Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/99f49497-e145-4e4e-895c-2a7825ca6508/f3357a76-a2e7-37a8-a963-683c8666e44b.roa
File:                     f3357a76-a2e7-37a8-a963-683c8666e44b.roa (raw, json)
Hash identifier:          xNTLOYq/GddHWtG3oVhStoCdgZeVKIqb5FAI3X+CBho=
Subject key identifier:   3E:19:36:A6:32:17:66:FE:01:83:97:C0:09:0E:A5:B8:2B:DE:FB:9B
Certificate issuer:       /CN=99f49497-e145-4e4e-895c-2a7825ca6508
Certificate serial:       010D0C9F4328584DD78B1713A25DE28761F4D980
Authority key identifier: 2E:21:56:94:21:EA:A7:3F:43:08:43:7F:A4:6B:37:3C:50:4F:97:D4
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/99f49497-e145-4e4e-895c-2a7825ca6508.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/99f49497-e145-4e4e-895c-2a7825ca6508/f3357a76-a2e7-37a8-a963-683c8666e44b.roa
Signing time:             Fri 15 May 2026 13:00:30 +0000
ROA not before:           Fri 15 May 2026 13:00:30 +0000
ROA not after:            Thu 13 Aug 2026 13:00:30 +0000
asID:                     400703
IP address blocks:        162.33.190.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/99f49497-e145-4e4e-895c-2a7825ca6508/99f49497-e145-4e4e-895c-2a7825ca6508.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/99f49497-e145-4e4e-895c-2a7825ca6508/99f49497-e145-4e4e-895c-2a7825ca6508.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/99f49497-e145-4e4e-895c-2a7825ca6508.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 27 May 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:d7:8b:17:13:a2:5d:e2:87:61:f4:d9:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=99f49497-e145-4e4e-895c-2a7825ca6508
        Validity
            Not Before: May 15 13:00:30 2026 GMT
            Not After : Aug 13 13:00:30 2026 GMT
        Subject: CN=b0955888-504d-4d93-b915-30626deb2035
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:89:49:ba:fb:0c:92:05:24:87:11:1a:08:c7:61:
                    33:ff:b7:77:40:3b:85:8f:70:16:90:e9:25:32:6e:
                    43:1b:f7:84:3c:0e:d7:0c:be:46:db:3d:63:8f:e8:
                    2c:87:6e:3a:93:52:5d:1f:fb:0c:0f:2b:b5:a1:b2:
                    91:04:d9:3e:cc:bd:10:de:36:1a:9c:b4:2e:ff:13:
                    12:c5:0f:b1:b1:b9:7c:10:14:44:a9:e5:21:f5:a1:
                    89:c5:71:03:a4:b8:d4:42:12:a1:12:05:b2:40:ef:
                    b7:54:7f:ee:bb:be:e6:50:8f:a0:50:bf:bb:d6:8b:
                    60:ac:6b:77:2e:e2:3e:af:66:fe:96:5c:63:b6:69:
                    ed:ba:13:4f:3b:bc:28:da:ec:46:a7:47:cb:aa:1e:
                    93:39:e2:62:3f:3f:72:45:0e:84:c2:d8:3f:6e:99:
                    1e:bd:ac:ea:d4:05:bc:12:11:c3:5c:79:2e:f2:bd:
                    07:85:62:83:ca:6e:a8:43:dd:8b:b7:4e:97:40:e3:
                    55:b0:ac:a0:1f:87:da:ff:c7:ce:b1:c2:ed:3e:b0:
                    07:9b:f0:52:de:49:da:17:8f:85:82:b2:23:47:63:
                    72:9d:a4:41:ce:1a:32:ba:76:45:71:b9:f7:5b:53:
                    f2:70:7e:5d:d4:f7:9a:8f:f4:d2:c2:f8:f6:5f:38:
                    3d:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3E:19:36:A6:32:17:66:FE:01:83:97:C0:09:0E:A5:B8:2B:DE:FB:9B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/99f49497-e145-4e4e-895c-2a7825ca6508/f3357a76-a2e7-37a8-a963-683c8666e44b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/99f49497-e145-4e4e-895c-2a7825ca6508/99f49497-e145-4e4e-895c-2a7825ca6508.crl

            X509v3 Authority Key Identifier:
                keyid:2E:21:56:94:21:EA:A7:3F:43:08:43:7F:A4:6B:37:3C:50:4F:97:D4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/99f49497-e145-4e4e-895c-2a7825ca6508.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  162.33.190.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         36:aa:79:39:37:b7:d0:96:a7:9c:75:34:a0:e3:cc:70:50:41:
         a5:8f:0f:f9:fb:95:33:4e:15:b6:4c:09:7f:e6:34:3e:2f:d6:
         26:f3:60:16:96:08:8c:73:77:da:af:66:46:f2:5d:93:f7:8e:
         cf:3d:26:be:be:7e:cb:ca:67:2c:cc:89:c4:d5:eb:01:fb:46:
         f9:d6:40:db:8e:6d:2a:dc:02:81:b9:89:3e:33:b1:e3:ba:da:
         a2:66:c2:c9:56:c3:b7:a0:a4:62:b2:2a:ea:53:62:a2:97:0a:
         2f:d2:db:df:8e:81:c6:5c:98:df:d5:9e:d7:0d:43:73:d2:43:
         b5:47:4f:2b:6a:9c:50:79:85:91:fa:c0:21:7b:d5:e0:12:22:
         0b:2a:ec:02:e6:30:ca:6a:51:ef:a8:45:be:e1:3c:c1:34:0a:
         48:ee:76:33:b2:74:0f:eb:8e:74:8f:3b:14:d0:69:0d:d6:4b:
         27:70:7e:93:fe:19:2e:8d:e2:f9:a9:a4:9a:04:20:6d:d3:c3:
         af:f5:a7:dc:10:82:29:a1:68:eb:26:14:c6:e5:c4:27:55:02:
         19:85:c6:30:fa:8f:c5:37:45:18:ff:f9:69:eb:2a:7b:19:e0:
         ce:a4:d5:8a:38:e2:2b:92:44:48:05:e0:59:d0:25:b1:7e:d7:
         7c:7c:2c:4d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 25 02:54:26 2026 by rpki-client