Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/99f49497-e145-4e4e-895c-2a7825ca6508/f3357a76-a2e7-37a8-a963-683c8666e44b.roa
File:                     f3357a76-a2e7-37a8-a963-683c8666e44b.roa (raw, json)
Hash identifier:          bd1O4PFE6FxpiVjQ3ncARWX0TIpy0egnflVEw5WW6NQ=
Subject key identifier:   49:5A:3E:7C:7B:D0:A1:E7:F6:7E:4F:F3:CD:5E:D4:AE:1C:EB:42:EF
Certificate issuer:       /CN=99f49497-e145-4e4e-895c-2a7825ca6508
Certificate serial:       010D0C9F4328584EA78865941AD980572D130900
Authority key identifier: 2E:21:56:94:21:EA:A7:3F:43:08:43:7F:A4:6B:37:3C:50:4F:97:D4
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/99f49497-e145-4e4e-895c-2a7825ca6508.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/99f49497-e145-4e4e-895c-2a7825ca6508/f3357a76-a2e7-37a8-a963-683c8666e44b.roa
Signing time:             Wed 29 Jul 2026 01:00:12 +0000
ROA not before:           Wed 29 Jul 2026 01:00:12 +0000
ROA not after:            Tue 27 Oct 2026 01:00:12 +0000
asID:                     400703
IP address blocks:        162.33.190.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/99f49497-e145-4e4e-895c-2a7825ca6508/99f49497-e145-4e4e-895c-2a7825ca6508.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/99f49497-e145-4e4e-895c-2a7825ca6508/99f49497-e145-4e4e-895c-2a7825ca6508.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/99f49497-e145-4e4e-895c-2a7825ca6508.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 01 Aug 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:a7:88:65:94:1a:d9:80:57:2d:13:09:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=99f49497-e145-4e4e-895c-2a7825ca6508
        Validity
            Not Before: Jul 29 01:00:12 2026 GMT
            Not After : Oct 27 01:00:12 2026 GMT
        Subject: CN=9a6e69bb-49f2-4257-98ab-aad710e99dcb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:9b:a0:cd:44:ae:af:a5:af:9a:cb:54:9d:9e:
                    61:48:6b:ee:7a:7b:87:33:a5:ef:1d:f0:81:e9:a5:
                    34:80:4f:0b:82:dd:eb:97:fa:62:bb:75:f4:06:f5:
                    75:ab:35:1c:15:c7:9b:2e:30:ac:b3:d9:64:65:aa:
                    e3:13:e1:2d:9f:63:2b:87:10:23:5b:58:fc:b0:a9:
                    e6:e5:ee:74:3b:fb:b9:eb:12:88:a3:82:17:f6:24:
                    60:98:26:72:72:57:e4:03:a9:82:ce:82:4a:7e:b3:
                    9e:e8:fd:49:96:b6:a2:2c:a2:b0:80:08:30:04:43:
                    93:ea:ee:74:3f:af:0f:da:91:0c:fb:26:f4:86:7d:
                    b2:30:bf:1a:a2:56:1c:a1:0f:aa:ed:42:5c:e9:d4:
                    b6:eb:2a:e6:6d:bb:4e:be:37:c8:1f:6c:ca:02:7e:
                    e6:35:07:a3:2b:bd:11:a6:82:89:c0:bf:1c:b1:e0:
                    05:ba:77:98:c1:80:94:e3:75:67:a2:54:b6:38:de:
                    2f:a3:85:c7:97:fa:40:3e:a6:37:c7:3b:b4:29:7d:
                    98:ec:8c:b1:85:e4:4c:aa:47:51:60:60:b5:cf:16:
                    cd:01:20:6e:c3:6c:da:6e:44:51:b8:41:48:eb:e1:
                    4b:0d:89:fe:7f:7d:e0:b2:8b:97:78:a1:92:26:36:
                    92:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                49:5A:3E:7C:7B:D0:A1:E7:F6:7E:4F:F3:CD:5E:D4:AE:1C:EB:42:EF
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/99f49497-e145-4e4e-895c-2a7825ca6508/f3357a76-a2e7-37a8-a963-683c8666e44b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/99f49497-e145-4e4e-895c-2a7825ca6508/99f49497-e145-4e4e-895c-2a7825ca6508.crl

            X509v3 Authority Key Identifier:
                keyid:2E:21:56:94:21:EA:A7:3F:43:08:43:7F:A4:6B:37:3C:50:4F:97:D4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/99f49497-e145-4e4e-895c-2a7825ca6508.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  162.33.190.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         41:bd:cc:f4:7d:a8:a1:4b:ba:ad:57:56:a7:f1:33:23:c3:24:
         a3:37:a9:1b:2b:20:6b:f9:66:e8:72:76:e4:d4:33:f5:87:1c:
         04:ef:76:25:72:50:2b:c2:36:24:74:95:cf:08:07:2d:c9:9b:
         f1:ca:12:16:52:67:f0:6f:1d:12:ac:82:4d:ad:f7:00:b8:10:
         b6:9c:dc:77:e4:a4:60:2e:84:d5:91:c2:1f:62:c1:54:df:b8:
         e5:cf:d4:83:47:30:9f:22:96:0a:a8:7b:8e:c1:46:ba:8c:e8:
         49:62:af:15:b0:c5:bc:ea:84:0c:3d:cf:98:65:b6:4e:42:43:
         5c:ab:ab:01:3f:b5:18:eb:87:5d:0e:d7:c2:c7:66:b8:2c:e2:
         87:10:9c:f5:44:d6:3c:fd:c1:63:da:e2:3b:4e:cf:4c:bb:a5:
         04:f5:cd:8d:89:8c:ee:21:68:35:cf:d8:61:1c:72:8b:1a:9e:
         6c:d5:28:f2:62:df:97:fb:e6:6e:56:1d:a8:6c:f6:8b:21:60:
         aa:29:75:70:74:b1:36:30:34:ef:35:b6:11:ea:53:56:5d:81:
         ea:aa:24:c6:a9:4f:41:bc:f7:1c:51:3e:12:ed:2d:14:b7:f6:
         45:d6:d6:93:53:47:01:5e:41:f2:64:9e:93:e4:7e:b4:91:74:
         dc:c7:75:72
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE6niGWUGtmAVy0TCQAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkOTlmNDk0OTctZTE0NS00ZTRlLTg5NWMtMmE3ODI1Y2E2
NTA4MB4XDTI2MDcyOTAxMDAxMloXDTI2MTAyNzAxMDAxMlowLzEtMCsGA1UEAxMk
OWE2ZTY5YmItNDlmMi00MjU3LTk4YWItYWFkNzEwZTk5ZGNiMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEApJugzUSur6WvmstUnZ5hSGvuenuHM6XvHfCB
6aU0gE8Lgt3rl/piu3X0BvV1qzUcFcebLjCss9lkZarjE+Etn2MrhxAjW1j8sKnm
5e50O/u56xKIo4IX9iRgmCZyclfkA6mCzoJKfrOe6P1JlraiLKKwgAgwBEOT6u50
P68P2pEM+yb0hn2yML8aolYcoQ+q7UJc6dS26yrmbbtOvjfIH2zKAn7mNQejK70R
poKJwL8cseAFuneYwYCU43VnolS2ON4vo4XHl/pAPqY3xzu0KX2Y7IyxheRMqkdR
YGC1zxbNASBuw2zabkRRuEFI6+FLDYn+f33gsouXeKGSJjaStQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFElaPnx70KHn9n5P881e1K4c60LvMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy85OWY0
OTQ5Ny1lMTQ1LTRlNGUtODk1Yy0yYTc4MjVjYTY1MDgvZjMzNTdhNzYtYTJlNy0z
N2E4LWE5NjMtNjgzYzg2NjZlNDRiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h
NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvOTlmNDk0OTctZTE0NS00ZTRlLTg5
NWMtMmE3ODI1Y2E2NTA4Lzk5ZjQ5NDk3LWUxNDUtNGU0ZS04OTVjLTJhNzgyNWNh
NjUwOC5jcmwwHwYDVR0jBBgwFoAULiFWlCHqpz9DCEN/pGs3PFBPl9QwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi
Zi05NTg2LTkyZGQ0OWVmMzIyMy85OWY0OTQ5Ny1lMTQ1LTRlNGUtODk1Yy0yYTc4
MjVjYTY1MDguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAoiG+MFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAEG9zPR9qKFLuq1XVqfxMyPDJKM3qRsrIGv5ZuhyduTUM/WHHATvdiVy
UCvCNiR0lc8IBy3Jm/HKEhZSZ/BvHRKsgk2t9wC4ELac3HfkpGAuhNWRwh9iwVTf
uOXP1INHMJ8ilgqoe47BRrqM6ElirxWwxbzqhAw9z5hltk5CQ1yrqwE/tRjrh10O
18LHZrgs4ocQnPVE1jz9wWPa4jtOz0y7pQT1zY2JjO4haDXP2GEccosanmzVKPJi
35f75m5WHahs9oshYKopdXB0sTYwNO81thHqU1ZdgeqqJMapT0G89xxRPhLtLRS3
9kXW1pNTRwFeQfJknpPkfrSRdNzHdXI=
-----END CERTIFICATE-----
Generated at Thu Jul 30 06:49:56 2026 by rpki-client