Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/f67d52e2-4f37-3058-8605-a84df57bbfae.roa
File:                     f67d52e2-4f37-3058-8605-a84df57bbfae.roa (raw, json)
Hash identifier:          ogilcDvPJZldo0shogi4k/8ytv/csOX2hDDDCj2JKic=
Subject key identifier:   88:BD:DE:55:CF:5E:49:F0:06:02:0D:B9:D2:F9:55:66:C3:13:9E:FB
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584F03A84C30DAB1D37E0D5EF5C0
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/f67d52e2-4f37-3058-8605-a84df57bbfae.roa
Signing time:             Mon 31 Aug 2026 01:00:12 +0000
ROA not before:           Mon 31 Aug 2026 01:00:12 +0000
ROA not after:            Sun 29 Nov 2026 02:00:12 +0000
asID:                     397204
IP address blocks:        192.33.14.30/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 24 Sep 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:03:a8:4c:30:da:b1:d3:7e:0d:5e:f5:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Aug 31 01:00:12 2026 GMT
            Not After : Nov 29 02:00:12 2026 GMT
        Subject: CN=e74032da-64a8-428d-a798-a44580d83db8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:e0:5a:85:5d:bc:1c:73:1b:29:14:ad:c8:db:
                    6e:88:f8:a4:85:45:8e:a1:c1:c6:d1:06:6e:67:b0:
                    4d:0b:a3:48:c9:7c:92:38:ce:60:2e:12:76:ed:1b:
                    9c:2b:53:cb:8f:84:18:0a:55:ac:8d:b4:4e:68:be:
                    fb:4e:8f:69:76:30:92:c0:ae:45:af:41:11:0a:b7:
                    b0:9c:61:3d:72:ce:60:07:f0:94:b6:51:86:01:69:
                    71:8e:3a:60:d2:63:47:6a:31:11:23:a0:5b:52:11:
                    e7:73:70:a5:a9:86:57:de:88:63:c5:74:b5:0a:e6:
                    3a:ac:cc:e0:f2:e1:24:8a:b9:d2:b5:07:1b:e9:a5:
                    1b:a0:e5:d8:38:bd:bc:70:92:0c:93:01:d0:bd:75:
                    33:99:d6:ad:fe:14:e4:52:c2:06:dc:1f:98:1f:99:
                    c1:f5:94:09:8b:3e:b2:08:d3:31:37:bb:52:5a:d2:
                    5c:49:4c:31:a7:2f:a4:41:ca:6d:75:e2:06:bc:cb:
                    e1:02:f8:44:3c:f8:2b:21:89:45:b1:ac:5c:2c:10:
                    19:83:e5:00:c5:99:05:53:31:30:39:7f:e6:1b:32:
                    84:2b:74:16:7e:a2:aa:86:d2:97:79:6a:a8:62:64:
                    8b:6d:b8:ef:25:62:a2:dc:a2:76:fa:0c:d8:0a:5b:
                    3e:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                88:BD:DE:55:CF:5E:49:F0:06:02:0D:B9:D2:F9:55:66:C3:13:9E:FB
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/f67d52e2-4f37-3058-8605-a84df57bbfae.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.33.14.30/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0f:27:3a:76:6a:e7:cc:3a:5b:ff:59:b6:07:c7:b1:85:fd:b1:
         58:17:41:8e:c4:0b:0b:18:e4:f1:9a:95:4a:cc:0e:7d:bd:e2:
         1e:1f:8d:44:cb:7a:7e:32:1a:57:08:10:ba:23:69:f9:e6:da:
         58:6a:a6:11:10:11:54:fa:9a:fd:1a:90:a7:b8:25:b9:de:e2:
         bc:f2:28:90:b2:69:9d:70:8f:e7:6d:2d:cb:6f:52:66:b3:e5:
         0d:92:35:5c:8a:2d:06:df:50:9d:49:0b:2d:a7:50:16:49:d6:
         63:01:10:56:3b:00:10:76:62:79:2a:b8:39:0a:53:e2:a4:0d:
         1d:ab:a9:db:39:b7:f8:8f:c3:86:ee:40:17:8d:41:52:74:e3:
         07:31:4d:78:11:39:f1:13:07:51:b0:15:28:1c:ee:98:64:7f:
         be:b3:65:b1:0d:43:f3:bd:9b:f7:53:a7:3e:7f:e1:bc:c2:2e:
         5f:d8:3c:d0:e7:b7:fb:6b:c4:29:61:1a:a1:25:3c:f9:ac:7b:
         0c:0b:d8:cf:b8:d6:07:cc:be:96:a7:4b:0d:45:50:4d:56:f4:
         89:d1:c0:ba:7b:6c:21:5e:f0:9b:90:2d:16:3a:8b:33:7e:66:
         22:24:e3:67:72:95:05:fa:ac:26:97:f4:5d:c6:3c:4b:ca:1e:
         eb:83:67:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 13:06:49 2026 by rpki-client