09:07:8f:
                    42:80:13:80:61:17:76:fa:b9:ad:bb:3d:38:9a:ec:
                    70:c7:a7:34:dc:48:0b:d6:79:b3:a0:15:d7:94:c8:
                    84:0e:8e:fe:5b:1f:27:96:ca:49:3a:12:5f:c1:01:
                    1c:26:02:de:35:7a:38:31:1c:0a:70:f9:d0:e8:3e:
                    a5:51:5c:60:f4:76:de:7f:8e:47:bf:d3:34:75:45:
                    32:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9B:A2:F7:0F:D6:DF:4D:73:C5:C9:C9:14:4F:CF:6B:C9:89:CC:25:2F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/b3aed5ca-4526-395e-bf3c-08d237e342e0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.33.14.30/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a2:07:de:b0:3b:6d:81:1f:94:78:2e:83:59:a9:81:98:cb:f1:
         dd:a8:9a:32:34:c4:83:ba:19:d6:dd:a7:b3:73:9f:19:c7:c5:
         43:3c:c7:99:4c:b3:83:30:1a:db:cd:52:9a:99:22:7c:11:3c:
         0a:fe:21:27:9b:fe:62:fb:c0:47:88:ab:d1:c3:1e:e7:a2:56:
         b9:7d:12:66:b4:e0:59:34:2f:38:bc:85:87:ee:c6:b5:38:8f:
         50:7c:22:f4:29:2e:04:8e:61:8a:d9:e9:6b:ec:82:d6:9f:91:
         ae:04:9f:2e:33:2b:12:51:fd:f1:2e:c1:1c:a7:da:b0:e4:e4:
         a8:ee:07:75:18:15:28:3d:53:ee:29:0a:90:d1:04:32:20:13:
         6c:10:5f:e6:1d:99:d5:68:af:72:11:10:50:fd:c6:ab:ea:eb:
         ff:13:fa:20:ab:91:50:70:09:9a:5a:f6:f5:56:e9:81:84:34:
         e1:20:db:60:2d:2a:21:eb:1b:a6:33:c1:2c:c5:8a:9a:1c:35:
         14:72:cc:cf:1d:a2:5f:98:45:8e:f9:0b:5f:a4:17:82:de:fa:
         c1:c3:fe:58:eb:f0:14:e5:6c:88:6d:66:d0:32:1d:df:38:b2:
         22:47:1f:f5:f2:33:4c:d2:6d:d2:31:dd:55:b3:16:f6:4e:54:
         78:91:ef:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 10:16:59 2026 by rpki-client