Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d44ce5f4-28a9-4c1f-b029-cc35b3e3950e/4f6e0cb8-2f04-3aff-b6ab-5bb2b9545c42.roa
File:                     4f6e0cb8-2f04-3aff-b6ab-5bb2b9545c42.roa (raw, json)
Hash identifier:          SLQWOrCvpo2K82g5W70ud3SWYwsCenWhg7zZeShpXxA=
Subject key identifier:   CA:4E:5F:28:27:D3:70:B4:1D:BF:74:F4:86:8F:BD:7E:67:9B:03:F0
Certificate issuer:       /CN=d44ce5f4-28a9-4c1f-b029-cc35b3e3950e
Certificate serial:       010D0C9F4328584D83CB07165DA888155D68F100
Authority key identifier: D2:70:53:AA:1E:41:4B:CD:A4:FF:3C:F8:BC:B0:DC:1C:2B:B6:0C:52
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d44ce5f4-28a9-4c1f-b029-cc35b3e3950e.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d44ce5f4-28a9-4c1f-b029-cc35b3e3950e/4f6e0cb8-2f04-3aff-b6ab-5bb2b9545c42.roa
Signing time:             Wed 15 Apr 2026 13:00:30 +0000
ROA not before:           Wed 15 Apr 2026 13:00:30 +0000
ROA not after:            Tue 14 Jul 2026 13:00:30 +0000
asID:                     7311
IP address blocks:        162.33.188.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d44ce5f4-28a9-4c1f-b029-cc35b3e3950e/d44ce5f4-28a9-4c1f-b029-cc35b3e3950e.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d44ce5f4-28a9-4c1f-b029-cc35b3e3950e/d44ce5f4-28a9-4c1f-b029-cc35b3e3950e.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d44ce5f4-28a9-4c1f-b029-cc35b3e3950e.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 18 Apr 2026 23:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:83:cb:07:16:5d:a8:88:15:5d:68:f1:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d44ce5f4-28a9-4c1f-b029-cc35b3e3950e
        Validity
            Not Before: Apr 15 13:00:30 2026 GMT
            Not After : Jul 14 13:00:30 2026 GMT
        Subject: CN=a6e5a94a-477c-40f3-926b-ee1dd347e6d4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:35:64:e0:2e:1a:d3:2d:c3:d8:f4:ef:62:d7:
                    50:c7:7a:f3:e8:2c:78:9c:07:a0:ee:48:03:97:a4:
                    01:88:5f:f9:37:70:b2:f4:3d:2a:4d:6a:f6:b5:e5:
                    03:ea:5a:4e:7c:c8:a4:5d:6c:5f:18:72:cf:b2:7e:
                    70:6f:c3:c0:a1:eb:7a:5a:97:c2:fd:a5:75:6c:b5:
                    43:b9:8b:5a:b9:70:22:a6:2d:12:95:ec:f5:8a:15:
                    16:2a:98:3b:b5:ad:32:a3:18:15:02:7e:9b:90:ba:
                    5f:39:86:4d:65:93:17:01:14:88:fc:73:76:d9:44:
                    f7:0c:cc:fd:4e:34:43:ff:eb:cc:51:f2:74:ec:89:
                    d4:ea:07:19:70:8f:f9:49:86:03:db:c0:c3:83:64:
                    9e:83:df:e9:e2:df:59:d9:af:32:9b:64:2c:7f:29:
                    55:49:90:51:b5:aa:4b:29:99:d4:76:1e:bb:e7:ab:
                    c7:b5:ae:ed:42:97:3e:30:58:04:f7:34:00:9d:5a:
                    ee:bd:6c:be:41:7d:86:b1:c4:b7:b5:f8:6a:f6:8b:
                    c7:f6:87:8c:11:b7:6b:f7:f9:58:cc:99:41:92:0c:
                    9a:56:b9:43:63:19:81:b1:0d:6f:21:3e:2c:cf:75:
                    e7:af:4e:3f:66:49:5e:db:79:7b:c5:dc:18:3e:96:
                    72:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CA:4E:5F:28:27:D3:70:B4:1D:BF:74:F4:86:8F:BD:7E:67:9B:03:F0
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d44ce5f4-28a9-4c1f-b029-cc35b3e3950e/4f6e0cb8-2f04-3aff-b6ab-5bb2b9545c42.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d44ce5f4-28a9-4c1f-b029-cc35b3e3950e/d44ce5f4-28a9-4c1f-b029-cc35b3e3950e.crl

            X509v3 Authority Key Identifier:
                keyid:D2:70:53:AA:1E:41:4B:CD:A4:FF:3C:F8:BC:B0:DC:1C:2B:B6:0C:52

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d44ce5f4-28a9-4c1f-b029-cc35b3e3950e.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  162.33.188.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a8:ff:08:b7:86:49:00:9e:21:d6:09:9f:56:46:58:4e:3a:f0:
         77:09:63:6e:a9:d0:c0:6a:cf:23:49:53:dc:11:a3:e4:7b:6d:
         bf:58:68:ba:74:4a:fc:1b:3e:02:da:3a:f9:b9:61:8c:ec:d4:
         6c:cc:85:f9:35:97:84:92:69:6d:ff:06:dd:c1:68:ea:4a:82:
         19:92:f1:fa:10:ca:d8:92:77:f5:80:96:2b:db:b7:47:b9:b4:
         01:85:fb:31:50:36:8f:89:11:4b:55:ad:59:59:c7:5a:4a:26:
         ac:d3:4a:ba:d4:53:92:54:ce:92:4a:e1:c0:f4:ae:59:e9:db:
         47:6d:a3:83:32:93:f0:25:cc:73:53:e5:7c:42:8c:0a:cf:20:
         03:19:52:49:e0:fa:5f:eb:39:19:72:c1:d5:cd:38:74:32:62:
         83:93:c4:7a:d0:35:8c:c7:06:24:53:e5:87:b7:eb:8a:f3:76:
         e2:1a:ae:fa:b9:72:59:53:ed:bf:f6:8b:4f:c1:bb:25:72:8e:
         cd:db:21:7d:31:5c:32:e1:d1:a3:a8:ac:cb:c6:a0:27:fd:e6:
         b7:a5:c8:32:b5:a3:57:63:e1:86:27:bd:52:62:e0:d1:3c:1d:
         43:76:4d:5a:5a:d5:e2:56:19:da:1d:aa:ba:54:2d:ad:33:0d:
         49:0e:44:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 21:24:56 2026 by rpki-client