Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/a4c37a54-53a7-4980-be55-6af24c04c176/e95ddb8f-9c3c-3846-8445-12d9f251ec3c.roa
File:                     e95ddb8f-9c3c-3846-8445-12d9f251ec3c.roa (raw, json)
Hash identifier:          GNCWxDntHagcZfEUZE426yId8L5bM1eaT3qAWs4YUZ8=
Subject key identifier:   0D:6C:DB:A4:D0:37:5C:BF:60:45:B0:E4:BC:5B:76:6B:94:7B:50:13
Certificate issuer:       /CN=a4c37a54-53a7-4980-be55-6af24c04c176
Certificate serial:       010D0C9F4328584CF587844C4044413BFD4A82C0
Authority key identifier: F7:10:32:22:F0:1B:08:D5:57:3B:08:B7:CA:A7:B8:8C:47:38:88:AB
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/a4c37a54-53a7-4980-be55-6af24c04c176.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/a4c37a54-53a7-4980-be55-6af24c04c176/e95ddb8f-9c3c-3846-8445-12d9f251ec3c.roa
Signing time:             Mon 23 Feb 2026 14:00:41 +0000
ROA not before:           Mon 23 Feb 2026 14:00:41 +0000
ROA not after:            Sun 24 May 2026 13:00:41 +0000
asID:                     62917
IP address blocks:        162.249.33.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/a4c37a54-53a7-4980-be55-6af24c04c176/a4c37a54-53a7-4980-be55-6af24c04c176.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/a4c37a54-53a7-4980-be55-6af24c04c176/a4c37a54-53a7-4980-be55-6af24c04c176.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/a4c37a54-53a7-4980-be55-6af24c04c176.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 03 Mar 2026 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:f5:87:84:4c:40:44:41:3b:fd:4a:82:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a4c37a54-53a7-4980-be55-6af24c04c176
        Validity
            Not Before: Feb 23 14:00:41 2026 GMT
            Not After : May 24 13:00:41 2026 GMT
        Subject: CN=35348a74-38fa-45e7-8b60-c6bfb0978773
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:db:c6:25:c4:53:bc:fb:ff:c4:5a:20:8f:cc:da:
                    29:54:0c:8b:1d:2f:56:6b:b8:52:77:b5:6e:70:f9:
                    e5:c6:c3:68:2a:30:fb:d6:bd:ca:fd:3c:e6:62:93:
                    d5:c4:52:bd:ba:3d:44:5c:dc:a1:e4:de:ee:c9:b2:
                    8a:a5:f9:00:a1:17:77:63:78:07:f8:52:de:9f:e1:
                    da:32:82:c3:39:dc:c8:3b:df:cf:ae:55:0a:aa:40:
                    84:83:a6:09:19:40:f6:a3:de:d1:fa:e5:d1:40:ed:
                    d3:26:d5:23:ab:1f:2c:52:88:67:b8:52:c1:12:d2:
                    e3:ab:81:93:21:ae:48:67:af:bf:57:ba:75:1a:27:
                    78:15:69:4b:dc:c5:a3:06:79:50:1b:a8:8c:19:d7:
                    b4:33:6c:38:9d:86:92:13:25:70:85:d6:35:79:a4:
                    ad:53:c8:43:85:47:66:90:3a:0a:f3:1f:6e:7f:6a:
                    b3:59:52:1e:3e:63:17:64:9d:90:23:f1:6f:13:9e:
                    d5:d2:3d:a4:9a:80:ca:20:e1:37:0b:b2:ba:fb:09:
                    b2:e4:9e:fa:6a:8e:48:db:5e:17:ef:3a:30:7f:15:
                    d4:7b:81:69:05:1f:c3:65:e4:9e:1a:71:df:19:85:
                    58:06:68:7f:8a:77:ed:29:dd:0c:d9:24:f4:da:9b:
                    cf:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0D:6C:DB:A4:D0:37:5C:BF:60:45:B0:E4:BC:5B:76:6B:94:7B:50:13
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/a4c37a54-53a7-4980-be55-6af24c04c176/e95ddb8f-9c3c-3846-8445-12d9f251ec3c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/a4c37a54-53a7-4980-be55-6af24c04c176/a4c37a54-53a7-4980-be55-6af24c04c176.crl

            X509v3 Authority Key Identifier:
                keyid:F7:10:32:22:F0:1B:08:D5:57:3B:08:B7:CA:A7:B8:8C:47:38:88:AB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/a4c37a54-53a7-4980-be55-6af24c04c176.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  162.249.33.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a0:48:32:54:28:f7:14:1b:82:80:d3:6c:4d:4a:ca:39:6b:1c:
         29:17:8f:af:e4:75:2d:19:98:be:a4:4f:9f:ea:52:6b:f5:2c:
         09:77:b0:ac:46:8f:82:0d:49:2b:65:b5:63:43:36:5b:a4:21:
         7e:8f:23:68:28:3d:2b:77:1e:71:92:d5:6e:78:49:22:11:06:
         40:e6:c1:13:d9:f6:8d:23:00:d5:d0:3a:7d:d9:9e:4c:96:f8:
         4e:d5:34:6f:19:e6:d6:98:56:6a:22:cc:1f:0a:74:8f:0f:f8:
         6d:fb:3a:2f:6f:69:c2:8b:1d:31:65:e3:ca:bd:2d:39:8d:07:
         db:da:fa:8c:c6:0c:e9:2f:cd:bb:28:99:3c:34:75:e0:66:cd:
         3a:83:ff:cd:c6:e4:53:a6:a5:f7:b5:4c:3b:ed:0c:81:f9:9b:
         53:08:02:10:67:80:65:5d:2e:af:50:31:94:93:6a:ca:61:ea:
         2a:ff:23:76:15:1b:26:86:c0:ea:1f:0b:d8:fc:5d:b5:b4:c4:
         4b:f4:ee:31:80:b8:ca:60:6c:f0:62:8c:f6:12:ba:6d:8c:e8:
         9d:2e:e1:c6:82:c4:a5:4c:a0:3e:8f:71:fa:a3:45:53:e7:72:
         23:65:99:eb:ba:84:59:bc:63:87:6a:2c:be:fc:e0:25:53:1c:
         7e:c8:e4:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 20:39:09 2026 by rpki-client