Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade82d5de410183f68661084b86/0/AS33119.roa
File:                     AS33119.roa (raw, json)
Hash identifier:          dSvyI70B8VPVI0YZOJXFhn0Ve1P5MbG45nqHG4O9pbs=
Subject key identifier:   65:DF:86:34:71:9C:E5:FC:36:C0:95:5C:17:62:87:B7:79:BD:EB:B0
Certificate issuer:       /CN=1ff4e25c458e44e252922dcf512a568dfe098242d00cb65a3d
Certificate serial:       7C521064ACDFA749CDACF194CEBD641D6B408F5B
Authority key identifier: 00:99:DE:AB:07:3E:FD:74:C2:50:C0:A3:82:B2:50:12:B5:08:2A:EE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/30d422dc-98d1-4304-9f8a-097127e15d5e/1ff4e25c458e44e252922dcf512a568dfe098242d00cb65a3d.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848ade82d5de410183f68661084b86/0/AS33119.roa
Signing time:             Thu 16 Apr 2026 14:28:01 +0000
ROA not before:           Thu 16 Apr 2026 14:23:01 +0000
ROA not after:            Thu 15 Apr 2027 14:28:01 +0000
asID:                     33119
IP address blocks:        45.54.31.0/24 maxlen: 24
                          2607:f740:e039::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848ade82d5de410183f68661084b86/0/0099DEAB073EFD74C250C0A382B25012B5082AEE.crl
                          rsync://rpki-rps.arin.net/repository/8a848ade82d5de410183f68661084b86/0/0099DEAB073EFD74C250C0A382B25012B5082AEE.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/30d422dc-98d1-4304-9f8a-097127e15d5e/1ff4e25c458e44e252922dcf512a568dfe098242d00cb65a3d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/30d422dc-98d1-4304-9f8a-097127e15d5e/30d422dc-98d1-4304-9f8a-097127e15d5e.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/30d422dc-98d1-4304-9f8a-097127e15d5e/30d422dc-98d1-4304-9f8a-097127e15d5e.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/30d422dc-98d1-4304-9f8a-097127e15d5e.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 18 Apr 2026 07:45:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7c:52:10:64:ac:df:a7:49:cd:ac:f1:94:ce:bd:64:1d:6b:40:8f:5b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1ff4e25c458e44e252922dcf512a568dfe098242d00cb65a3d
        Validity
            Not Before: Apr 16 14:23:01 2026 GMT
            Not After : Apr 15 14:28:01 2027 GMT
        Subject: CN=65DF8634719CE5FC36C0955C176287B779BDEBB0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:a6:0e:22:63:fc:23:a8:ca:37:80:a7:e6:c8:
                    dc:e0:3d:1c:bf:18:8a:40:f0:fe:b9:a7:99:6a:78:
                    6e:60:38:6c:37:22:b8:e6:87:d5:bc:be:aa:cf:76:
                    4c:9c:f0:81:ef:5c:1e:0c:53:6b:6e:dc:cd:bd:b5:
                    01:fc:b0:3e:54:e8:ee:48:22:1f:cb:89:d8:c3:0c:
                    8b:20:8b:37:73:34:a3:91:c2:d5:93:b0:e7:12:5a:
                    6f:18:95:08:40:c4:e0:a8:99:32:fc:34:f7:1c:f6:
                    2c:5f:6e:e7:a2:98:c6:00:92:8d:90:66:d6:91:64:
                    52:9c:4c:3d:d5:ee:fe:93:df:1b:0b:f1:24:f9:63:
                    d3:2d:78:5e:62:55:fc:71:a6:85:3d:e7:32:a1:5a:
                    a4:fe:57:f8:c0:9b:d3:f4:3b:59:a5:48:d7:bf:14:
                    0d:c9:60:f9:0a:0c:06:e4:99:95:62:e6:46:1c:fa:
                    67:24:0f:6f:bd:68:4f:9d:05:9b:ad:a9:53:0a:44:
                    ac:48:44:12:bf:00:9a:55:ac:75:3a:1f:b4:62:d4:
                    5f:a6:19:9d:fe:be:96:9d:20:1b:fc:4d:eb:e0:62:
                    4a:d3:0f:4e:75:0b:cc:70:cc:1f:c8:ae:35:b9:6b:
                    1f:0d:ac:23:a5:25:92:aa:69:63:55:32:e6:bd:63:
                    44:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                65:DF:86:34:71:9C:E5:FC:36:C0:95:5C:17:62:87:B7:79:BD:EB:B0
            X509v3 Authority Key Identifier:
                keyid:00:99:DE:AB:07:3E:FD:74:C2:50:C0:A3:82:B2:50:12:B5:08:2A:EE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848ade82d5de410183f68661084b86/0/0099DEAB073EFD74C250C0A382B25012B5082AEE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/30d422dc-98d1-4304-9f8a-097127e15d5e/1ff4e25c458e44e252922dcf512a568dfe098242d00cb65a3d.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade82d5de410183f68661084b86/0/AS33119.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.54.31.0/24
                IPv6:
                  2607:f740:e039::/48

    Signature Algorithm: sha256WithRSAEncryption
         9d:0a:61:dd:e0:ad:72:53:b7:69:42:16:86:93:7e:0e:e7:f7:
         6a:16:6d:9f:26:1d:93:c1:84:da:43:f3:3e:08:4b:d6:5c:96:
         1a:55:94:c7:71:30:59:fd:a9:91:13:82:5d:ff:84:a4:b2:50:
         7e:f1:ae:85:7a:09:8b:30:b3:64:52:11:9d:f9:35:79:21:6c:
         35:ee:22:4e:df:7e:19:63:a0:0e:7a:a6:23:7c:ca:32:9e:1e:
         19:e6:ca:65:e5:11:0f:52:6e:43:50:71:a9:05:cc:db:47:47:
         4e:5b:55:70:dc:47:9b:78:33:94:2d:3f:09:62:b7:60:a7:b1:
         98:b9:dd:16:56:8a:24:bc:6b:d0:24:df:12:2f:2c:a4:67:72:
         cb:44:79:7c:ee:28:71:7a:ae:86:56:7b:e0:ac:3c:08:76:3b:
         14:37:6f:b3:44:55:67:82:c2:c1:e4:92:06:2f:c3:97:62:35:
         73:af:96:86:b7:67:38:3e:3f:99:5c:0b:6c:58:3a:4a:4f:70:
         49:36:26:09:c6:22:01:44:1a:cc:55:b5:1e:6d:98:ca:55:84:
         67:1a:7a:cf:51:48:bd:86:8b:5e:1d:ca:75:a0:c2:f4:f0:13:
         1a:05:44:17:1f:f3:e2:05:74:0a:0d:49:04:30:71:e8:2e:79:
         9a:46:5c:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 15:10:00 2026 by rpki-client