Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/9e35f34e-43a2-3b16-a35c-58c228211471.roa
File:                     9e35f34e-43a2-3b16-a35c-58c228211471.roa (raw, json)
Hash identifier:          AVNzFVxwcLtM+DvG7IyruHCCW8bclF/qQmxkfZdWQ4E=
Subject key identifier:   47:1E:C0:57:25:F2:30:DC:C6:46:ED:CE:75:40:66:95:1C:E6:94:E9
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584F68281B3B1CE4E069948CE680
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/9e35f34e-43a2-3b16-a35c-58c228211471.roa
Signing time:             Tue 06 Oct 2026 01:00:13 +0000
ROA not before:           Tue 06 Oct 2026 01:00:13 +0000
ROA not after:            Mon 04 Jan 2027 02:00:13 +0000
asID:                     396743
IP address blocks:        192.33.14.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 10 Oct 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:68:28:1b:3b:1c:e4:e0:69:94:8c:e6:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Oct  6 01:00:13 2026 GMT
            Not After : Jan  4 02:00:13 2027 GMT
        Subject: CN=e4e85f8b-50c1-4c49-af08-4c3df955ef34
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:ce:8d:ac:24:4a:79:a4:c4:7b:1d:28:13:f5:
                    32:94:b6:b7:e4:8f:ab:80:ed:a4:da:39:95:b3:d4:
                    e8:07:a7:c0:14:14:0a:15:c2:e8:59:70:f6:8f:77:
                    cf:5c:95:ee:4e:05:9f:d8:fb:34:5a:13:cf:ec:e5:
                    8d:5e:71:0f:f9:7e:94:f6:cd:88:bd:74:f4:03:88:
                    df:65:b6:b1:57:b5:f8:33:08:c6:17:b2:be:36:5e:
                    01:e8:6b:df:c5:9a:7c:56:2f:97:94:97:b7:d9:24:
                    37:99:2e:f1:a0:24:3f:3e:99:bb:68:83:53:b4:b5:
                    de:22:28:1b:a5:18:f9:75:8e:25:0c:d5:1a:28:fd:
                    f7:62:32:9a:19:05:32:9d:85:53:d9:d6:d7:0f:aa:
                    43:66:6a:51:90:83:85:f7:ca:ba:7c:7a:11:54:e3:
                    66:ec:c6:61:26:9b:48:01:d9:ef:bd:4a:e3:08:22:
                    f6:be:34:9a:f1:31:6e:69:b0:be:74:41:84:cd:6e:
                    18:93:76:94:52:10:59:43:ba:4d:26:34:e6:f3:f9:
                    3b:bd:b8:e0:82:f1:91:71:3d:e3:9d:da:96:9e:ba:
                    05:5e:d4:d0:da:1b:79:dc:61:16:ba:9e:51:83:37:
                    83:44:d4:43:d5:6f:9e:08:6f:d5:95:65:b1:6e:7f:
                    cc:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                47:1E:C0:57:25:F2:30:DC:C6:46:ED:CE:75:40:66:95:1C:E6:94:E9
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/9e35f34e-43a2-3b16-a35c-58c228211471.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.33.14.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         79:2e:34:b7:e5:8e:ff:34:fd:25:df:91:14:20:51:de:90:8c:
         5c:b4:87:c8:a8:95:1e:56:ad:68:89:4e:09:51:f8:da:f3:8d:
         e5:98:dc:28:b1:1f:b9:fc:70:46:75:06:09:5c:1a:65:ea:71:
         73:a3:c3:02:d6:dc:fe:1f:7e:eb:f4:a5:86:11:57:a1:cc:83:
         52:95:8d:78:00:5e:0f:74:f8:1a:18:ea:65:47:c4:97:50:36:
         48:96:70:aa:45:45:9e:a4:58:8c:33:b2:d7:48:a3:dc:df:51:
         e2:35:6e:00:0a:65:e4:5c:6f:f9:5f:4c:53:63:43:65:7c:df:
         77:7f:04:8a:3e:be:3f:16:e0:a1:f7:56:58:f1:26:38:aa:6c:
         a8:41:25:36:1a:04:05:ec:93:38:c9:33:23:4c:3a:53:85:a9:
         8a:71:c0:a3:8d:cd:d6:9d:b3:5d:dc:6d:82:c0:98:72:f8:58:
         14:61:d0:d4:d6:ff:c6:e7:6d:54:f6:66:ad:7c:24:8e:4e:b0:
         62:8f:f4:52:eb:c1:cc:88:07:c9:41:2d:73:36:0c:29:8f:61:
         8f:58:69:5a:1e:53:7f:9c:1d:1f:e0:53:04:77:21:a6:ac:fa:
         ee:dd:be:fc:29:fe:61:13:ee:ce:ce:19:5b:2d:b2:2d:8d:26:
         2d:96:0b:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 8 10:44:09 2026 by rpki-client