Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/908791ae-8a38-4ae8-a4af-e3de68a5db10/33d66f77-23e9-3fba-a372-f0a2d74a3921.roa
File:                     33d66f77-23e9-3fba-a372-f0a2d74a3921.roa (raw, json)
Hash identifier:          e0S/GPpFhnZWdZrtayaFnntfNk57BLYVByOJfyhzq/0=
Subject key identifier:   37:D6:6A:40:BB:42:73:8A:C9:5F:B3:87:7B:10:8A:C3:F6:E9:A1:38
Certificate issuer:       /CN=908791ae-8a38-4ae8-a4af-e3de68a5db10
Certificate serial:       010D0C9F4328584DD78B1987646B84B23D1F1C80
Authority key identifier: A0:02:D7:1A:A0:F0:1F:AE:A9:96:C2:DF:30:3D:CA:14:2B:17:8E:F6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/908791ae-8a38-4ae8-a4af-e3de68a5db10.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/908791ae-8a38-4ae8-a4af-e3de68a5db10/33d66f77-23e9-3fba-a372-f0a2d74a3921.roa
Signing time:             Fri 15 May 2026 13:00:30 +0000
ROA not before:           Fri 15 May 2026 13:00:30 +0000
ROA not after:            Thu 13 Aug 2026 13:00:30 +0000
asID:                     13768
IP address blocks:        64.227.212.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/908791ae-8a38-4ae8-a4af-e3de68a5db10/908791ae-8a38-4ae8-a4af-e3de68a5db10.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/908791ae-8a38-4ae8-a4af-e3de68a5db10/908791ae-8a38-4ae8-a4af-e3de68a5db10.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/908791ae-8a38-4ae8-a4af-e3de68a5db10.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 07 Jun 2026 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:d7:8b:19:87:64:6b:84:b2:3d:1f:1c:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=908791ae-8a38-4ae8-a4af-e3de68a5db10
        Validity
            Not Before: May 15 13:00:30 2026 GMT
            Not After : Aug 13 13:00:30 2026 GMT
        Subject: CN=1cdc9a57-41b9-4b2d-b842-221b4651a094
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:34:ca:d9:bc:fb:c8:76:6a:e5:f0:29:51:9a:
                    ed:98:e7:a5:d0:dd:d9:8d:a4:db:38:77:75:8d:0d:
                    50:80:bd:f9:9a:b5:ae:c1:b3:d1:b8:c6:f2:15:d8:
                    e9:4b:11:1d:3d:2c:1d:51:c6:fd:0d:82:c1:64:dd:
                    5d:2e:a7:b4:71:7e:a1:ef:63:3c:ab:af:47:b3:82:
                    5c:b9:c9:f2:9a:00:ad:bf:08:b2:fb:93:d8:65:25:
                    bf:7c:79:e2:a9:17:1e:aa:83:bb:bd:a5:cc:3a:45:
                    aa:2b:7c:f3:30:85:b8:d0:ca:38:4f:2d:bf:58:ae:
                    ca:1d:b8:ac:46:cc:03:f5:33:67:38:6b:fe:3e:53:
                    11:33:34:d3:fb:6e:de:61:06:eb:7c:7d:7e:ba:49:
                    46:fa:f4:da:80:68:5e:04:ff:95:20:06:c1:7b:3f:
                    fe:a1:a6:2d:41:f3:9a:20:bf:d6:10:3b:47:e5:21:
                    4e:95:48:41:27:e0:96:59:b0:1e:29:0d:cb:a5:70:
                    16:4d:51:1f:d8:de:e4:37:ba:4a:ac:75:c8:78:c2:
                    07:14:c7:0b:d2:a7:bf:73:c9:4e:3f:9a:20:d6:ba:
                    df:53:fc:87:50:94:b4:7a:94:5e:1c:da:a4:ac:5d:
                    1f:ee:c8:79:f6:82:5d:f1:6c:9a:15:f2:fc:63:0b:
                    cc:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                37:D6:6A:40:BB:42:73:8A:C9:5F:B3:87:7B:10:8A:C3:F6:E9:A1:38
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/908791ae-8a38-4ae8-a4af-e3de68a5db10/33d66f77-23e9-3fba-a372-f0a2d74a3921.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/908791ae-8a38-4ae8-a4af-e3de68a5db10/908791ae-8a38-4ae8-a4af-e3de68a5db10.crl

            X509v3 Authority Key Identifier:
                keyid:A0:02:D7:1A:A0:F0:1F:AE:A9:96:C2:DF:30:3D:CA:14:2B:17:8E:F6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/908791ae-8a38-4ae8-a4af-e3de68a5db10.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  64.227.212.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2c:e7:e5:f3:c9:0e:fd:be:49:99:ea:09:39:18:3d:83:ce:62:
         4b:49:ca:43:5a:01:fc:8f:cb:6b:e8:26:c8:da:f6:33:03:b5:
         25:64:60:f6:b8:35:09:c3:c1:8b:65:05:40:f1:55:f9:5e:d1:
         d8:10:d0:9f:22:35:27:e2:6b:be:db:47:b1:ef:46:11:c8:d2:
         d9:1b:c2:1c:e4:c0:99:a5:ec:cd:b0:06:f5:67:01:d0:88:f3:
         f7:cd:25:93:da:ef:70:eb:87:6e:a3:4a:c4:14:e9:c3:d5:2b:
         7b:e1:f0:42:f9:f9:68:0c:30:b1:84:97:61:b5:89:1d:64:1c:
         d4:b7:4a:36:e5:3b:eb:28:9b:1e:b6:c2:a6:fd:dc:75:9c:ba:
         7e:d5:13:30:c1:8e:03:7c:83:cb:56:43:d4:63:0d:b4:f8:59:
         4c:67:9f:27:f3:65:8a:bb:f2:6c:5b:b6:c7:03:82:6f:fc:35:
         60:0f:bc:b4:62:c0:17:26:62:aa:f4:df:21:f9:69:1c:ce:0e:
         12:dd:75:56:06:fb:6f:c4:c0:c2:b1:17:82:9f:78:13:f8:d3:
         94:a0:1d:80:c1:9d:83:ab:f4:46:b6:6b:c1:27:73:da:52:e6:
         a8:a4:36:cf:50:fd:30:79:5a:4f:15:22:a2:79:69:bc:e3:b3:
         cb:41:b6:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 6 17:00:26 2026 by rpki-client