Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/bc787ee5-a8ac-353e-99c5-653cf6afd69b.roa
File:                     bc787ee5-a8ac-353e-99c5-653cf6afd69b.roa (raw, json)
Hash identifier:          Zw91s37CnsBSC3DshSsHOSE2Evk12X6IeYoK3mVJo7A=
Subject key identifier:   F9:DB:13:18:AC:28:61:56:1D:9B:5C:FD:4F:2A:20:C1:B5:8B:AE:13
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584D81285DFE109E2373BDAD53C0
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/bc787ee5-a8ac-353e-99c5-653cf6afd69b.roa
Signing time:             Tue 14 Apr 2026 14:22:11 +0000
ROA not before:           Tue 14 Apr 2026 14:22:11 +0000
ROA not after:            Mon 13 Jul 2026 14:22:11 +0000
asID:                     36621
IP address blocks:        192.33.14.30/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 19 Apr 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:81:28:5d:fe:10:9e:23:73:bd:ad:53:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Apr 14 14:22:11 2026 GMT
            Not After : Jul 13 14:22:11 2026 GMT
        Subject: CN=76041aa3-ad69-49c5-816a-6acdb7cfb6c8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:91:b3:5a:f8:8e:19:ee:7e:89:f0:75:a7:52:6f:
                    e3:60:cb:b3:16:6b:15:9a:26:3b:8b:62:73:c9:ac:
                    71:a5:b8:86:6f:3b:59:bf:a8:59:c4:16:54:fb:f5:
                    30:dd:f9:4e:03:8e:a9:d2:cf:19:c7:6c:c7:2b:12:
                    1a:35:00:0d:b4:5d:4a:19:46:af:dc:d4:a8:9a:0a:
                    9f:6d:21:2b:38:6b:a2:f2:19:26:69:35:18:f3:2c:
                    55:64:03:13:8b:f3:fd:f8:4b:16:95:8b:c2:37:d4:
                    3e:70:97:dc:f9:58:e1:75:9c:f1:58:c2:43:23:3b:
                    ab:49:96:a8:4c:2e:b0:21:67:bb:e3:80:fc:f3:bc:
                    f1:2a:95:a1:ee:7a:b5:cd:ba:19:01:a6:73:64:14:
                    83:a2:21:56:e0:fd:24:50:30:4f:9d:4d:d9:41:9e:
                    01:a5:0c:3b:9b:8c:b1:55:57:6a:76:8a:6d:68:84:
                    36:b7:33:68:ee:94:b4:eb:d1:70:38:11:f4:c3:30:
                    04:fd:18:f6:d4:3a:4a:ff:47:a1:dc:89:f3:2f:e7:
                    6e:a8:4c:64:ba:3a:61:ed:d5:cd:0f:bb:4e:a6:21:
                    32:af:cf:9a:a9:f5:e4:b3:c5:64:9e:69:28:3b:ad:
                    45:41:c1:27:11:29:16:fd:9d:fd:e6:2a:86:87:24:
                    ea:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F9:DB:13:18:AC:28:61:56:1D:9B:5C:FD:4F:2A:20:C1:B5:8B:AE:13
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/bc787ee5-a8ac-353e-99c5-653cf6afd69b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.33.14.30/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4f:fb:a6:54:9b:ef:1d:c3:f9:84:e0:35:5f:e3:f8:a3:fc:f0:
         45:40:68:4d:30:bd:6e:c0:90:6b:57:fd:97:29:8d:87:34:ba:
         aa:71:b9:19:58:28:93:33:ee:10:ae:c8:4a:40:ff:76:e8:08:
         c2:ca:40:20:ef:b5:61:10:4b:99:3d:b9:ef:13:92:83:bd:f7:
         98:11:d5:68:ea:39:37:c4:c0:63:5f:87:c9:ae:55:f4:4a:7f:
         3d:d0:bc:ba:35:0b:10:62:48:12:71:b2:dc:28:ea:0c:17:95:
         2f:6a:41:d6:5d:f6:82:87:a8:66:a7:8c:c3:52:19:1e:28:cb:
         87:8d:3d:75:6f:2d:15:f9:e0:33:9e:23:d6:a0:12:ce:f8:1e:
         80:c7:f7:ef:f3:ac:db:f6:87:6d:1b:5f:97:cd:2e:a1:58:65:
         f6:3f:42:c2:0d:1b:37:64:f4:35:e4:fe:b7:2f:98:0f:f1:f3:
         88:5c:61:cb:2f:e3:55:ed:ee:6e:ff:a4:5a:0f:4d:56:53:80:
         5d:ed:a1:69:b3:ce:4c:42:9b:25:5e:06:78:7d:95:c2:8e:6b:
         2b:40:b3:50:ef:ed:1f:77:f3:88:ae:b8:f6:22:42:71:f2:d5:
         c8:e4:5b:de:75:95:51:42:dc:fc:b0:94:7b:6a:18:24:dc:4a:
         dc:c8:6f:b3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 10:35:12 2026 by rpki-client