Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b33bb246-446d-3905-b008-a2638b6812a2.roa
File:                     b33bb246-446d-3905-b008-a2638b6812a2.roa (raw, json)
Hash identifier:          qbPFpCyQj/JBnGn2lCFCyhAfDOiyDlTuDh89jmfEjMM=
Subject key identifier:   47:17:E8:23:2E:F2:E4:D5:47:53:A1:B4:95:C3:C5:BE:FB:9A:C6:0F
Certificate issuer:       /CN=b433f23f-334b-4db9-9fe1-bef76714d97f
Certificate serial:       010D0C9F4328584EE4232E50D10038C4172C0080
Authority key identifier: 8C:AB:5D:C7:32:C2:D8:F3:E5:93:61:6A:EE:B8:B5:20:B2:F9:13:BA
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b33bb246-446d-3905-b008-a2638b6812a2.roa
Signing time:             Wed 19 Aug 2026 18:03:42 +0000
ROA not before:           Wed 19 Aug 2026 18:03:42 +0000
ROA not after:            Mon 10 Apr 2028 04:00:00 +0000
asID:                     2914
IP address blocks:        129.250.130.25/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 21 Aug 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:e4:23:2e:50:d1:00:38:c4:17:2c:00:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b433f23f-334b-4db9-9fe1-bef76714d97f
        Validity
            Not Before: Aug 19 18:03:42 2026 GMT
            Not After : Apr 10 04:00:00 2028 GMT
        Subject: CN=e2118993-9657-45d2-be6f-a4dbdba063aa
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:42:87:d5:8b:a8:07:8b:50:ba:c9:f1:0f:1d:
                    f6:60:61:ed:22:d5:32:6b:67:1e:9b:ef:01:ef:28:
                    6d:9e:00:ef:b2:80:3d:70:33:62:5c:2b:25:60:e5:
                    fd:82:a6:7c:fe:2b:2f:1f:66:4e:d0:12:6c:41:a6:
                    76:6f:63:d2:7a:34:85:e3:98:95:f7:5a:03:80:7c:
                    be:57:c3:45:14:e7:5c:dc:79:7f:86:0d:eb:e9:20:
                    36:81:0a:1f:17:fc:79:51:5c:10:6e:b0:fd:d1:df:
                    22:d8:e1:ae:20:da:ac:77:bd:d2:ee:58:7a:1a:c8:
                    7f:e0:c4:9b:e5:47:5c:3b:07:7e:cf:8f:3e:87:7f:
                    b0:59:a5:2b:a4:80:3d:cb:08:f7:05:7d:64:95:4f:
                    01:8a:2c:57:5f:a0:33:c3:6d:63:59:5a:1b:20:bc:
                    b1:cd:00:08:ec:69:a9:6e:58:d9:dc:74:c7:e1:cd:
                    90:a7:35:43:e2:fc:8e:53:d7:ed:2b:30:7d:04:d7:
                    c2:ad:98:b3:b8:18:de:61:c1:34:a5:2c:84:5a:80:
                    d2:6d:73:87:bc:a8:07:25:4b:ad:d2:ea:c5:15:66:
                    8e:1e:eb:bf:47:17:bb:b8:a3:08:c3:75:7d:d0:01:
                    20:41:41:43:ad:9d:dc:93:d5:a4:83:27:b2:d0:81:
                    92:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                47:17:E8:23:2E:F2:E4:D5:47:53:A1:B4:95:C3:C5:BE:FB:9A:C6:0F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b33bb246-446d-3905-b008-a2638b6812a2.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.crl

            X509v3 Authority Key Identifier:
                keyid:8C:AB:5D:C7:32:C2:D8:F3:E5:93:61:6A:EE:B8:B5:20:B2:F9:13:BA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  129.250.130.25/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         93:f9:11:f7:0b:a1:8a:70:91:d2:98:e3:d1:6c:09:6e:ff:c5:
         9a:62:97:57:b3:aa:9d:12:b1:b7:4c:74:4f:97:be:bc:e9:7b:
         4f:47:42:98:b3:f5:65:4d:a0:20:2f:66:6f:af:ab:73:d1:7e:
         5a:05:22:f0:d8:33:a7:0f:96:c7:b1:9b:ba:a5:14:99:7a:5a:
         45:0d:56:38:c9:0e:4b:10:95:ca:c0:7a:b0:d4:36:0a:2e:1f:
         49:b1:29:0e:01:3c:6b:69:c9:38:b1:ac:09:1d:1f:6a:52:8d:
         ab:19:a3:1c:08:df:a8:d2:88:fa:df:a1:f3:3c:7f:d5:87:07:
         04:8c:2c:f7:7c:eb:ea:eb:0a:0c:7b:29:44:a6:26:dd:5e:33:
         a3:63:5e:10:12:0e:70:5e:6e:d0:5e:ad:62:9a:2f:65:88:c2:
         d2:4a:68:86:66:ed:8a:89:ec:63:de:2d:4a:4f:bd:ea:81:20:
         a2:c3:d3:8c:da:ea:ee:27:a0:69:c9:6f:05:77:f0:33:d9:82:
         3a:21:6a:67:9a:fe:5b:8e:d4:71:b8:09:2a:3c:3b:42:3f:52:
         3f:a4:b7:99:db:80:12:19:c0:a7:94:ac:21:c4:2d:55:3b:8a:
         f0:b3:1c:69:fb:82:fc:d8:23:80:e6:ee:e7:a5:4c:35:52:d0:
         a3:03:df:b3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 20 06:35:18 2026 by rpki-client