Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade82d5de410183f68661084b86/0/AS33119.roa
File:                     AS33119.roa (raw, json)
Hash identifier:          ciuYbidUIJro6P0AtUWUNg7Y3JGW6x1eTht1ta80cxY=
Subject key identifier:   47:F6:5E:11:55:49:70:E9:C6:2C:70:D0:15:90:52:65:27:B0:F7:56
Certificate issuer:       /CN=1ff4e25c458e44e252922dcf512a568dfe098242d00cb65a3d
Certificate serial:       7A7EDDDFB297DBEF5C09365681FB0514057E0445
Authority key identifier: 00:99:DE:AB:07:3E:FD:74:C2:50:C0:A3:82:B2:50:12:B5:08:2A:EE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/30d422dc-98d1-4304-9f8a-097127e15d5e/1ff4e25c458e44e252922dcf512a568dfe098242d00cb65a3d.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848ade82d5de410183f68661084b86/0/AS33119.roa
Signing time:             Fri 15 May 2026 22:39:46 +0000
ROA not before:           Fri 15 May 2026 22:34:46 +0000
ROA not after:            Fri 14 May 2027 22:39:46 +0000
asID:                     33119
IP address blocks:        45.54.31.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848ade82d5de410183f68661084b86/0/0099DEAB073EFD74C250C0A382B25012B5082AEE.crl
                          rsync://rpki-rps.arin.net/repository/8a848ade82d5de410183f68661084b86/0/0099DEAB073EFD74C250C0A382B25012B5082AEE.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/30d422dc-98d1-4304-9f8a-097127e15d5e/1ff4e25c458e44e252922dcf512a568dfe098242d00cb65a3d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/30d422dc-98d1-4304-9f8a-097127e15d5e/30d422dc-98d1-4304-9f8a-097127e15d5e.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/30d422dc-98d1-4304-9f8a-097127e15d5e/30d422dc-98d1-4304-9f8a-097127e15d5e.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/30d422dc-98d1-4304-9f8a-097127e15d5e.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 13 Jun 2026 23:53:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7a:7e:dd:df:b2:97:db:ef:5c:09:36:56:81:fb:05:14:05:7e:04:45
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1ff4e25c458e44e252922dcf512a568dfe098242d00cb65a3d
        Validity
            Not Before: May 15 22:34:46 2026 GMT
            Not After : May 14 22:39:46 2027 GMT
        Subject: CN=47F65E11554970E9C62C70D01590526527B0F756
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:de:87:e5:c9:e8:08:4b:07:56:f0:eb:c4:c2:b5:
                    06:75:76:f4:0c:8b:f2:04:c6:a4:89:ef:e8:1c:3f:
                    60:6d:4b:4f:5e:77:7a:07:a0:1e:e4:e3:47:e6:02:
                    24:db:1c:e5:07:cc:a4:ad:83:79:f6:73:06:2b:81:
                    f0:db:70:de:26:e4:7b:db:13:28:74:f0:cd:e6:9c:
                    c5:24:d5:08:1b:a7:74:50:03:4f:04:cd:82:3d:bc:
                    8d:87:8e:38:21:85:e8:9c:73:62:8e:55:22:07:27:
                    4d:96:ea:1c:a7:1a:b6:b9:3e:61:3f:67:60:a4:89:
                    52:5c:11:42:0d:1d:ed:da:37:5a:8f:64:0d:06:d9:
                    ce:11:cc:4e:8d:fd:69:4c:91:b1:ac:da:27:d8:46:
                    bb:8a:2c:f2:36:db:51:ac:c4:31:76:94:00:bc:73:
                    50:ae:48:ff:67:c4:65:d8:8d:04:3e:07:96:2b:1e:
                    38:35:eb:c5:e8:03:20:94:2f:dd:96:c5:d8:29:dc:
                    a2:03:b8:56:65:57:8a:5f:64:77:c5:3b:68:ef:d7:
                    0a:d3:ea:0d:bd:f5:25:cd:59:16:da:6f:07:76:3b:
                    03:d1:64:77:30:3f:86:dd:57:02:67:37:da:4b:76:
                    04:09:d7:ed:1b:6b:67:6f:07:cf:86:05:f2:a9:41:
                    a8:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                47:F6:5E:11:55:49:70:E9:C6:2C:70:D0:15:90:52:65:27:B0:F7:56
            X509v3 Authority Key Identifier:
                keyid:00:99:DE:AB:07:3E:FD:74:C2:50:C0:A3:82:B2:50:12:B5:08:2A:EE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848ade82d5de410183f68661084b86/0/0099DEAB073EFD74C250C0A382B25012B5082AEE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/30d422dc-98d1-4304-9f8a-097127e15d5e/1ff4e25c458e44e252922dcf512a568dfe098242d00cb65a3d.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade82d5de410183f68661084b86/0/AS33119.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.54.31.0/24

    Signature Algorithm: sha256WithRSAEncryption
         56:31:47:59:27:eb:82:3d:63:6b:01:9d:bd:82:c8:b1:f8:05:
         68:95:08:38:8d:a8:b7:4a:fa:60:31:1a:c6:66:1b:0c:e6:ce:
         1a:a0:74:4a:12:66:53:2a:85:c8:a5:69:06:73:68:0f:9f:c5:
         52:27:99:29:b3:f4:b9:09:50:8c:2e:2f:fe:41:a3:e2:1a:38:
         a9:2c:6a:e5:34:c9:15:3e:ed:72:e7:16:eb:8a:72:51:f4:67:
         55:9b:84:c5:a1:35:17:ce:21:4b:f6:e1:db:f6:18:89:d6:23:
         48:e4:d3:79:b6:f5:3e:af:7d:a7:e1:1b:32:e6:89:c1:32:26:
         50:69:fd:99:14:78:ac:e2:a2:94:0c:b7:ad:79:1f:d6:93:0f:
         50:25:d1:ac:57:ca:03:5d:b3:bc:c7:38:fe:1a:a1:5e:0e:99:
         9b:3b:b9:67:07:03:4f:d7:8a:b7:06:02:83:e2:1d:96:ce:42:
         e6:8c:20:cd:74:52:4d:6b:3d:65:b5:f7:89:39:2f:d3:67:6e:
         f7:92:36:ce:f1:6b:c2:d6:49:ba:82:89:1a:d6:2c:98:76:10:
         d2:be:0d:40:48:fd:01:58:b9:95:3e:3a:52:93:1a:7f:ed:50:
         f0:b7:dd:8a:69:e6:9a:72:94:6c:0a:91:2d:dd:00:2c:78:92:
         f8:19:ec:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 08:13:05 2026 by rpki-client