Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74335fa0-6c3f-4878-9f3f-95c5ce0fb955/33bd73c7-0a37-3f1d-a81d-fba41a54e5c5.roa
File:                     33bd73c7-0a37-3f1d-a81d-fba41a54e5c5.roa (raw, json)
Hash identifier:          E1RQuRncIq4w05iTc/XAGsfH/5Ffvqlk21ccCzeiebE=
Subject key identifier:   45:12:0D:4F:AD:09:B0:1F:75:77:26:73:3F:0D:AF:62:40:EE:8E:BC
Certificate issuer:       /CN=74335fa0-6c3f-4878-9f3f-95c5ce0fb955
Certificate serial:       010D0C9F4328584D4D5A55EF6525B7D38391B800
Authority key identifier: 73:C7:23:67:8A:1E:51:1F:DC:64:E6:F4:88:18:B6:08:D1:1E:E5:31
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74335fa0-6c3f-4878-9f3f-95c5ce0fb955.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74335fa0-6c3f-4878-9f3f-95c5ce0fb955/33bd73c7-0a37-3f1d-a81d-fba41a54e5c5.roa
Signing time:             Fri 27 Mar 2026 01:00:31 +0000
ROA not before:           Fri 27 Mar 2026 01:00:31 +0000
ROA not after:            Thu 25 Jun 2026 01:00:31 +0000
asID:                     5662
IP address blocks:        157.166.224.0/19 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74335fa0-6c3f-4878-9f3f-95c5ce0fb955/74335fa0-6c3f-4878-9f3f-95c5ce0fb955.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74335fa0-6c3f-4878-9f3f-95c5ce0fb955/74335fa0-6c3f-4878-9f3f-95c5ce0fb955.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74335fa0-6c3f-4878-9f3f-95c5ce0fb955.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 08 Apr 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:4d:5a:55:ef:65:25:b7:d3:83:91:b8:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=74335fa0-6c3f-4878-9f3f-95c5ce0fb955
        Validity
            Not Before: Mar 27 01:00:31 2026 GMT
            Not After : Jun 25 01:00:31 2026 GMT
        Subject: CN=09bf097f-38c3-4621-81ba-ac9d9912383d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:ad:96:9e:5e:9b:a9:d2:97:3a:25:ac:a2:ce:
                    75:66:62:67:b3:35:87:42:d7:f2:76:17:d5:bb:da:
                    cf:2f:6c:a9:f5:93:0e:2e:9b:df:93:19:0c:03:ac:
                    1b:97:65:b4:25:2b:85:ef:eb:27:58:3f:78:12:2c:
                    ee:68:71:62:cd:1d:75:31:c5:e1:ab:ea:6a:d7:a8:
                    0d:2b:f4:ff:88:3f:d2:a1:12:77:8a:78:a3:d7:5a:
                    c1:ac:c1:39:b2:6a:90:07:80:d8:cd:4f:b2:0f:74:
                    4b:24:c5:b0:05:0b:ad:9b:cf:22:cf:cf:bc:c2:45:
                    be:a0:53:66:5f:92:9f:ab:2a:78:75:38:66:1a:d7:
                    6f:10:51:ac:7a:0e:4a:52:43:c4:37:31:85:61:e8:
                    10:2b:46:d2:c8:71:7b:a4:d0:76:51:aa:6b:e7:db:
                    1d:30:63:b8:c8:bc:b0:87:fc:b2:5f:0f:82:2f:65:
                    33:b9:70:b1:c6:d0:c8:d3:f6:ab:49:72:3f:c0:8d:
                    c9:c3:ec:c1:d0:82:97:20:a8:d2:65:0a:76:73:3d:
                    5a:b8:a9:11:5c:fd:74:5c:8e:9b:30:58:c6:fd:51:
                    76:e4:c9:d3:ad:41:c2:dd:63:cb:7d:7a:ee:c9:f7:
                    99:9a:fc:ad:5a:2e:ce:9b:af:08:8b:bc:94:ad:5d:
                    cf:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                45:12:0D:4F:AD:09:B0:1F:75:77:26:73:3F:0D:AF:62:40:EE:8E:BC
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74335fa0-6c3f-4878-9f3f-95c5ce0fb955/33bd73c7-0a37-3f1d-a81d-fba41a54e5c5.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74335fa0-6c3f-4878-9f3f-95c5ce0fb955/74335fa0-6c3f-4878-9f3f-95c5ce0fb955.crl

            X509v3 Authority Key Identifier:
                keyid:73:C7:23:67:8A:1E:51:1F:DC:64:E6:F4:88:18:B6:08:D1:1E:E5:31

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74335fa0-6c3f-4878-9f3f-95c5ce0fb955.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  157.166.224.0/19

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5e:8a:00:fb:0e:1b:6e:97:b3:fa:df:86:2c:a9:22:ba:b8:28:
         44:ed:30:dc:dc:93:ad:aa:6e:3f:a7:59:20:cb:6e:34:a6:44:
         ed:3c:a2:72:cb:f3:fe:09:50:03:09:8d:25:c6:66:f5:4e:6b:
         5f:9e:4c:4b:0c:96:bf:22:52:56:dc:57:b4:c3:6d:aa:47:55:
         42:d4:3e:19:24:b4:a4:fd:bb:40:34:f2:6b:b2:58:76:bd:e2:
         09:31:39:53:56:92:7f:ff:e4:57:1b:62:12:f2:3f:0a:ea:66:
         1d:58:c2:47:a0:49:57:e3:db:0d:01:a0:68:fc:94:8a:ec:a1:
         01:88:70:e4:8f:88:35:67:04:a5:d1:8f:dd:b8:41:57:d9:28:
         48:b3:96:5d:cf:53:77:53:8d:ce:3a:74:ed:fd:66:69:36:19:
         37:21:01:69:7d:54:f9:0a:35:18:b7:72:b0:7b:38:c6:16:83:
         38:0f:40:e9:e5:20:ce:45:d4:be:2f:75:1b:2f:0a:6a:f0:d7:
         17:6b:48:0c:51:05:5c:cb:ec:f8:a0:96:57:eb:e0:fa:c8:22:
         bb:4b:20:d7:14:b8:ba:b0:b8:aa:3a:0f:bb:8d:15:98:86:ab:
         e4:25:b1:10:f2:43:8f:09:f4:05:70:df:76:ee:fb:de:1c:3e:
         05:40:ad:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 7 13:29:49 2026 by rpki-client