Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/31671c23-3278-409b-837d-7dfe69606940/33330f62-f621-30ef-aec0-b2d8fe0dc591.roa
File:                     33330f62-f621-30ef-aec0-b2d8fe0dc591.roa (raw, json)
Hash identifier:          tcte5IEP7cry9qBotkVqJn6Slhu3lIvCJvO/lO5xf5E=
Subject key identifier:   02:D5:F4:28:C9:67:8F:0D:44:B4:F7:6B:02:3C:C7:22:67:0D:92:F6
Certificate issuer:       /CN=31671c23-3278-409b-837d-7dfe69606940
Certificate serial:       010D0C9F4328584D6EDA669826D885D44C32F580
Authority key identifier: 67:16:23:E0:67:5A:30:1F:51:52:AF:3F:47:2F:FC:27:CE:8D:3F:1A
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/31671c23-3278-409b-837d-7dfe69606940.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/31671c23-3278-409b-837d-7dfe69606940/33330f62-f621-30ef-aec0-b2d8fe0dc591.roa
Signing time:             Wed 08 Apr 2026 01:00:24 +0000
ROA not before:           Wed 08 Apr 2026 01:00:24 +0000
ROA not after:            Tue 07 Jul 2026 01:00:24 +0000
asID:                     16509
IP address blocks:        170.62.42.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/31671c23-3278-409b-837d-7dfe69606940/31671c23-3278-409b-837d-7dfe69606940.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/31671c23-3278-409b-837d-7dfe69606940/31671c23-3278-409b-837d-7dfe69606940.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/31671c23-3278-409b-837d-7dfe69606940.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 19 Apr 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:6e:da:66:98:26:d8:85:d4:4c:32:f5:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=31671c23-3278-409b-837d-7dfe69606940
        Validity
            Not Before: Apr  8 01:00:24 2026 GMT
            Not After : Jul  7 01:00:24 2026 GMT
        Subject: CN=71c67202-41b2-41ab-8c4b-7ccad5d71bb4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:81:2d:cb:5f:fc:37:20:59:31:8b:69:77:b2:ab:
                    d3:b2:2c:4a:0d:3b:c0:23:25:4a:92:74:a0:2b:6b:
                    74:a7:e3:9c:37:64:e6:b5:0e:65:7f:98:54:72:04:
                    4e:f4:b1:bd:08:1d:9b:82:1d:46:c3:a6:26:67:1b:
                    2e:52:cb:ed:af:b3:84:6d:49:88:20:d9:06:bb:67:
                    80:d9:69:65:15:51:73:ea:cd:b2:68:5d:00:9d:dd:
                    62:da:7f:1a:46:26:2c:9b:17:86:73:1b:46:ab:90:
                    90:99:57:a1:62:93:e3:17:9e:e5:f5:4a:11:00:34:
                    36:ab:8a:c1:bb:67:55:09:8f:89:d3:9f:66:1b:9d:
                    17:f5:77:ab:16:62:30:e0:3e:4f:ef:2b:1d:0e:53:
                    75:78:dd:53:bf:da:a0:64:e8:17:b4:8a:06:ef:d8:
                    e2:4f:06:36:a0:fa:6f:ed:51:63:c6:44:bd:36:a7:
                    8b:68:87:87:c0:34:9a:e6:5a:f6:9a:e7:89:95:35:
                    39:d2:90:83:79:29:4f:cf:cb:cb:5f:72:d1:ae:31:
                    58:93:e6:cc:6c:46:a1:31:3d:01:bf:6b:28:5f:e6:
                    b2:ec:f0:01:14:31:0d:d2:c6:44:d4:ff:0d:9f:fe:
                    66:71:f6:f5:2f:90:eb:93:42:97:32:66:3e:44:7f:
                    83:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                02:D5:F4:28:C9:67:8F:0D:44:B4:F7:6B:02:3C:C7:22:67:0D:92:F6
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/31671c23-3278-409b-837d-7dfe69606940/33330f62-f621-30ef-aec0-b2d8fe0dc591.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/31671c23-3278-409b-837d-7dfe69606940/31671c23-3278-409b-837d-7dfe69606940.crl

            X509v3 Authority Key Identifier:
                keyid:67:16:23:E0:67:5A:30:1F:51:52:AF:3F:47:2F:FC:27:CE:8D:3F:1A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/31671c23-3278-409b-837d-7dfe69606940.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.62.42.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2c:1f:b9:b7:97:8b:2d:60:76:aa:18:96:7b:52:6a:b0:ca:b9:
         fa:07:88:f1:44:f2:d1:2c:74:13:79:b9:ed:9b:de:70:da:7b:
         42:a5:26:7e:f1:05:97:c7:95:97:8f:f9:ca:21:8e:bc:95:9b:
         ca:12:ba:03:93:e8:73:16:2a:f2:52:02:42:15:9d:3b:eb:d7:
         d5:30:e1:91:17:c0:52:aa:42:78:e6:23:42:0a:48:b7:fa:0b:
         2c:8a:1a:4a:96:04:5e:43:20:2e:6c:a5:39:a0:a4:a6:93:6a:
         9c:7d:60:26:68:07:91:67:b7:61:09:31:ff:98:e5:26:46:68:
         8f:92:8d:be:4c:e7:cc:40:00:9b:a6:0f:8d:23:11:6a:aa:55:
         62:2f:8d:f5:65:73:44:15:49:62:11:92:d2:a9:7e:b7:31:cb:
         d2:ce:bc:b8:db:20:b4:11:90:d5:9c:c0:94:c8:81:87:a3:fa:
         53:02:f2:ea:60:bb:32:f9:b1:ab:73:ca:cd:a5:78:5a:d7:0d:
         5f:41:d8:f2:ba:bb:5e:75:a8:05:65:3d:1f:21:d3:23:ad:3a:
         ae:f8:4d:11:34:18:e9:ae:5e:67:50:5d:64:8c:74:15:b2:cd:
         e8:fe:51:c7:f6:0f:14:04:77:b3:98:d8:e8:cb:9d:eb:25:73:
         85:a7:ee:82
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE1u2maYJtiF1Ewy9YAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMzE2NzFjMjMtMzI3OC00MDliLTgzN2QtN2RmZTY5NjA2
OTQwMB4XDTI2MDQwODAxMDAyNFoXDTI2MDcwNzAxMDAyNFowLzEtMCsGA1UEAxMk
NzFjNjcyMDItNDFiMi00MWFiLThjNGItN2NjYWQ1ZDcxYmI0MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgS3LX/w3IFkxi2l3sqvTsixKDTvAIyVKknSg
K2t0p+OcN2TmtQ5lf5hUcgRO9LG9CB2bgh1Gw6YmZxsuUsvtr7OEbUmIINkGu2eA
2WllFVFz6s2yaF0And1i2n8aRiYsmxeGcxtGq5CQmVehYpPjF57l9UoRADQ2q4rB
u2dVCY+J059mG50X9XerFmIw4D5P7ysdDlN1eN1Tv9qgZOgXtIoG79jiTwY2oPpv
7VFjxkS9NqeLaIeHwDSa5lr2mueJlTU50pCDeSlPz8vLX3LRrjFYk+bMbEahMT0B
v2soX+ay7PABFDEN0sZE1P8Nn/5mcfb1L5Drk0KXMmY+RH+D3wIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFALV9CjJZ48NRLT3awI8xyJnDZL2MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC8zMTY3
MWMyMy0zMjc4LTQwOWItODM3ZC03ZGZlNjk2MDY5NDAvMzMzMzBmNjItZjYyMS0z
MGVmLWFlYzAtYjJkOGZlMGRjNTkxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i
ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvMzE2NzFjMjMtMzI3OC00MDliLTgz
N2QtN2RmZTY5NjA2OTQwLzMxNjcxYzIzLTMyNzgtNDA5Yi04MzdkLTdkZmU2OTYw
Njk0MC5jcmwwHwYDVR0jBBgwFoAUZxYj4GdaMB9RUq8/Ry/8J86NPxowDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz
My05YTg4LTViMjJkMmE4MzM3ZC8zMTY3MWMyMy0zMjc4LTQwOWItODM3ZC03ZGZl
Njk2MDY5NDAuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAqj4qMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBACwfubeXiy1gdqoYlntSarDKufoHiPFE8tEsdBN5ue2b3nDae0KlJn7x
BZfHlZeP+cohjryVm8oSugOT6HMWKvJSAkIVnTvr19Uw4ZEXwFKqQnjmI0IKSLf6
CyyKGkqWBF5DIC5spTmgpKaTapx9YCZoB5Fnt2EJMf+Y5SZGaI+Sjb5M58xAAJum
D40jEWqqVWIvjfVlc0QVSWIRktKpfrcxy9LOvLjbILQRkNWcwJTIgYej+lMC8upg
uzL5satzys2leFrXDV9B2PK6u151qAVlPR8h0yOtOq74TRE0GOmuXmdQXWSMdBWy
zej+Ucf2DxQEd7OY2OjLneslc4Wn7oI=
-----END CERTIFICATE-----
Generated at Fri Apr 17 18:30:42 2026 by rpki-client