Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/f5543cab-492c-47b2-869b-a727d610adf7/33377d0e-e411-3d66-ac89-ec09bc2ea54e.roa
File:                     33377d0e-e411-3d66-ac89-ec09bc2ea54e.roa (raw, json)
Hash identifier:          vfPGu98ZxowSgixQrkV19VpPdqJpRzuFk/fyuqa1Jk4=
Subject key identifier:   5A:75:FC:9A:10:C7:34:7D:98:F7:1A:B3:87:E3:1B:38:C6:53:D6:59
Certificate issuer:       /CN=f5543cab-492c-47b2-869b-a727d610adf7
Certificate serial:       010D0C9F4328584EE923AE69A79932E798C43280
Authority key identifier: F6:0A:81:B6:B6:78:BB:ED:1E:A5:06:A3:85:9B:33:B5:8B:12:03:D2
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/f5543cab-492c-47b2-869b-a727d610adf7.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/f5543cab-492c-47b2-869b-a727d610adf7/33377d0e-e411-3d66-ac89-ec09bc2ea54e.roa
Signing time:             Fri 21 Aug 2026 13:03:45 +0000
ROA not before:           Fri 21 Aug 2026 13:03:45 +0000
ROA not after:            Thu 19 Nov 2026 14:03:45 +0000
asID:                     14618
IP address blocks:        207.241.168.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/f5543cab-492c-47b2-869b-a727d610adf7/f5543cab-492c-47b2-869b-a727d610adf7.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/f5543cab-492c-47b2-869b-a727d610adf7/f5543cab-492c-47b2-869b-a727d610adf7.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/f5543cab-492c-47b2-869b-a727d610adf7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 23 Sep 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:e9:23:ae:69:a7:99:32:e7:98:c4:32:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f5543cab-492c-47b2-869b-a727d610adf7
        Validity
            Not Before: Aug 21 13:03:45 2026 GMT
            Not After : Nov 19 14:03:45 2026 GMT
        Subject: CN=55c828eb-ad91-4d1c-ab77-9826b34e4b2f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:c8:45:41:38:64:ed:f8:00:3d:8a:08:ab:d2:
                    9c:a9:84:07:f2:54:bf:76:fc:2c:6b:f0:ee:5c:8e:
                    ba:1f:05:3b:a6:47:24:bd:09:5d:dc:80:b2:d1:39:
                    ec:19:ab:4f:1b:c1:0d:7d:43:31:6a:f8:13:04:75:
                    ba:fc:c2:ea:72:17:3f:e2:5a:f4:5e:ba:35:a3:d8:
                    ca:af:2e:ac:89:14:b0:c1:de:45:b8:2f:7b:76:88:
                    4e:dd:0c:9c:b7:4c:87:36:00:36:39:72:03:00:ca:
                    38:71:28:2a:df:78:49:0b:4e:6a:08:61:8c:78:55:
                    81:01:01:d2:7c:5b:e3:4d:a3:6c:a0:9e:cb:90:6e:
                    a9:a1:b8:bd:9e:d5:f8:27:54:e4:5a:8d:b7:06:67:
                    9a:5f:9f:0e:6a:14:eb:7a:6e:c1:9c:84:68:61:1a:
                    b6:a8:78:67:a2:8f:4e:37:6d:df:6d:73:01:00:34:
                    42:89:ad:68:54:67:80:85:f9:5f:92:f4:ba:05:43:
                    72:0b:18:fb:be:55:2f:db:41:fe:36:2b:0c:8d:33:
                    5e:97:1f:8f:80:a7:7a:7f:cf:1f:fa:63:24:88:74:
                    44:44:d7:c1:67:43:67:0b:0c:15:cd:32:a8:d0:f6:
                    08:c1:d9:d4:4d:a9:6c:82:48:75:5c:b1:29:be:0e:
                    eb:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5A:75:FC:9A:10:C7:34:7D:98:F7:1A:B3:87:E3:1B:38:C6:53:D6:59
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/f5543cab-492c-47b2-869b-a727d610adf7/33377d0e-e411-3d66-ac89-ec09bc2ea54e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/f5543cab-492c-47b2-869b-a727d610adf7/f5543cab-492c-47b2-869b-a727d610adf7.crl

            X509v3 Authority Key Identifier:
                keyid:F6:0A:81:B6:B6:78:BB:ED:1E:A5:06:A3:85:9B:33:B5:8B:12:03:D2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/f5543cab-492c-47b2-869b-a727d610adf7.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  207.241.168.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         26:0e:06:94:61:31:46:66:16:df:93:6a:96:a0:f0:2d:b6:cf:
         cf:08:c2:67:83:f2:bd:0a:c3:a8:a5:74:31:22:5c:5f:0c:a3:
         66:27:bb:b1:78:69:c4:2d:63:fc:30:51:22:54:45:9e:c3:5a:
         79:e9:da:10:19:4d:a1:18:b3:3a:08:7f:3e:c0:2c:af:ee:8e:
         27:d7:47:13:35:0f:57:0c:bc:93:d1:e4:7c:e6:6d:b8:ba:d9:
         72:8e:f9:93:22:82:60:e7:98:cf:79:c8:76:2a:73:e1:a0:2f:
         4f:a4:15:f6:c5:0f:e4:74:09:92:05:52:3c:04:68:c7:56:fe:
         ac:10:6f:ab:1e:82:7d:e2:16:c4:9e:c4:82:a3:4a:80:61:79:
         ec:83:bd:42:a4:b4:e3:20:20:ca:e1:26:6e:84:c1:e5:aa:b0:
         21:47:89:af:84:d6:32:21:30:1c:b0:6a:34:51:d2:4a:e5:f8:
         8f:cf:fe:aa:c3:d5:4a:71:d4:24:5f:d0:00:bb:0b:d2:e2:e0:
         19:ee:47:07:78:ca:36:ac:f3:56:f5:02:4c:b3:69:cd:cc:89:
         b6:07:b9:1b:96:f7:52:45:48:06:b3:c3:6d:61:5b:89:b9:ed:
         88:4f:60:bc:3b:2f:ff:95:80:71:80:af:b6:e0:03:dc:3c:83:
         d8:61:01:85
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 21 18:59:32 2026 by rpki-client