Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/f178ff78-0286-3295-a582-74ebbef0daa7.roa
File:                     f178ff78-0286-3295-a582-74ebbef0daa7.roa (raw, json)
Hash identifier:          IS+yUeko3gkt8RE7wTDYR+LAqBKk+tOHeWRZuT/kCUg=
Subject key identifier:   D4:F5:50:E7:4C:99:1F:47:D6:82:FE:04:E9:93:DB:AE:04:A9:B5:B9
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584D8128611E351E052063174D20
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/f178ff78-0286-3295-a582-74ebbef0daa7.roa
Signing time:             Tue 14 Apr 2026 14:22:13 +0000
ROA not before:           Tue 14 Apr 2026 14:22:13 +0000
ROA not after:            Mon 13 Jul 2026 14:22:13 +0000
asID:                     396591
IP address blocks:        192.33.14.30/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 19 Apr 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:81:28:61:1e:35:1e:05:20:63:17:4d:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Apr 14 14:22:13 2026 GMT
            Not After : Jul 13 14:22:13 2026 GMT
        Subject: CN=3bdfa300-ef10-428c-b264-1477b68fa0f9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:10:62:35:38:8e:de:c9:86:1b:00:f3:74:4b:
                    c6:71:cf:2e:a3:5c:ba:3a:15:81:43:30:0c:10:f8:
                    74:b9:cb:ab:23:13:e4:59:a7:53:8a:4f:0c:36:9a:
                    f6:5c:4a:38:86:2f:d6:66:b6:4d:1e:95:e9:09:49:
                    27:7a:17:a8:63:5e:0a:d5:b5:f0:30:80:7d:64:fb:
                    e0:14:56:c1:9f:36:82:27:84:b6:ec:01:e4:72:40:
                    fc:fd:49:d5:f9:f8:6b:2b:66:85:0d:33:24:c7:50:
                    b2:43:3b:53:c8:b2:86:6f:92:6f:d8:7d:fb:df:d4:
                    b1:64:a7:40:3e:e7:34:aa:eb:e7:42:04:1e:27:fb:
                    01:4e:df:11:b9:79:c0:bd:e9:b3:20:ab:d2:4e:60:
                    86:2c:95:a9:61:21:53:e6:31:86:5a:a5:15:46:52:
                    24:18:8b:05:ba:11:7c:08:f1:f1:a5:41:5d:4a:ea:
                    91:d8:ff:7a:ed:19:48:2b:05:c4:bb:6b:37:4c:ad:
                    85:c6:b7:5b:86:55:11:62:71:73:92:fb:04:1f:fe:
                    d2:89:3a:9e:5b:60:4a:61:75:c3:17:be:cb:41:ef:
                    52:05:28:54:48:68:0e:41:81:1a:b1:ce:d6:c3:2d:
                    d8:14:30:95:10:d0:49:3d:7b:30:5e:e1:28:09:a1:
                    00:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D4:F5:50:E7:4C:99:1F:47:D6:82:FE:04:E9:93:DB:AE:04:A9:B5:B9
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/f178ff78-0286-3295-a582-74ebbef0daa7.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.33.14.30/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a7:97:64:bb:b8:7c:4b:bc:48:9d:b4:46:37:45:4c:33:a6:9c:
         df:64:a4:2c:6f:94:7b:3f:a4:5c:db:2f:32:23:0d:23:37:07:
         53:94:9b:2c:bc:2d:d3:ae:50:a0:66:c5:4c:e5:41:46:3a:3d:
         b6:32:dc:3f:e5:86:15:81:4b:45:6a:dc:fb:34:a9:4d:5e:5c:
         45:e9:73:38:8a:9a:9a:95:92:c1:55:11:e9:16:e6:e7:af:37:
         9c:e5:93:32:2d:47:d9:8c:d9:f9:e3:9e:b7:d2:26:ce:b9:b2:
         f9:31:12:35:b1:53:90:ff:9a:1e:04:e1:d4:64:f1:19:dd:f4:
         34:e7:24:40:a4:ee:e3:0f:b4:60:bf:8d:e3:73:7b:6b:32:0b:
         ce:fb:c6:4c:b9:ae:29:d7:83:3e:9d:fb:03:3f:85:b1:42:45:
         ed:bd:85:b7:63:8b:60:6a:ef:1d:29:9c:4a:2a:a4:ba:50:a5:
         f8:a0:5d:52:0b:00:0d:4f:1b:32:d4:26:0f:f6:24:2d:b8:77:
         d8:59:48:17:ef:56:d9:e1:e0:fe:16:8c:d1:7a:c7:e3:6e:c2:
         02:92:05:af:c6:74:c6:66:67:d8:8c:d2:e9:5b:35:6d:6c:c6:
         e0:77:d0:bb:af:13:30:7c:bc:91:04:c1:14:ef:b3:6a:ed:83:
         6b:53:72:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 11:18:42 2026 by rpki-client