Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/f84ea5c3-3226-48ac-838b-0fdf69176854/cb4a05db-d9d9-3a66-8b98-918d6b164822.roa
File:                     cb4a05db-d9d9-3a66-8b98-918d6b164822.roa (raw, json)
Hash identifier:          IDjyB5vFefx9viX9k48UjejAfNkOA3szeYqMTE2sV5Q=
Subject key identifier:   0F:DC:43:99:7A:83:F1:75:F9:3C:AF:7B:F4:7D:98:75:ED:4E:F1:04
Certificate issuer:       /CN=f84ea5c3-3226-48ac-838b-0fdf69176854
Certificate serial:       010D0C9F4328584CFC8234EDC3E5DBF05995CDD8
Authority key identifier: 82:71:9E:64:EE:FB:6C:5A:E9:41:FD:EE:1D:55:A8:32:16:3B:EE:42
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/f84ea5c3-3226-48ac-838b-0fdf69176854.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/f84ea5c3-3226-48ac-838b-0fdf69176854/cb4a05db-d9d9-3a66-8b98-918d6b164822.roa
Signing time:             Thu 26 Feb 2026 02:00:32 +0000
ROA not before:           Thu 26 Feb 2026 02:00:32 +0000
ROA not after:            Wed 27 May 2026 01:00:32 +0000
asID:                     14362
IP address blocks:        199.33.73.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/f84ea5c3-3226-48ac-838b-0fdf69176854/f84ea5c3-3226-48ac-838b-0fdf69176854.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/f84ea5c3-3226-48ac-838b-0fdf69176854/f84ea5c3-3226-48ac-838b-0fdf69176854.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/f84ea5c3-3226-48ac-838b-0fdf69176854.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 03 Mar 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:fc:82:34:ed:c3:e5:db:f0:59:95:cd:d8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f84ea5c3-3226-48ac-838b-0fdf69176854
        Validity
            Not Before: Feb 26 02:00:32 2026 GMT
            Not After : May 27 01:00:32 2026 GMT
        Subject: CN=57fd6eb5-ae3e-49c2-be41-a088fa253745
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:83:8f:9e:cd:89:69:59:0d:15:bc:c9:24:b9:
                    98:77:10:80:f1:df:ea:f2:1b:20:26:5d:72:47:24:
                    84:c0:91:43:ae:f4:ea:17:92:bf:a4:c0:f6:bd:fb:
                    84:26:9f:cb:b6:1f:b5:a2:e4:f3:23:12:76:bd:60:
                    5c:22:df:09:17:15:97:9c:08:63:e5:5c:82:a0:8d:
                    43:d2:41:e0:9e:d0:9a:9f:1b:2c:f2:c0:fa:aa:f3:
                    36:db:0c:f9:ae:29:63:0f:72:ed:47:0d:11:92:80:
                    2c:8f:28:9a:f6:a1:c2:e6:27:4e:e0:c2:20:42:99:
                    8c:cb:55:07:8a:65:6c:b3:02:cc:13:5b:21:0a:73:
                    d7:1d:ff:59:00:ac:7d:92:aa:18:38:38:0f:ea:ec:
                    96:69:01:54:9b:81:7a:66:db:9c:8a:ea:e1:bc:51:
                    35:b1:76:57:78:77:29:2a:d9:7c:ff:e1:46:7e:b5:
                    5b:fe:39:1a:9b:e6:b8:08:7f:a2:d9:f6:64:73:a0:
                    33:a7:8f:64:8a:35:39:f9:8b:f3:90:50:40:35:86:
                    9a:0b:51:d4:ab:96:d8:0f:bd:d2:6b:f9:40:76:d2:
                    31:b1:3b:d1:92:f3:8e:dc:80:98:14:5e:dd:dd:1d:
                    8a:cc:cd:2b:39:7b:62:86:34:31:83:b1:9e:41:6e:
                    e2:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0F:DC:43:99:7A:83:F1:75:F9:3C:AF:7B:F4:7D:98:75:ED:4E:F1:04
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/f84ea5c3-3226-48ac-838b-0fdf69176854/cb4a05db-d9d9-3a66-8b98-918d6b164822.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/f84ea5c3-3226-48ac-838b-0fdf69176854/f84ea5c3-3226-48ac-838b-0fdf69176854.crl

            X509v3 Authority Key Identifier:
                keyid:82:71:9E:64:EE:FB:6C:5A:E9:41:FD:EE:1D:55:A8:32:16:3B:EE:42

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/f84ea5c3-3226-48ac-838b-0fdf69176854.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.33.73.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         49:fe:6a:98:a4:7a:6e:84:a1:4a:1b:0c:f3:25:17:eb:bc:22:
         43:1a:76:2f:f1:92:75:1c:07:cd:0b:3d:0a:f9:ce:e4:b4:1b:
         05:bb:20:3b:b0:f9:30:3d:0b:71:0a:26:ec:3b:51:bb:f9:d1:
         47:34:33:5e:50:c8:52:b0:0b:27:48:7e:d4:56:43:50:28:03:
         f5:23:84:84:c7:d0:33:30:74:e9:95:f8:9b:9a:c3:0e:8a:11:
         68:43:3f:3a:f8:46:75:c2:0a:94:e4:99:bf:ee:b2:a9:e0:91:
         95:fc:f0:2e:1b:3b:0f:25:4a:b5:fa:d0:88:5d:54:10:11:f2:
         5f:cf:1f:ab:e2:14:56:1b:fe:55:4d:30:67:6d:9e:7e:3b:3a:
         cb:3b:66:2c:96:18:fb:23:01:cf:20:f6:b8:3f:79:9b:98:82:
         d6:ba:dc:ed:54:08:f2:ba:84:45:65:be:26:dc:14:f5:22:38:
         19:51:59:1a:e6:48:f2:05:d8:95:eb:8b:32:7a:8b:af:d0:4d:
         12:f6:85:22:c9:8b:c1:40:cc:42:c6:cc:dc:da:12:2f:a8:54:
         bc:4f:05:34:11:e1:33:13:64:50:e7:1e:28:f6:ed:9c:09:77:
         dc:e1:0c:9f:13:ee:54:50:eb:65:4d:f0:0a:ef:3b:a4:ce:ab:
         c0:e2:02:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 15:00:23 2026 by rpki-client