Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/33f9df9a-fc74-3283-835d-18480591dc36.roa
File:                     33f9df9a-fc74-3283-835d-18480591dc36.roa (raw, json)
Hash identifier:          MgiH/pZdu36UhCtBCJIgQ+eFnEOaf6DBXij8cm4TW4g=
Subject key identifier:   7C:4C:76:8B:4E:23:D8:C4:29:A0:C7:89:7F:58:A3:E1:FD:E5:16:0C
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584E31CF818E1959A25F90BDFD40
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/33f9df9a-fc74-3283-835d-18480591dc36.roa
Signing time:             Tue 16 Jun 2026 21:00:12 +0000
ROA not before:           Tue 16 Jun 2026 21:00:12 +0000
ROA not after:            Mon 14 Sep 2026 21:00:12 +0000
asID:                     397196
IP address blocks:        192.82.133.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 30 Jun 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:31:cf:81:8e:19:59:a2:5f:90:bd:fd:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Jun 16 21:00:12 2026 GMT
            Not After : Sep 14 21:00:12 2026 GMT
        Subject: CN=cca0938d-036e-4182-aab7-aa45e090eb62
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:e5:4a:77:6d:65:e2:dc:37:dc:db:3f:2e:aa:
                    91:46:f0:0a:1b:d9:44:f6:2f:19:2b:8a:bf:9a:c3:
                    b1:bf:96:8c:7e:92:62:ba:27:40:16:03:94:f6:bc:
                    64:64:a2:d8:b1:e8:84:5c:e3:8d:c6:d3:3d:7d:b0:
                    b4:d0:d3:fd:04:16:c2:93:2a:1b:6b:ee:82:44:50:
                    67:f3:8c:19:1d:cb:5e:c6:99:4d:7d:b3:ac:5c:9a:
                    af:01:c8:01:3f:19:a8:ef:a0:2a:9b:34:62:50:5a:
                    03:2a:32:cf:98:f1:94:11:18:d4:cf:01:6b:f5:d1:
                    f6:47:26:1e:f2:bf:e7:03:fa:d0:22:1e:0d:3c:f2:
                    a8:5e:46:04:4d:da:8f:6f:d9:2d:e8:2d:86:5e:43:
                    32:86:86:80:46:93:bd:bb:8c:c0:96:ad:39:5e:a1:
                    38:03:f5:4f:dc:23:83:af:c9:2c:15:4e:dd:f4:02:
                    5a:95:e4:27:dc:77:bb:c2:6a:b1:2c:ed:4c:b5:ac:
                    6a:58:07:98:fd:8c:d7:fe:10:4b:5c:c8:bf:87:ae:
                    b9:96:09:9a:5f:0a:1a:b3:a8:b2:2b:4a:79:a6:7f:
                    cd:05:df:29:37:f2:35:4e:2f:2c:65:c0:4d:18:56:
                    09:97:ff:9c:e7:eb:d7:50:9b:f3:6e:2d:b9:c3:24:
                    78:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7C:4C:76:8B:4E:23:D8:C4:29:A0:C7:89:7F:58:A3:E1:FD:E5:16:0C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/33f9df9a-fc74-3283-835d-18480591dc36.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.82.133.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         75:51:ba:92:7d:cf:dc:9d:96:61:4d:49:a5:4e:81:7f:34:0d:
         91:1b:97:57:f1:6e:c1:3a:a7:6b:d2:97:4d:87:91:b4:08:67:
         57:94:1c:92:66:1d:4a:a1:4e:7a:07:23:03:c2:99:fa:45:95:
         29:4f:ba:5e:ee:fa:f5:d5:0a:0a:89:89:bd:25:10:97:93:aa:
         9c:9e:56:41:1f:38:27:9a:60:90:1d:46:63:d2:32:70:1d:ee:
         eb:fc:9c:b0:b0:04:88:85:0e:6f:37:14:d6:17:ef:e5:9a:95:
         b4:ba:60:67:e6:13:d2:6d:7d:59:2e:b9:61:eb:01:ee:33:1a:
         ef:11:1d:e0:1e:f8:98:df:d0:91:32:8e:f2:e2:e6:26:87:b8:
         f8:4a:df:46:80:e7:27:5a:46:d4:bf:93:be:e8:63:85:66:09:
         18:30:74:91:a4:b7:bb:f1:ac:f8:6b:0f:50:19:e2:26:81:d6:
         6c:a6:b7:8b:4a:f6:98:01:40:ec:5f:33:f3:73:1a:60:fe:3f:
         df:da:44:04:2b:2a:a8:83:94:7d:b6:48:9d:63:10:23:f6:bd:
         16:bf:43:01:b0:9b:d9:bd:c1:af:b6:52:c6:56:98:f8:29:4a:
         96:1b:b7:1b:eb:78:d1:e0:7f:fe:98:92:ee:61:1b:b2:df:b2:
         5d:be:ed:8b
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE4xz4GOGVmiX5C9/UAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz
NmMyMB4XDTI2MDYxNjIxMDAxMloXDTI2MDkxNDIxMDAxMlowLzEtMCsGA1UEAxMk
Y2NhMDkzOGQtMDM2ZS00MTgyLWFhYjctYWE0NWUwOTBlYjYyMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2OVKd21l4tw33Ns/LqqRRvAKG9lE9i8ZK4q/
msOxv5aMfpJiuidAFgOU9rxkZKLYseiEXOONxtM9fbC00NP9BBbCkyoba+6CRFBn
84wZHctexplNfbOsXJqvAcgBPxmo76AqmzRiUFoDKjLPmPGUERjUzwFr9dH2RyYe
8r/nA/rQIh4NPPKoXkYETdqPb9kt6C2GXkMyhoaARpO9u4zAlq05XqE4A/VP3COD
r8ksFU7d9AJaleQn3He7wmqxLO1MtaxqWAeY/YzX/hBLXMi/h665lgmaXwoas6iy
K0p5pn/NBd8pN/I1Ti8sZcBNGFYJl/+c5+vXUJvzbi25wyR4KwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFHxMdotOI9jEKaDHiX9Yo+H95RYMMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4
ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvMzNmOWRmOWEtZmM3NC0z
MjgzLTgzNWQtMTg0ODA1OTFkYzM2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4
YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj
MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz
ZGNiYzM2YzIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwFKFMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAHVRupJ9z9ydlmFNSaVOgX80DZEbl1fxbsE6p2vSl02HkbQIZ1eUHJJm
HUqhTnoHIwPCmfpFlSlPul7u+vXVCgqJib0lEJeTqpyeVkEfOCeaYJAdRmPSMnAd
7uv8nLCwBIiFDm83FNYX7+WalbS6YGfmE9JtfVkuuWHrAe4zGu8RHeAe+Jjf0JEy
jvLi5iaHuPhK30aA5ydaRtS/k77oY4VmCRgwdJGkt7vxrPhrD1AZ4iaB1mymt4tK
9pgBQOxfM/NzGmD+P9/aRAQrKqiDlH22SJ1jECP2vRa/QwGwm9m9wa+2UsZWmPgp
SpYbtxvreNHgf/6Yku5hG7Lfsl2+7Ys=
-----END CERTIFICATE-----
Generated at Sun Jun 28 19:45:00 2026 by rpki-client