Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d/e931d73a-833f-3c1c-9873-205a860542f5.roa
File:                     e931d73a-833f-3c1c-9873-205a860542f5.roa (raw, json)
Hash identifier:          F/tecBRjZ/r5m86Q43ZdJ58dZdEzpsQSy5NLzJ2N2gs=
Subject key identifier:   CB:15:1F:0C:43:CB:E2:6B:E0:FD:BD:9A:47:EF:4F:BF:3A:9F:A7:0B
Certificate issuer:       /CN=23ddb57b-8888-40f4-bf17-518b6a50512d
Certificate serial:       010D0C9F4328584CF892B6B66C9AB9045E01AE00
Authority key identifier: 17:88:7D:65:E8:CC:18:17:F2:EC:48:B8:91:53:8B:39:B3:F2:2D:74
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d/e931d73a-833f-3c1c-9873-205a860542f5.roa
Signing time:             Tue 24 Feb 2026 16:10:43 +0000
ROA not before:           Tue 24 Feb 2026 16:10:43 +0000
ROA not after:            Mon 25 May 2026 15:10:43 +0000
asID:                     0
IP address blocks:        63.133.0.0/17 maxlen: 17
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d/23ddb57b-8888-40f4-bf17-518b6a50512d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d/23ddb57b-8888-40f4-bf17-518b6a50512d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 04 Mar 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:f8:92:b6:b6:6c:9a:b9:04:5e:01:ae:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=23ddb57b-8888-40f4-bf17-518b6a50512d
        Validity
            Not Before: Feb 24 16:10:43 2026 GMT
            Not After : May 25 15:10:43 2026 GMT
        Subject: CN=d711c390-7636-4e8f-bf96-12b37ac1d213
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:00:29:c9:29:82:0b:9d:bf:b3:db:4c:f7:d7:
                    25:3d:fa:76:e4:bd:79:b0:9c:d7:82:83:c4:d3:4f:
                    e6:4f:32:ff:11:2c:9d:9a:5d:1b:87:99:f2:cc:ef:
                    5a:c9:e9:4a:25:3e:2c:7f:bf:19:38:22:77:a1:5b:
                    de:62:32:55:18:63:d1:30:40:d2:33:d3:85:de:bd:
                    fb:ab:b2:ee:67:74:fb:ec:92:ff:a9:46:ad:3d:c1:
                    32:78:ce:59:7b:d7:b0:b3:14:f3:da:f0:d4:54:a9:
                    3d:98:e7:cd:02:b7:34:97:dc:3b:fe:64:56:a5:41:
                    14:d7:30:28:67:ff:0a:a3:f8:0b:0d:1d:aa:c1:c4:
                    89:41:80:67:e5:3a:4e:04:7a:bb:e7:f8:88:91:2d:
                    66:1f:60:5f:e6:ac:74:bd:72:82:7b:a8:59:ea:3a:
                    e7:13:d7:08:c7:0f:8b:ca:3f:26:c7:6f:cb:a0:9f:
                    c9:d2:d6:b8:0f:e9:a3:8d:b4:dc:51:48:bb:8b:4e:
                    a9:e6:55:e8:9d:28:9c:01:a2:1c:12:b8:72:e8:62:
                    c6:2a:2b:e1:5a:85:0d:19:64:16:06:ab:e1:06:2c:
                    93:18:e9:f8:21:f8:f9:1e:ab:41:8b:20:cc:3a:a1:
                    5a:68:ab:fe:22:d2:e8:4c:74:28:e2:d8:4f:63:14:
                    c8:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CB:15:1F:0C:43:CB:E2:6B:E0:FD:BD:9A:47:EF:4F:BF:3A:9F:A7:0B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d/e931d73a-833f-3c1c-9873-205a860542f5.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d/23ddb57b-8888-40f4-bf17-518b6a50512d.crl

            X509v3 Authority Key Identifier:
                keyid:17:88:7D:65:E8:CC:18:17:F2:EC:48:B8:91:53:8B:39:B3:F2:2D:74

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  63.133.0.0/17

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         87:a0:37:ae:fd:f5:0f:de:e8:d3:73:7b:c6:ec:dc:1a:b2:67:
         e0:ce:d0:bd:fc:bb:7d:5d:01:7d:ed:c7:9b:3c:07:62:9b:51:
         2c:c1:e0:46:3a:a9:85:fd:62:28:b8:3b:2a:ca:3c:65:69:0d:
         b4:d2:9a:a8:ab:66:44:e2:d1:c3:57:2b:96:d3:08:e0:4d:fb:
         a6:c2:15:96:be:1a:53:29:9d:fc:2a:37:b4:e2:b6:88:2d:a0:
         03:f4:4f:42:a4:a0:bf:37:2e:af:8b:d6:f3:d5:92:4b:60:8c:
         f4:37:18:dc:da:b4:6e:03:93:cd:24:f5:0e:b6:83:8f:5d:2b:
         37:f5:d1:f6:5e:b7:a7:e2:4d:da:8f:22:52:22:0b:8a:61:5c:
         55:6e:55:81:00:d3:4a:4d:cc:20:83:4c:03:f4:fe:ff:24:3b:
         41:53:37:5b:4b:80:e5:44:1b:0b:ec:21:91:5c:4b:fc:62:fd:
         99:f5:15:d5:6f:d7:c0:d9:37:37:94:58:ed:e6:e9:a8:c2:9c:
         f2:25:5e:16:2e:bd:cc:da:fb:29:cc:07:a4:a2:12:81:d0:d6:
         b1:86:87:bf:3d:10:f6:e0:f3:77:0d:9b:69:1f:bd:1e:6c:bf:
         20:12:62:da:48:22:23:4c:37:bf:a9:05:3d:78:27:a8:60:19:
         cd:c2:3c:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 19:59:49 2026 by rpki-client