Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/ce33d5db-d147-32b6-a3bd-2e0dd7e18f84.roa
File:                     ce33d5db-d147-32b6-a3bd-2e0dd7e18f84.roa (raw, json)
Hash identifier:          p4nP3rt66mEhKG+Y4Y9TXp38NxASo6X1u0hSAvzShoQ=
Subject key identifier:   14:5A:5A:68:96:26:FB:0F:CE:72:E5:96:A9:41:6B:AC:28:1E:11:85
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584D97556314D79C62734B953D20
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/ce33d5db-d147-32b6-a3bd-2e0dd7e18f84.roa
Signing time:             Wed 22 Apr 2026 13:00:32 +0000
ROA not before:           Wed 22 Apr 2026 13:00:32 +0000
ROA not after:            Tue 21 Jul 2026 13:00:32 +0000
asID:                     36624
IP address blocks:        192.34.234.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 15 May 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:97:55:63:14:d7:9c:62:73:4b:95:3d:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Apr 22 13:00:32 2026 GMT
            Not After : Jul 21 13:00:32 2026 GMT
        Subject: CN=e0769cda-d6a4-4040-b461-926451ca75f7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:6e:fe:1f:2e:b0:3d:01:b0:f7:ed:f9:c8:49:
                    a3:ba:ef:86:be:ca:4d:52:25:e1:a3:b6:40:bf:bb:
                    94:3b:c9:5e:00:9b:cf:40:ff:56:7e:e1:42:bb:59:
                    c3:e4:12:97:21:08:30:cd:64:7f:32:86:86:fc:0b:
                    6b:05:dc:94:a0:2b:e5:73:09:2e:cc:f8:84:ad:01:
                    53:71:1d:2e:45:79:b5:c6:8e:39:e2:7f:a4:c4:c9:
                    9b:a8:ff:99:92:61:4c:88:ab:d3:f4:cb:9c:7c:6d:
                    cd:16:cf:e1:79:72:9c:e6:3b:17:dc:d5:f1:63:3a:
                    bd:2f:28:53:9c:fc:c7:c1:cc:b0:f0:df:37:e6:71:
                    0e:33:1c:93:05:64:63:e4:bd:93:93:d1:b6:e4:7b:
                    98:9b:05:26:7e:c3:b5:62:d3:e7:69:7f:2d:98:b5:
                    08:2c:21:b1:a0:73:bb:a4:a6:38:06:0f:90:3d:fc:
                    5e:bd:d4:ba:27:f4:8c:45:fc:5d:c5:45:ed:dc:fd:
                    ba:4b:39:ba:e4:21:94:ae:ce:5c:6e:fe:eb:a5:7d:
                    b7:fc:09:69:64:8c:a0:14:79:c1:f3:81:8e:58:96:
                    70:89:19:a1:0f:42:fd:16:d1:76:a1:1a:60:d3:df:
                    be:59:5c:db:29:f7:b8:5e:22:e9:1d:90:1f:df:14:
                    5b:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                14:5A:5A:68:96:26:FB:0F:CE:72:E5:96:A9:41:6B:AC:28:1E:11:85
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/ce33d5db-d147-32b6-a3bd-2e0dd7e18f84.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.34.234.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         62:64:57:9a:07:b7:4f:64:9a:25:31:98:57:6b:ec:b7:12:bf:
         c3:91:80:69:06:21:8b:41:d7:f5:1d:24:c1:8d:dd:4b:f6:08:
         14:5b:f3:ce:af:d9:38:bb:aa:dc:75:53:43:d0:d5:ce:de:e8:
         bd:0d:c6:08:60:33:a3:2a:b2:3b:f1:3c:a9:15:18:0f:c6:91:
         51:ac:7d:28:e2:05:0f:e2:80:0a:f9:8c:75:1d:38:61:f1:ae:
         e4:99:4a:83:6f:d4:e0:9f:8e:83:2c:2f:fe:af:ee:55:b6:0f:
         55:a8:c8:74:50:b9:3f:b5:59:e9:52:7e:9b:48:34:53:f2:10:
         ab:6c:3c:e6:73:b4:42:78:93:b9:99:87:af:10:ac:91:98:d5:
         1a:a9:a0:88:3a:50:b2:b9:74:3c:4d:d5:dd:fe:d8:f7:0a:fa:
         ad:0e:e2:af:37:dc:70:e9:61:7f:3e:b7:a9:94:98:d6:69:df:
         88:e4:ab:ed:4c:c1:a3:a4:56:29:9f:b7:62:09:1c:e7:7c:40:
         10:a8:13:fe:11:4b:db:49:3d:e6:7c:4d:1f:3c:22:be:bd:b5:
         a6:6f:16:35:9b:83:01:d9:17:86:e5:e7:1c:26:8c:0e:85:1f:
         3e:0d:eb:2b:07:07:66:ca:28:2e:7e:3a:3f:6e:26:f1:45:4b:
         95:cb:0a:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 06:43:42 2026 by rpki-client