Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5dce877b-b7a0-44f5-b8c2-1115311c773e/7ee7228b-bbfa-3084-82dc-bdb8695a3e98.roa
File:                     7ee7228b-bbfa-3084-82dc-bdb8695a3e98.roa (raw, json)
Hash identifier:          21FfNw6MbfXGSm6v5qEFSWXQjOtaOF28w+0kDyM+Lmw=
Subject key identifier:   2C:FA:7B:43:73:46:15:DA:E8:A0:4C:A3:34:74:41:A3:52:86:A3:14
Certificate issuer:       /CN=5dce877b-b7a0-44f5-b8c2-1115311c773e
Certificate serial:       010D0C9F4328584F5E62E3EA0976A730D80DC3E0
Authority key identifier: 91:40:49:57:21:04:32:E7:F1:28:40:C4:C1:5B:49:A8:24:DF:F2:2A
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5dce877b-b7a0-44f5-b8c2-1115311c773e.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5dce877b-b7a0-44f5-b8c2-1115311c773e/7ee7228b-bbfa-3084-82dc-bdb8695a3e98.roa
Signing time:             Fri 02 Oct 2026 13:00:13 +0000
ROA not before:           Fri 02 Oct 2026 13:00:13 +0000
ROA not after:            Thu 31 Dec 2026 14:00:13 +0000
asID:                     14618
IP address blocks:        207.202.33.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5dce877b-b7a0-44f5-b8c2-1115311c773e/5dce877b-b7a0-44f5-b8c2-1115311c773e.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5dce877b-b7a0-44f5-b8c2-1115311c773e/5dce877b-b7a0-44f5-b8c2-1115311c773e.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5dce877b-b7a0-44f5-b8c2-1115311c773e.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 30 Oct 2026 10:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:5e:62:e3:ea:09:76:a7:30:d8:0d:c3:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5dce877b-b7a0-44f5-b8c2-1115311c773e
        Validity
            Not Before: Oct  2 13:00:13 2026 GMT
            Not After : Dec 31 14:00:13 2026 GMT
        Subject: CN=6c74e314-7762-4cc8-b34e-4153a16a288c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:dd:95:7a:21:f8:0a:43:95:c1:9f:c8:76:fa:
                    94:30:53:51:d1:1f:6c:f8:d9:d3:f5:ac:70:69:9a:
                    86:c1:46:7f:9c:2f:2c:f6:22:34:ae:ec:01:f1:33:
                    41:74:78:48:39:3f:11:59:c2:8b:15:69:bc:2b:3d:
                    d6:8d:47:2e:7b:59:8b:5d:c3:9f:91:f5:0a:5b:ad:
                    d0:22:28:67:f5:e6:ac:a7:25:d1:e7:c8:64:52:0a:
                    43:3e:ee:c8:44:bd:0a:e6:84:26:80:46:5b:e6:2b:
                    8c:b4:3f:dd:01:57:b6:ce:78:45:da:e5:98:d2:17:
                    d0:15:5f:a0:50:4a:d9:fb:ab:a9:81:a6:2f:94:e7:
                    da:59:06:c3:a5:d2:2d:59:1d:68:3c:d2:b4:d1:9e:
                    0c:dd:50:12:a7:c0:15:10:d7:e3:4e:20:a7:b7:f6:
                    60:39:b5:b4:a4:b9:95:e6:fc:c0:5a:91:df:ad:c0:
                    31:97:ce:22:98:d4:9d:ef:f2:60:f4:0f:43:30:3a:
                    42:df:86:ee:03:e5:9e:19:d2:b9:d3:10:2a:33:fe:
                    28:41:ee:85:40:de:33:68:4b:95:c9:6c:08:26:9a:
                    e9:2c:69:39:68:26:1d:0e:8f:2e:44:20:4d:11:b2:
                    bb:d8:ec:a7:31:57:0b:04:d8:15:46:b4:05:f9:95:
                    9e:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2C:FA:7B:43:73:46:15:DA:E8:A0:4C:A3:34:74:41:A3:52:86:A3:14
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5dce877b-b7a0-44f5-b8c2-1115311c773e/7ee7228b-bbfa-3084-82dc-bdb8695a3e98.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5dce877b-b7a0-44f5-b8c2-1115311c773e/5dce877b-b7a0-44f5-b8c2-1115311c773e.crl

            X509v3 Authority Key Identifier:
                keyid:91:40:49:57:21:04:32:E7:F1:28:40:C4:C1:5B:49:A8:24:DF:F2:2A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5dce877b-b7a0-44f5-b8c2-1115311c773e.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  207.202.33.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         34:67:f8:1b:65:c2:39:6a:76:41:09:1d:7f:af:c5:30:ed:60:
         fa:20:2a:6a:f9:6a:cb:1c:a3:96:f2:a0:bd:45:2e:6d:e8:41:
         40:f8:aa:89:bd:2c:56:be:32:46:57:4f:98:ee:d8:e1:d4:d9:
         eb:90:fd:b8:6e:a2:f2:50:7a:ac:a9:c1:64:ff:60:ec:a7:14:
         e1:6f:3d:59:80:77:8d:17:53:88:7e:93:84:08:63:51:3c:2c:
         10:93:88:37:6d:35:b4:c1:20:50:16:59:d8:30:4e:bc:24:77:
         51:7e:8f:3d:73:a5:f2:19:0f:85:34:41:78:91:86:26:d4:9c:
         c5:9d:fe:90:c2:c5:24:25:15:37:c3:7c:4c:2e:b6:e8:78:bf:
         01:5c:fb:d6:03:9e:c3:e5:07:ce:90:af:87:b3:2d:f2:ef:93:
         ac:f6:fa:08:ea:65:1b:c5:b7:46:8f:f8:68:5c:87:4e:e6:f1:
         c3:98:91:d7:41:ca:ea:c3:d9:70:50:ed:6d:7d:b2:27:44:df:
         dc:ba:37:c6:e8:8a:ae:1e:0e:ae:b3:ad:22:8e:b9:0a:1f:8f:
         47:18:39:2e:01:d1:46:2f:00:2b:02:14:60:6c:19:07:a3:9b:
         4a:d4:f0:b7:69:53:85:55:b8:11:dd:0b:00:51:db:70:27:fc:
         c7:35:d8:ea
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9eYuPqCXanMNgNw+AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNWRjZTg3N2ItYjdhMC00NGY1LWI4YzItMTExNTMxMWM3
NzNlMB4XDTI2MTAwMjEzMDAxM1oXDTI2MTIzMTE0MDAxM1owLzEtMCsGA1UEAxMk
NmM3NGUzMTQtNzc2Mi00Y2M4LWIzNGUtNDE1M2ExNmEyODhjMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwt2VeiH4CkOVwZ/IdvqUMFNR0R9s+NnT9axw
aZqGwUZ/nC8s9iI0ruwB8TNBdHhIOT8RWcKLFWm8Kz3WjUcue1mLXcOfkfUKW63Q
Iihn9easpyXR58hkUgpDPu7IRL0K5oQmgEZb5iuMtD/dAVe2znhF2uWY0hfQFV+g
UErZ+6upgaYvlOfaWQbDpdItWR1oPNK00Z4M3VASp8AVENfjTiCnt/ZgObW0pLmV
5vzAWpHfrcAxl84imNSd7/Jg9A9DMDpC34buA+WeGdK50xAqM/4oQe6FQN4zaEuV
yWwIJprpLGk5aCYdDo8uRCBNEbK72OynMVcLBNgVRrQF+ZWe8QIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFCz6e0NzRhXa6KBMozR0QaNShqMUMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZGNl
ODc3Yi1iN2EwLTQ0ZjUtYjhjMi0xMTE1MzExYzc3M2UvN2VlNzIyOGItYmJmYS0z
MDg0LTgyZGMtYmRiODY5NWEzZTk4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWRjZTg3N2ItYjdhMC00NGY1LWI4
YzItMTExNTMxMWM3NzNlLzVkY2U4NzdiLWI3YTAtNDRmNS1iOGMyLTExMTUzMTFj
NzczZS5jcmwwHwYDVR0jBBgwFoAUkUBJVyEEMufxKEDEwVtJqCTf8iowDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS81ZGNlODc3Yi1iN2EwLTQ0ZjUtYjhjMi0xMTE1
MzExYzc3M2UuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAz8ohMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBADRn+BtlwjlqdkEJHX+vxTDtYPogKmr5assco5byoL1FLm3oQUD4qom9
LFa+MkZXT5ju2OHU2euQ/bhuovJQeqypwWT/YOynFOFvPVmAd40XU4h+k4QIY1E8
LBCTiDdtNbTBIFAWWdgwTrwkd1F+jz1zpfIZD4U0QXiRhibUnMWd/pDCxSQlFTfD
fEwutuh4vwFc+9YDnsPlB86Qr4ezLfLvk6z2+gjqZRvFt0aP+Ghch07m8cOYkddB
yurD2XBQ7W19sidE39y6N8boiq4eDq6zrSKOuQofj0cYOS4B0UYvACsCFGBsGQej
m0rU8LdpU4VVuBHdCwBR23An/Mc12Oo=
-----END CERTIFICATE-----
Generated at Thu Oct 29 06:15:56 2026 by rpki-client