Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/e5d5d523-e6a2-3776-a926-26697d2a8435.roa
File:                     e5d5d523-e6a2-3776-a926-26697d2a8435.roa (raw, json)
Hash identifier:          27HC3qj81NVgG5G0I20xhsvsFqJBYK+7qLXNGHwRNrA=
Subject key identifier:   C4:60:D1:AF:E5:E4:E4:38:0F:3E:05:EA:8D:3D:0F:5F:AF:4B:FD:64
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584F03A772C30040DF7120101480
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/e5d5d523-e6a2-3776-a926-26697d2a8435.roa
Signing time:             Mon 31 Aug 2026 01:00:12 +0000
ROA not before:           Mon 31 Aug 2026 01:00:12 +0000
ROA not after:            Sun 29 Nov 2026 02:00:12 +0000
asID:                     396606
IP address blocks:        192.33.14.30/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 26 Sep 2026 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:03:a7:72:c3:00:40:df:71:20:10:14:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Aug 31 01:00:12 2026 GMT
            Not After : Nov 29 02:00:12 2026 GMT
        Subject: CN=065e2acf-b700-4e68-9252-5ea5a535a11a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:84:2a:dd:3a:48:2c:e7:52:e8:be:e4:68:57:
                    01:6d:f6:05:9e:53:ed:c2:b1:bb:34:e5:7a:9a:26:
                    97:2a:c6:0d:9c:61:e2:fe:10:24:e3:44:61:e4:b7:
                    f6:b9:ed:41:fb:c7:e0:d5:91:c1:5d:62:bb:4e:3c:
                    66:0f:cb:b8:28:99:d5:14:77:a1:8f:a0:25:80:4c:
                    51:c0:19:31:b7:a1:3b:d7:2e:26:7b:3d:68:eb:72:
                    11:ca:51:5f:3a:2c:dd:42:c6:0a:22:44:de:78:71:
                    d5:d0:89:c3:ce:ca:29:33:97:24:6e:ad:c6:95:fd:
                    58:f5:09:80:0c:22:6a:4a:b9:78:98:b5:62:44:7b:
                    fd:03:0d:c4:19:de:f2:50:cd:a4:1e:bb:54:e3:d1:
                    5f:7a:ac:24:7d:80:c1:d1:3c:ae:8d:e7:b9:82:aa:
                    62:51:41:75:9f:da:1d:4a:5e:84:d5:be:52:ef:6b:
                    28:3e:67:98:69:33:20:03:98:de:a2:5a:2c:11:9a:
                    79:17:3d:2a:ec:e1:2f:25:4b:0a:52:82:e0:2a:87:
                    60:e7:7f:3d:a8:e9:54:7a:0e:19:24:0a:19:75:67:
                    3a:c4:7b:0f:2a:6f:fc:d1:61:6a:f3:af:35:e3:ae:
                    d4:0a:68:df:f5:79:2b:32:12:dc:1f:43:18:35:d4:
                    6d:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C4:60:D1:AF:E5:E4:E4:38:0F:3E:05:EA:8D:3D:0F:5F:AF:4B:FD:64
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/e5d5d523-e6a2-3776-a926-26697d2a8435.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.33.14.30/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5d:96:b6:e3:60:d7:d9:d7:49:b1:13:1d:d6:57:f5:9d:f1:e8:
         7b:16:01:48:a0:61:dc:87:de:6c:b5:0c:e3:46:6b:e6:16:ce:
         2e:7e:b3:b7:17:fb:71:e8:41:69:0f:5c:6c:20:96:f3:fa:77:
         34:ed:77:44:21:57:76:49:2b:f8:1d:55:f4:00:9a:7e:4e:e4:
         ec:dd:04:c8:b7:8c:0d:3f:b5:b1:07:d1:a2:90:fd:3d:81:14:
         df:81:3c:22:0f:b1:6b:23:68:9c:ce:17:6b:dd:fc:a0:39:c7:
         08:5e:89:26:1b:df:a6:ae:8c:98:11:4b:6d:fb:57:4b:02:aa:
         bf:ce:0d:8f:2b:cc:9b:44:92:56:e2:6f:9c:a0:62:55:26:6e:
         88:84:d1:23:f8:c5:15:ec:07:48:bd:fb:b4:43:a4:38:1d:ba:
         3b:92:44:6f:59:99:0b:e8:8c:62:9b:d2:48:9d:30:91:1f:a3:
         3a:b9:71:32:55:77:c2:b4:74:0f:8c:04:e9:a0:ae:aa:de:d7:
         d7:30:34:4d:82:86:66:64:59:2d:77:d9:f7:12:4f:fe:56:a3:
         e9:c2:de:20:7a:87:75:d1:c8:71:d5:0f:f1:24:23:7c:3d:b2:
         c0:f5:63:c7:f0:18:c0:a3:58:09:5e:56:9f:38:42:22:9c:63:
         61:1e:d7:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 25 02:30:04 2026 by rpki-client