Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/33d43b71-2f0a-3d9e-891d-701b5c6c9c07.roa
File:                     33d43b71-2f0a-3d9e-891d-701b5c6c9c07.roa (raw, json)
Hash identifier:          I3ESOJ16EhOwlZgAvgC0VmSuGBal+ADDBTaugnq8emQ=
Subject key identifier:   0D:7C:D5:D7:18:E7:0D:1E:16:C3:7C:C9:54:52:BA:B2:23:C8:53:55
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F4328584CFDE9B049EFA6F8177D51C200
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/33d43b71-2f0a-3d9e-891d-701b5c6c9c07.roa
Signing time:             Thu 26 Feb 2026 14:00:40 +0000
ROA not before:           Thu 26 Feb 2026 14:00:40 +0000
ROA not after:            Wed 27 May 2026 13:00:40 +0000
asID:                     33490
IP address blocks:        67.189.0.0/17 maxlen: 17
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 04 Mar 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:fd:e9:b0:49:ef:a6:f8:17:7d:51:c2:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Feb 26 14:00:40 2026 GMT
            Not After : May 27 13:00:40 2026 GMT
        Subject: CN=718df25e-e68b-45e6-9cf2-0b739e914163
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:52:65:4e:bb:d7:64:7f:3e:7a:24:ea:dc:68:
                    9b:29:e6:39:93:29:01:e1:54:09:a7:4f:f1:da:af:
                    77:d8:8d:a1:6c:ec:06:a0:cd:5c:5b:6b:22:c4:d7:
                    82:f4:61:3c:51:0c:77:96:fa:b7:64:2e:55:5d:38:
                    fe:fe:06:90:26:06:63:77:c3:84:be:e5:0f:6d:0e:
                    65:32:4d:af:e4:45:8c:96:21:6a:22:41:ad:a2:d2:
                    6c:56:4c:06:9e:cd:0e:68:3a:72:39:46:93:c6:b0:
                    a5:c2:5d:e7:5d:1b:fe:eb:71:0f:e0:33:6d:37:2c:
                    41:ad:2f:17:fa:d2:eb:fd:ce:a7:88:6e:de:d8:32:
                    d8:69:f6:2e:3c:cf:b0:7e:6b:33:b1:b6:ae:4d:77:
                    18:06:a7:3c:a6:5b:79:43:e1:86:3c:e0:c9:ef:e9:
                    80:d6:de:0c:26:c8:06:13:84:8e:62:04:e0:71:05:
                    ff:a4:71:d1:64:c4:83:47:80:81:a0:64:4b:e9:ce:
                    c3:e3:27:d6:5a:8e:cc:f8:82:36:43:d2:1d:97:a4:
                    d7:a7:ea:b1:4b:c1:51:c0:36:9d:34:6a:85:31:c8:
                    72:e8:d1:7d:51:e6:b8:c3:53:62:ff:25:88:9f:ca:
                    17:07:15:91:82:19:ca:1b:9d:02:6a:58:66:9c:e5:
                    28:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0D:7C:D5:D7:18:E7:0D:1E:16:C3:7C:C9:54:52:BA:B2:23:C8:53:55
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/33d43b71-2f0a-3d9e-891d-701b5c6c9c07.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  67.189.0.0/17

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         74:ec:71:19:39:23:04:ce:b5:22:44:51:f3:29:a3:b3:be:94:
         2e:65:a5:32:54:46:b0:9b:3d:3c:42:4b:f4:eb:fd:d1:f2:eb:
         46:61:69:a4:3b:ee:70:f5:41:59:d3:ce:47:a0:a8:84:cb:95:
         a9:12:c2:66:38:b8:aa:67:ca:04:21:e0:20:34:68:5f:bd:3c:
         ec:08:90:d3:54:69:e4:9c:9c:d7:e3:e9:68:9d:97:c0:e4:dc:
         41:02:8d:58:24:bd:9b:0a:e8:a2:2f:c2:77:69:98:54:99:bd:
         53:b5:6a:f6:59:cf:00:0b:b2:99:fb:bf:99:d4:d0:28:35:dc:
         a0:24:e4:5d:b0:a2:78:91:d8:ad:22:61:e2:d4:9b:31:31:57:
         2f:cd:a3:90:2c:50:3d:da:70:db:ad:d4:0b:53:0a:f5:c9:16:
         44:a7:14:70:3d:ae:b5:78:7e:3b:2a:4a:ca:b4:53:9d:fa:48:
         2d:3e:84:34:b7:aa:88:99:68:07:ca:5e:53:a0:1d:64:8f:b4:
         71:e6:13:49:72:e2:b2:8c:37:aa:fa:0a:e2:38:eb:99:22:80:
         03:df:54:0a:fb:44:69:ad:85:0d:5f:7d:5b:20:89:15:4b:0d:
         9b:47:3a:7f:74:f8:f1:e4:65:18:88:52:7f:2a:28:31:75:ce:
         dc:e1:77:fe
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEz96bBJ76b4F31RwgAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1
NGY2MB4XDTI2MDIyNjE0MDA0MFoXDTI2MDUyNzEzMDA0MFowLzEtMCsGA1UEAxMk
NzE4ZGYyNWUtZTY4Yi00NWU2LTljZjItMGI3MzllOTE0MTYzMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoVJlTrvXZH8+eiTq3GibKeY5kykB4VQJp0/x
2q932I2hbOwGoM1cW2sixNeC9GE8UQx3lvq3ZC5VXTj+/gaQJgZjd8OEvuUPbQ5l
Mk2v5EWMliFqIkGtotJsVkwGns0OaDpyOUaTxrClwl3nXRv+63EP4DNtNyxBrS8X
+tLr/c6niG7e2DLYafYuPM+wfmszsbauTXcYBqc8plt5Q+GGPODJ7+mA1t4MJsgG
E4SOYgTgcQX/pHHRZMSDR4CBoGRL6c7D4yfWWo7M+II2Q9Idl6TXp+qxS8FRwDad
NGqFMchy6NF9Uea4w1Ni/yWIn8oXBxWRghnKG50CalhmnOUoYwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFA181dcY5w0eFsN8yVRSurIjyFNVMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1
YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvMzNkNDNiNzEtMmYwYS0z
ZDllLTg5MWQtNzAxYjVjNmM5YzA3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw
ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk
NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5
ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQHQ70AMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAHTscRk5IwTOtSJEUfMpo7O+lC5lpTJURrCbPTxCS/Tr/dHy60ZhaaQ7
7nD1QVnTzkegqITLlakSwmY4uKpnygQh4CA0aF+9POwIkNNUaeScnNfj6Widl8Dk
3EECjVgkvZsK6KIvwndpmFSZvVO1avZZzwALspn7v5nU0Cg13KAk5F2woniR2K0i
YeLUmzExVy/No5AsUD3acNut1AtTCvXJFkSnFHA9rrV4fjsqSsq0U536SC0+hDS3
qoiZaAfKXlOgHWSPtHHmE0ly4rKMN6r6CuI465kigAPfVAr7RGmthQ1ffVsgiRVL
DZtHOn90+PHkZRiIUn8qKDF1ztzhd/4=
-----END CERTIFICATE-----
Generated at Sun Mar 1 23:03:55 2026 by rpki-client