Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/927d18e8-718f-412b-a0b2-a97decff6f3f/0c478f00-7bc7-3794-93fc-dd8fb16eca70.roa
File:                     0c478f00-7bc7-3794-93fc-dd8fb16eca70.roa (raw, json)
Hash identifier:          hjjAk5ESsbow8jJTdLQndv7Y7qIGPMrwSOMCgnxROwU=
Subject key identifier:   55:35:08:F6:D9:45:AB:9D:09:4E:19:13:2E:97:17:D0:D5:73:82:71
Certificate issuer:       /CN=927d18e8-718f-412b-a0b2-a97decff6f3f
Certificate serial:       010D0C9F4328584CF5CEEF8BE1AE6F671F340E40
Authority key identifier: 65:DD:C3:69:D5:D8:1B:0F:95:D5:AB:AD:7B:F5:30:38:B1:C0:60:04
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/927d18e8-718f-412b-a0b2-a97decff6f3f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/927d18e8-718f-412b-a0b2-a97decff6f3f/0c478f00-7bc7-3794-93fc-dd8fb16eca70.roa
Signing time:             Mon 23 Feb 2026 16:24:38 +0000
ROA not before:           Mon 23 Feb 2026 16:24:38 +0000
ROA not after:            Sun 24 May 2026 15:24:38 +0000
asID:                     834
IP address blocks:        162.33.163.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/927d18e8-718f-412b-a0b2-a97decff6f3f/927d18e8-718f-412b-a0b2-a97decff6f3f.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/927d18e8-718f-412b-a0b2-a97decff6f3f/927d18e8-718f-412b-a0b2-a97decff6f3f.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/927d18e8-718f-412b-a0b2-a97decff6f3f.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 03 Mar 2026 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:f5:ce:ef:8b:e1:ae:6f:67:1f:34:0e:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=927d18e8-718f-412b-a0b2-a97decff6f3f
        Validity
            Not Before: Feb 23 16:24:38 2026 GMT
            Not After : May 24 15:24:38 2026 GMT
        Subject: CN=14eb54ed-f58c-4d43-bd51-a21a7ed07d23
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:95:1c:a1:0f:18:fa:f3:51:c9:dc:96:17:12:
                    81:53:12:b5:23:bf:95:c0:7c:6e:9d:21:60:83:4c:
                    b1:af:23:12:61:54:95:66:31:5e:a5:cb:c4:15:eb:
                    9e:3f:dd:a0:88:14:9c:2a:fc:77:01:67:14:15:8d:
                    42:23:47:09:6d:66:2f:0f:f7:ce:8d:f7:f2:50:6d:
                    63:c9:34:a7:97:51:35:db:80:66:0e:34:1c:3b:75:
                    81:a1:7f:e7:c8:63:2f:57:be:fc:93:f2:c2:00:d1:
                    61:ce:00:f4:88:30:4d:1c:6b:54:2a:8c:13:0d:b9:
                    ec:74:ce:2d:ff:8d:26:ae:a9:5d:60:40:f2:82:da:
                    8f:60:97:90:3e:ed:a8:8e:2f:5f:23:e0:bd:bf:fa:
                    23:a6:7c:5b:51:e2:91:26:a9:0b:7f:c0:41:83:47:
                    06:5b:f9:73:8c:2d:da:5f:15:fa:fa:24:ef:ab:8b:
                    d8:a0:e1:58:55:02:c8:a7:6f:68:30:e8:8d:7d:9b:
                    6b:27:2d:3e:47:2a:22:6a:4c:ff:6b:90:d0:c8:35:
                    5f:98:68:e3:ba:04:cb:3b:eb:97:ac:b2:a8:6a:f3:
                    cb:59:8c:36:98:1d:be:7f:dc:a9:d4:84:eb:0e:32:
                    2f:18:f4:4c:be:75:87:79:d8:80:1e:59:c6:53:7b:
                    2a:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                55:35:08:F6:D9:45:AB:9D:09:4E:19:13:2E:97:17:D0:D5:73:82:71
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/927d18e8-718f-412b-a0b2-a97decff6f3f/0c478f00-7bc7-3794-93fc-dd8fb16eca70.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/927d18e8-718f-412b-a0b2-a97decff6f3f/927d18e8-718f-412b-a0b2-a97decff6f3f.crl

            X509v3 Authority Key Identifier:
                keyid:65:DD:C3:69:D5:D8:1B:0F:95:D5:AB:AD:7B:F5:30:38:B1:C0:60:04

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/927d18e8-718f-412b-a0b2-a97decff6f3f.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  162.33.163.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         41:f6:47:9b:71:9d:73:fa:76:e7:a4:fa:a2:1f:e8:83:a0:bd:
         ed:7f:64:e2:37:c7:49:3d:42:84:f1:fd:e2:80:d9:1d:35:29:
         e5:cd:8e:26:63:77:10:96:80:51:c1:93:57:2b:a3:f4:59:ee:
         ba:fb:0b:e9:f5:9f:ab:3d:92:7d:62:82:70:6e:2f:e1:b9:75:
         f0:c9:48:74:56:9e:17:0c:fa:b4:43:d8:8f:52:35:10:0f:6a:
         76:01:3b:38:7e:d9:8a:bd:22:5d:a6:99:ac:13:fc:46:fb:89:
         cd:75:c5:79:14:af:b3:40:a9:00:a0:dc:3f:c4:dc:db:5f:4b:
         dd:65:47:fc:5b:a4:b5:ba:1b:a6:e4:d6:b6:d6:89:d2:07:10:
         9f:c2:e6:63:32:fe:07:46:7a:4a:6f:71:2a:5b:66:f6:6f:83:
         ce:7d:2a:c9:c9:c6:c5:6f:b6:26:18:a3:f9:ea:5d:0d:b3:ec:
         1d:b9:c0:6a:d0:e8:46:24:24:cc:98:54:6a:a0:bd:44:10:fe:
         9f:76:77:3e:57:67:f4:04:26:f6:22:fe:55:8c:98:0b:12:d3:
         3b:1f:17:bb:3c:b2:5e:b0:a0:9d:06:23:0d:f1:3d:8e:bc:21:
         a5:6d:4d:2d:36:54:7e:a0:2f:0b:b8:a5:a0:52:31:45:f3:ff:
         42:71:73:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 18:17:04 2026 by rpki-client