Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f29a16-e7b1-40c8-87bc-34e2c5624862/28fe65a7-9d78-3034-a420-f6f04b7db492.roa
File:                     28fe65a7-9d78-3034-a420-f6f04b7db492.roa (raw, json)
Hash identifier:          rxjU5xqTb8BWmw8gZDsUBKRrAMewFtDCtJP114W+0y0=
Subject key identifier:   2F:63:56:64:88:C0:67:FE:5F:48:E8:95:41:56:31:E8:40:D1:B0:5E
Certificate issuer:       /CN=d9f29a16-e7b1-40c8-87bc-34e2c5624862
Certificate serial:       010D0C9F4328584D624A58CD36D7B356FBB8F900
Authority key identifier: DB:FA:83:FE:6D:96:CD:CC:6C:DE:3A:15:B4:20:98:9D:63:D7:B6:33
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f29a16-e7b1-40c8-87bc-34e2c5624862.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f29a16-e7b1-40c8-87bc-34e2c5624862/28fe65a7-9d78-3034-a420-f6f04b7db492.roa
Signing time:             Fri 03 Apr 2026 13:00:30 +0000
ROA not before:           Fri 03 Apr 2026 13:00:30 +0000
ROA not after:            Thu 02 Jul 2026 13:00:30 +0000
asID:                     15169
IP address blocks:        162.33.230.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f29a16-e7b1-40c8-87bc-34e2c5624862/d9f29a16-e7b1-40c8-87bc-34e2c5624862.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f29a16-e7b1-40c8-87bc-34e2c5624862/d9f29a16-e7b1-40c8-87bc-34e2c5624862.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f29a16-e7b1-40c8-87bc-34e2c5624862.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 19 Apr 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:62:4a:58:cd:36:d7:b3:56:fb:b8:f9:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d9f29a16-e7b1-40c8-87bc-34e2c5624862
        Validity
            Not Before: Apr  3 13:00:30 2026 GMT
            Not After : Jul  2 13:00:30 2026 GMT
        Subject: CN=fcdfc3c2-efd4-4a2b-a09c-3ae17dc2219d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:60:62:3f:ff:62:d8:3c:0d:73:57:6b:b4:bd:
                    64:30:74:5d:9a:44:f9:f3:39:e6:80:2e:05:1e:f9:
                    51:fe:26:48:7e:12:21:66:79:df:fc:4a:90:a9:72:
                    7a:fa:be:79:c8:5f:d5:15:4b:f8:50:12:2d:fc:61:
                    fc:c5:5a:12:9a:6a:2f:f8:29:95:04:8d:6c:a6:81:
                    67:d5:5e:7c:89:ad:72:af:5b:ae:a2:a0:84:62:03:
                    94:aa:aa:9f:48:48:1d:ca:25:9a:21:5f:ed:89:ab:
                    76:03:24:67:93:8c:70:fc:66:b4:81:c6:cb:57:ea:
                    e6:9f:2d:0c:6c:f4:10:18:79:f1:70:7e:af:5f:c7:
                    b9:ea:7e:13:40:3d:67:e3:6e:ab:bc:1a:fc:02:0c:
                    09:d7:fc:15:35:71:b7:af:13:4b:61:48:ea:83:8f:
                    cc:eb:e9:10:83:72:27:2d:43:09:cf:41:fc:cf:2e:
                    7e:6e:8e:05:48:d7:f2:94:29:42:81:db:34:ed:07:
                    c0:87:01:6c:8c:48:62:79:11:00:51:0d:17:49:0c:
                    ca:a9:65:90:64:8f:86:6b:18:ba:2f:96:8d:98:46:
                    d5:79:02:db:03:be:05:33:e2:7e:7e:6f:c9:ff:7f:
                    6f:66:28:56:e3:14:1a:c0:b8:5a:42:5a:57:4f:36:
                    c9:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2F:63:56:64:88:C0:67:FE:5F:48:E8:95:41:56:31:E8:40:D1:B0:5E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f29a16-e7b1-40c8-87bc-34e2c5624862/28fe65a7-9d78-3034-a420-f6f04b7db492.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f29a16-e7b1-40c8-87bc-34e2c5624862/d9f29a16-e7b1-40c8-87bc-34e2c5624862.crl

            X509v3 Authority Key Identifier:
                keyid:DB:FA:83:FE:6D:96:CD:CC:6C:DE:3A:15:B4:20:98:9D:63:D7:B6:33

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f29a16-e7b1-40c8-87bc-34e2c5624862.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  162.33.230.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         01:1c:a4:81:75:5a:5c:7f:e2:82:2c:e3:18:a0:9b:48:55:89:
         d9:c5:66:22:d2:79:6f:b5:e1:0c:43:bd:28:13:83:4f:d0:be:
         1a:4b:69:15:ee:ff:bc:cf:50:47:c3:9c:13:a9:16:c5:8b:88:
         83:69:71:21:cf:0a:25:fc:60:ba:d2:ab:cf:98:fd:ed:2c:44:
         6a:c1:ae:35:0c:29:e9:c8:89:fc:28:e5:1b:93:68:b1:36:95:
         a2:74:5f:f4:f0:18:1f:fa:e2:a3:ae:29:ca:a6:9c:c0:22:f0:
         38:7f:62:41:d3:1f:ba:0f:66:f3:37:96:be:a8:91:f6:a6:82:
         be:8c:de:be:2b:5b:48:a0:69:f4:cd:31:24:f4:ee:9a:6b:be:
         08:4d:c6:85:33:a1:10:27:e3:00:35:56:82:b1:f3:3f:a9:3e:
         91:3d:83:d0:03:b5:0b:f8:06:ad:74:1c:20:ce:41:84:de:e8:
         38:9b:ff:41:31:41:a3:a2:9f:20:36:f3:d0:82:33:19:e1:e0:
         22:15:0f:76:5f:61:94:90:88:bb:bd:00:81:41:dd:d6:c5:45:
         bd:58:2f:f4:49:44:d6:81:d6:0d:73:56:8f:eb:7d:c9:e2:1e:
         e5:eb:58:12:d8:8c:87:2c:2e:7b:74:dd:26:80:2f:28:5b:72:
         2f:b7:39:b8
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE1iSljNNtezVvu4+QAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZDlmMjlhMTYtZTdiMS00MGM4LTg3YmMtMzRlMmM1NjI0
ODYyMB4XDTI2MDQwMzEzMDAzMFoXDTI2MDcwMjEzMDAzMFowLzEtMCsGA1UEAxMk
ZmNkZmMzYzItZWZkNC00YTJiLWEwOWMtM2FlMTdkYzIyMTlkMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAl2BiP/9i2DwNc1drtL1kMHRdmkT58znmgC4F
HvlR/iZIfhIhZnnf/EqQqXJ6+r55yF/VFUv4UBIt/GH8xVoSmmov+CmVBI1spoFn
1V58ia1yr1uuoqCEYgOUqqqfSEgdyiWaIV/tiat2AyRnk4xw/Ga0gcbLV+rmny0M
bPQQGHnxcH6vX8e56n4TQD1n426rvBr8AgwJ1/wVNXG3rxNLYUjqg4/M6+kQg3In
LUMJz0H8zy5+bo4FSNfylClCgds07QfAhwFsjEhieREAUQ0XSQzKqWWQZI+Gaxi6
L5aNmEbVeQLbA74FM+J+fm/J/39vZihW4xQawLhaQlpXTzbJJwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFC9jVmSIwGf+X0jolUFWMehA0bBeMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9kOWYy
OWExNi1lN2IxLTQwYzgtODdiYy0zNGUyYzU2MjQ4NjIvMjhmZTY1YTctOWQ3OC0z
MDM0LWE0MjAtZjZmMDRiN2RiNDkyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvZDlmMjlhMTYtZTdiMS00MGM4LTg3
YmMtMzRlMmM1NjI0ODYyL2Q5ZjI5YTE2LWU3YjEtNDBjOC04N2JjLTM0ZTJjNTYy
NDg2Mi5jcmwwHwYDVR0jBBgwFoAU2/qD/m2Wzcxs3joVtCCYnWPXtjMwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi9kOWYyOWExNi1lN2IxLTQwYzgtODdiYy0zNGUy
YzU2MjQ4NjIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBoiHmMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAAEcpIF1Wlx/4oIs4xigm0hVidnFZiLSeW+14QxDvSgTg0/QvhpLaRXu
/7zPUEfDnBOpFsWLiINpcSHPCiX8YLrSq8+Y/e0sRGrBrjUMKenIifwo5RuTaLE2
laJ0X/TwGB/64qOuKcqmnMAi8Dh/YkHTH7oPZvM3lr6okfamgr6M3r4rW0igafTN
MST07pprvghNxoUzoRAn4wA1VoKx8z+pPpE9g9ADtQv4Bq10HCDOQYTe6Dib/0Ex
QaOinyA289CCMxnh4CIVD3ZfYZSQiLu9AIFB3dbFRb1YL/RJRNaB1g1zVo/rfcni
HuXrWBLYjIcsLnt03SaALyhbci+3Obg=
-----END CERTIFICATE-----
Generated at Fri Apr 17 16:53:01 2026 by rpki-client