Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/be2f0358-7b6e-31ed-88ae-a9c3a48c3fc9.roa
File:                     be2f0358-7b6e-31ed-88ae-a9c3a48c3fc9.roa (raw, json)
Hash identifier:          58guv88m7auG6iK1qas/t6X/mhjQOMN4zafikKS9PIw=
Subject key identifier:   AB:E1:00:3E:A0:D9:F3:43:AC:E2:17:8D:F1:B0:96:4C:D5:A7:24:E9
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584F03A7842B0D62FB09AD3DE1C0
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/be2f0358-7b6e-31ed-88ae-a9c3a48c3fc9.roa
Signing time:             Mon 31 Aug 2026 01:00:12 +0000
ROA not before:           Mon 31 Aug 2026 01:00:12 +0000
ROA not after:            Sun 29 Nov 2026 02:00:12 +0000
asID:                     396609
IP address blocks:        192.33.14.30/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 28 Sep 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:03:a7:84:2b:0d:62:fb:09:ad:3d:e1:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Aug 31 01:00:12 2026 GMT
            Not After : Nov 29 02:00:12 2026 GMT
        Subject: CN=a4825294-bbea-4404-92f9-c7220c60cbe9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:8f:9d:56:47:e9:9b:51:e2:0c:4a:fc:a0:ab:
                    7f:9a:7a:c3:2e:46:0e:f5:60:f5:7a:57:db:43:6f:
                    84:16:f5:8f:19:b5:e9:fe:84:96:96:ec:fc:53:11:
                    0a:6b:e0:f3:b5:15:0d:89:13:a4:ee:43:c8:c6:4e:
                    c3:dd:85:a0:ce:af:88:93:6e:5a:9b:ef:c7:53:62:
                    32:d2:e6:3d:91:e5:8b:27:ae:e5:62:d7:13:d1:a9:
                    74:6b:06:2e:9d:14:d5:d5:3a:b3:b1:64:91:cb:91:
                    17:4e:42:4f:af:19:1c:5e:fa:f5:e4:00:65:20:31:
                    af:2e:1a:d1:8d:20:80:5c:cb:7f:0b:c9:d7:cf:07:
                    0f:be:a0:60:18:fc:97:6b:47:f2:88:62:30:c6:e8:
                    bb:14:75:ae:ee:1f:b7:d2:f4:50:0a:eb:d0:f2:57:
                    8b:30:89:24:5c:95:29:70:f7:41:3c:0a:8d:03:76:
                    68:a8:55:d4:ca:17:d9:1b:4d:76:db:8e:39:c9:1d:
                    41:e8:c7:81:08:ed:e9:e1:d9:d3:51:a8:05:5d:6e:
                    e4:6d:af:24:2c:ef:67:43:06:ec:ec:e7:67:2a:d7:
                    01:8c:4e:f1:ad:e6:6c:55:3b:0a:5c:3e:0e:62:b2:
                    61:38:cd:1d:fe:31:fa:79:c7:3a:47:4e:8f:fe:e9:
                    3d:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AB:E1:00:3E:A0:D9:F3:43:AC:E2:17:8D:F1:B0:96:4C:D5:A7:24:E9
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/be2f0358-7b6e-31ed-88ae-a9c3a48c3fc9.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.33.14.30/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         b2:f6:98:08:56:3a:dd:93:60:b0:fd:4b:ac:1e:eb:7f:2f:49:
         bd:cc:99:b9:26:d9:4c:c1:69:71:fc:01:13:c6:fe:68:a2:98:
         95:d6:1d:ed:86:8c:29:61:4f:8e:c1:76:1d:ef:4b:45:b2:40:
         68:b9:63:d4:ca:3a:dd:d5:0e:96:7e:3a:29:d9:de:75:3a:06:
         f8:b8:0b:9c:99:6f:9d:b2:3f:3c:21:8e:5c:3e:0d:02:51:12:
         0e:22:1f:ee:ca:bd:0b:d7:5a:66:9b:35:b4:14:24:b5:1c:0e:
         90:7e:d2:32:68:42:8c:3a:4b:7a:8f:fa:aa:77:3b:c3:75:08:
         46:3d:e9:68:3c:1d:55:f6:9a:f1:8b:cd:14:43:29:1b:ad:d4:
         cf:4a:e9:9e:c6:46:17:48:f2:27:e5:22:39:a6:f1:76:ce:d1:
         e9:52:ec:b4:d6:2e:ad:dc:dc:09:7e:73:d3:1f:bf:09:31:cf:
         7b:eb:c0:e4:56:d9:5c:4a:28:35:ba:ec:08:09:e3:40:18:d7:
         42:9d:52:7c:77:28:4f:94:d3:c4:f6:35:3c:59:f2:b6:49:1b:
         16:4c:ae:f2:67:6d:da:29:ec:17:10:c0:f6:82:30:4d:da:67:
         98:1e:bb:c3:67:34:21:43:ad:2b:f5:6e:a2:a6:de:27:8b:b8:
         12:66:95:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 26 04:52:37 2026 by rpki-client