Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/56b96151-8a90-41ad-aefc-1091ab214a92/33ce6ede-9c40-3d7d-9178-caa155d72046.roa
File:                     33ce6ede-9c40-3d7d-9178-caa155d72046.roa (raw, json)
Hash identifier:          kfcKMpKOcz/58+De2rUvphWrHbopvXW2nDNIv/wry/0=
Subject key identifier:   BF:71:07:55:D3:92:F3:A0:1E:1A:3D:0C:8F:B7:35:2A:2F:AC:95:13
Certificate issuer:       /CN=56b96151-8a90-41ad-aefc-1091ab214a92
Certificate serial:       010D0C9F4328584CD40769D9591C62880EAA8780
Authority key identifier: DC:FC:BD:81:79:AC:17:F1:5F:B1:DD:0D:72:15:FA:F6:4F:1B:95:DF
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/56b96151-8a90-41ad-aefc-1091ab214a92.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/56b96151-8a90-41ad-aefc-1091ab214a92/33ce6ede-9c40-3d7d-9178-caa155d72046.roa
Signing time:             Wed 11 Feb 2026 14:00:41 +0000
ROA not before:           Wed 11 Feb 2026 14:00:41 +0000
ROA not after:            Tue 12 May 2026 13:00:41 +0000
asID:                     14618
IP address blocks:        199.91.188.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/56b96151-8a90-41ad-aefc-1091ab214a92/56b96151-8a90-41ad-aefc-1091ab214a92.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/56b96151-8a90-41ad-aefc-1091ab214a92/56b96151-8a90-41ad-aefc-1091ab214a92.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/56b96151-8a90-41ad-aefc-1091ab214a92.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 04 Mar 2026 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:d4:07:69:d9:59:1c:62:88:0e:aa:87:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=56b96151-8a90-41ad-aefc-1091ab214a92
        Validity
            Not Before: Feb 11 14:00:41 2026 GMT
            Not After : May 12 13:00:41 2026 GMT
        Subject: CN=066c61bc-6e78-40da-8cbf-e0633b39fb17
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:60:68:a8:99:a8:aa:30:03:68:72:28:83:32:
                    a1:86:21:55:ae:fc:69:5d:a5:c6:6b:86:ba:50:9d:
                    72:17:a4:23:52:c6:1d:5c:dd:29:04:d2:59:27:4a:
                    24:af:b8:2f:f9:9f:8b:05:30:3c:57:e2:69:9c:db:
                    8f:78:df:9b:df:e4:38:ec:c4:5c:83:fd:30:d4:d3:
                    f4:08:5b:43:cb:eb:99:8a:26:16:39:9f:ba:92:0a:
                    14:b1:2b:e9:ef:ec:4a:a9:2e:37:bd:c4:e3:bb:3f:
                    5b:7e:4e:45:6c:4c:66:c2:02:11:11:1a:b3:e2:9e:
                    6b:29:5e:0b:b6:19:d5:4a:2b:ad:7f:88:7f:d3:61:
                    4d:b8:cf:01:c5:98:aa:3e:86:d4:fe:ce:cd:a1:86:
                    59:53:3c:82:56:2d:f3:33:95:43:a1:0a:d8:4d:7c:
                    20:65:93:b1:a8:05:0d:eb:25:1b:66:3f:21:32:f3:
                    93:f6:23:7a:e9:d6:80:f9:8b:4a:62:5e:27:a4:33:
                    8a:a0:51:4f:a6:21:37:78:e4:49:61:71:6c:b9:42:
                    80:1a:1b:f2:9d:17:e0:87:22:e5:01:ef:22:12:13:
                    d9:4d:81:c1:39:3b:75:b0:f1:d0:6e:f5:2a:25:78:
                    4f:c4:8b:a4:ec:d3:b0:f0:20:3a:bb:5d:da:4b:a7:
                    57:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BF:71:07:55:D3:92:F3:A0:1E:1A:3D:0C:8F:B7:35:2A:2F:AC:95:13
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/56b96151-8a90-41ad-aefc-1091ab214a92/33ce6ede-9c40-3d7d-9178-caa155d72046.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/56b96151-8a90-41ad-aefc-1091ab214a92/56b96151-8a90-41ad-aefc-1091ab214a92.crl

            X509v3 Authority Key Identifier:
                keyid:DC:FC:BD:81:79:AC:17:F1:5F:B1:DD:0D:72:15:FA:F6:4F:1B:95:DF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/56b96151-8a90-41ad-aefc-1091ab214a92.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.91.188.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         13:69:6b:24:54:ee:25:46:ea:d5:24:e1:00:0f:be:e3:6d:e6:
         c1:7c:40:be:5b:3a:2f:44:c9:33:34:d2:b4:0b:02:c5:a8:6f:
         19:0a:1e:58:8d:03:18:04:74:2d:b4:ae:c3:6a:58:62:62:4b:
         81:c2:c3:c9:dd:4f:b7:9d:82:70:6c:65:e7:a5:fb:d7:29:51:
         ef:10:8b:5a:46:42:a8:86:f6:69:15:bf:c0:3e:31:09:7e:bf:
         5a:7a:3a:2b:b0:ee:8a:e2:38:71:82:7a:fe:71:e8:40:09:e0:
         3c:d3:72:21:c0:aa:10:d0:52:93:cc:2c:55:1b:4c:e3:7c:bb:
         4e:bc:6f:fc:1b:af:89:b4:db:18:b5:2f:38:bc:ae:96:a0:2f:
         5c:dd:33:7e:ce:24:12:8c:c3:0b:6a:f8:63:05:41:c3:53:af:
         9b:82:9f:7d:53:c7:7b:04:2c:c7:31:ed:7c:5c:10:85:89:33:
         fd:71:39:ba:ee:ab:7c:f6:ac:ca:f4:df:20:3b:2e:52:51:d5:
         5c:c2:24:81:83:d1:1d:54:cf:9c:8f:fb:20:07:bf:a4:ea:18:
         84:d2:56:90:e6:d6:ad:59:47:6a:92:03:be:7c:d5:02:e5:f4:
         6d:8c:a5:ad:1c:72:40:70:6c:f3:6f:80:eb:37:02:a7:34:bd:
         7a:01:56:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 01:14:33 2026 by rpki-client