Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/bb385b0b-5ada-48ff-9c34-3440a6550535/33efa0c2-0bcb-3b2d-ad84-64672b3e5978.roa
File:                     33efa0c2-0bcb-3b2d-ad84-64672b3e5978.roa (raw, json)
Hash identifier:          qQiBobYUmZCikv9NGdjBHBcJE6EkxqLD8MPKLjDDdOs=
Subject key identifier:   9B:CA:66:F2:85:39:39:A2:38:35:79:6C:A3:6D:BA:BC:26:63:7C:32
Certificate issuer:       /CN=bb385b0b-5ada-48ff-9c34-3440a6550535
Certificate serial:       010D0C9F4328584DEDE0B5F2B2278E6A11F40280
Authority key identifier: 20:46:74:1D:FD:78:9D:19:30:D4:B8:91:3B:3A:2A:90:05:19:39:51
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/bb385b0b-5ada-48ff-9c34-3440a6550535.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/bb385b0b-5ada-48ff-9c34-3440a6550535/33efa0c2-0bcb-3b2d-ad84-64672b3e5978.roa
Signing time:             Sat 23 May 2026 13:00:31 +0000
ROA not before:           Sat 23 May 2026 13:00:31 +0000
ROA not after:            Fri 21 Aug 2026 13:00:31 +0000
asID:                     46606
IP address blocks:        162.251.82.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/bb385b0b-5ada-48ff-9c34-3440a6550535/bb385b0b-5ada-48ff-9c34-3440a6550535.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/bb385b0b-5ada-48ff-9c34-3440a6550535/bb385b0b-5ada-48ff-9c34-3440a6550535.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/bb385b0b-5ada-48ff-9c34-3440a6550535.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 15 Jun 2026 17:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:ed:e0:b5:f2:b2:27:8e:6a:11:f4:02:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=bb385b0b-5ada-48ff-9c34-3440a6550535
        Validity
            Not Before: May 23 13:00:31 2026 GMT
            Not After : Aug 21 13:00:31 2026 GMT
        Subject: CN=a57a63a3-621a-41f5-b50f-bb005d875b1b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:3b:c4:c5:68:78:b4:4c:6b:b9:d7:47:32:a3:
                    fa:a9:15:d2:d5:56:34:a2:81:4f:3b:0a:ab:a2:16:
                    d3:2b:fd:b9:89:6e:18:43:e5:11:63:c9:de:43:dd:
                    9d:b4:36:96:50:d2:87:74:3e:f1:c0:eb:c4:1c:14:
                    8f:17:83:0b:c4:c2:2c:a6:e4:fb:ac:e3:ed:5b:3d:
                    16:0e:9f:69:be:0f:cb:08:4a:ad:32:ce:44:be:8f:
                    d7:f6:fe:38:ff:7a:75:c6:13:43:e2:33:a3:27:41:
                    08:23:52:03:47:33:15:ca:55:55:c3:1b:5c:2b:3f:
                    7c:cd:c9:d4:51:e2:e3:1a:3a:55:65:54:41:61:d4:
                    2a:05:7b:12:bc:1c:43:b2:72:7d:2c:36:09:e2:be:
                    6b:6b:b0:97:1d:d8:bc:18:44:df:a5:1e:14:82:e5:
                    ec:8d:e8:83:19:e9:4e:13:dd:77:f8:4f:d7:1b:26:
                    43:ae:37:fa:b3:f8:d3:00:35:fb:22:88:a9:1a:3b:
                    56:38:a4:4f:37:54:fb:66:e2:0b:b4:04:26:df:77:
                    70:0e:25:a4:60:18:99:ab:2a:51:6f:8c:77:60:3d:
                    e8:18:14:ea:d7:83:71:46:dc:22:80:e0:e9:54:84:
                    8b:be:b7:6b:fd:f9:37:31:0b:d6:c2:8f:c7:cc:8a:
                    63:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9B:CA:66:F2:85:39:39:A2:38:35:79:6C:A3:6D:BA:BC:26:63:7C:32
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/bb385b0b-5ada-48ff-9c34-3440a6550535/33efa0c2-0bcb-3b2d-ad84-64672b3e5978.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/bb385b0b-5ada-48ff-9c34-3440a6550535/bb385b0b-5ada-48ff-9c34-3440a6550535.crl

            X509v3 Authority Key Identifier:
                keyid:20:46:74:1D:FD:78:9D:19:30:D4:B8:91:3B:3A:2A:90:05:19:39:51

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/bb385b0b-5ada-48ff-9c34-3440a6550535.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  162.251.82.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         79:5a:6e:b6:a9:05:0b:c1:8a:33:f7:27:26:04:3e:4f:8a:26:
         c2:c9:df:ab:e3:60:c0:11:3d:2a:21:30:92:47:c3:ab:f1:a2:
         69:87:2a:40:40:a1:4f:57:85:46:d4:3b:6b:c6:52:a6:64:70:
         dd:81:6e:af:ba:76:e1:d0:49:55:f0:99:55:6a:a9:c5:fe:1d:
         f4:95:c4:ff:1e:ab:30:7b:f2:32:d7:ae:e5:7b:f9:4f:53:82:
         5a:ed:04:36:42:b7:7c:3a:ad:e7:13:c5:24:ea:8c:7e:a5:fd:
         fe:ac:94:c0:e5:6e:3d:22:6a:d9:40:c9:09:a7:a0:8c:b1:83:
         d5:d1:5d:07:4e:d1:65:93:13:16:d9:63:12:98:9b:67:ac:99:
         e3:fd:3b:a7:26:6f:08:a4:a2:c9:b3:e4:8c:5e:fa:75:91:2e:
         ee:a3:76:fa:17:ce:2e:bd:a8:e2:71:69:59:b0:b6:6d:73:3d:
         76:6a:0d:71:9b:c6:3e:73:0d:d2:29:e8:fa:b2:bb:ac:bf:41:
         f6:47:ee:11:61:0c:79:3c:41:5a:d0:22:2b:a5:aa:ed:15:4c:
         20:49:cf:c7:b5:9d:db:02:1b:50:f1:b9:00:47:ad:25:df:13:
         9c:1e:2e:15:71:bf:6e:22:2a:88:07:43:0b:25:af:37:18:3b:
         68:7a:74:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 14 08:37:01 2026 by rpki-client