Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/b26cb15a-5ce1-3564-8b49-fe5462cd06e6.roa
File:                     b26cb15a-5ce1-3564-8b49-fe5462cd06e6.roa (raw, json)
Hash identifier:          p9XIWML34BB8FwaFx5uJl1pngPZe703wR1pVO8Xh5Z4=
Subject key identifier:   84:C2:1B:CE:67:AF:26:13:5B:A6:A9:58:24:15:80:BA:78:C2:C3:1E
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584E61457752C361474052BCE840
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/b26cb15a-5ce1-3564-8b49-fe5462cd06e6.roa
Signing time:             Fri 03 Jul 2026 21:00:11 +0000
ROA not before:           Fri 03 Jul 2026 21:00:11 +0000
ROA not after:            Thu 01 Oct 2026 21:00:11 +0000
asID:                     396574
IP address blocks:        192.33.14.30/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 26 Jul 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:61:45:77:52:c3:61:47:40:52:bc:e8:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Jul  3 21:00:11 2026 GMT
            Not After : Oct  1 21:00:11 2026 GMT
        Subject: CN=53624571-7792-4791-b577-10eb958f5364
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:f9:34:ef:85:9a:a8:ae:c9:03:09:85:11:8e:
                    79:9a:8b:28:a0:9a:be:0c:08:c5:9d:37:25:50:c9:
                    17:14:28:fd:96:55:7e:e3:df:b3:11:60:b3:2a:fe:
                    a4:18:e7:4c:5d:89:65:d9:31:96:43:46:87:cc:e4:
                    41:43:4a:91:7d:78:db:44:6a:be:cf:cc:f4:9e:1c:
                    42:9d:1c:b3:c9:58:72:7c:4d:b7:bf:a3:b5:00:a7:
                    9d:e7:78:1f:92:7d:f9:39:7e:7e:1c:13:c8:5f:97:
                    77:cb:b2:59:76:9e:a7:ae:f8:b2:33:3a:9c:d5:99:
                    fa:4d:b7:1f:9a:7d:4b:82:af:62:7b:6a:c6:05:d6:
                    43:2a:bb:5e:d0:81:67:8c:67:cf:38:a5:60:e9:6a:
                    30:a8:ea:33:a8:2d:ad:2e:2f:35:30:c2:4d:aa:63:
                    24:57:d4:5a:7b:ae:a0:34:02:ae:cb:c8:ed:aa:cd:
                    a6:64:14:2d:42:80:19:bf:3a:fe:1c:a2:5c:eb:63:
                    73:43:67:e0:25:23:b6:2e:91:12:49:66:db:08:e9:
                    8d:86:f1:af:6c:3a:46:21:57:a0:06:8f:bc:e0:81:
                    08:c6:dc:60:d6:5f:39:f8:a8:ba:52:a1:3e:8e:59:
                    40:13:4e:e5:f6:a0:0b:e7:c8:45:01:c1:ef:73:7c:
                    ed:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                84:C2:1B:CE:67:AF:26:13:5B:A6:A9:58:24:15:80:BA:78:C2:C3:1E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/b26cb15a-5ce1-3564-8b49-fe5462cd06e6.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.33.14.30/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         88:87:b8:da:15:44:3a:dd:cd:7e:0a:58:ce:fc:d1:2c:02:b5:
         62:fd:ed:2d:54:a8:bd:33:89:d4:86:73:f2:96:8c:85:b8:30:
         18:d1:98:e1:e1:58:c8:c4:7f:75:cc:bd:5f:7a:9e:d5:12:da:
         1a:bb:94:77:6d:d2:f9:a3:31:e5:0c:bd:12:bf:e3:0b:48:c6:
         f7:0d:3d:93:a6:e2:9c:19:d2:e6:73:2f:17:6b:9d:a7:05:bb:
         d1:c3:64:2a:fa:81:96:eb:ca:c7:a4:e2:65:91:f2:fa:57:6b:
         c1:7e:73:0e:57:54:db:9c:31:fd:6f:b2:d0:ec:57:20:e7:f9:
         2e:58:4f:f7:f9:cd:9e:49:25:5a:49:a1:eb:41:26:a8:b4:82:
         0a:6d:ae:b7:1d:0f:67:31:98:a4:dd:80:e1:40:1c:8d:02:1b:
         16:cf:da:ac:3d:74:3d:d4:7d:2d:e6:9f:4b:ff:ee:f4:9f:ee:
         c2:f1:20:84:42:34:f0:54:9f:99:22:dd:c2:39:56:41:9a:78:
         87:9a:40:2d:f3:06:2c:f6:8f:49:e4:40:58:47:3c:3d:67:97:
         d0:45:d3:9a:21:cf:23:1e:df:ee:5e:96:4f:8a:b3:43:e1:30:
         fd:b3:7f:bb:53:bc:dd:c2:d3:62:ea:b2:94:7e:45:e4:c8:8f:
         ef:f7:01:e9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 10:57:21 2026 by rpki-client