Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119/33977f8c-8641-3e7f-ae17-8b45a94fb4fa.roa
File:                     33977f8c-8641-3e7f-ae17-8b45a94fb4fa.roa (raw, json)
Hash identifier:          fDEefx5DH22wtw8WlEKQNhbalH9iPetJf9Y8Niz59n0=
Subject key identifier:   1C:69:C3:D7:CE:97:EC:F3:9B:5E:52:D8:FB:B6:29:74:49:16:BD:11
Certificate issuer:       /CN=93458135-7183-45e8-9dbc-dd82d2ffa119
Certificate serial:       010D0C9F4328584EEA8759583E5A232B07F3CEE0
Authority key identifier: EA:B4:18:7E:09:07:4B:16:FC:10:B7:7B:BE:F4:BC:B2:04:21:DE:E7
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119/33977f8c-8641-3e7f-ae17-8b45a94fb4fa.roa
Signing time:             Sat 22 Aug 2026 01:00:12 +0000
ROA not before:           Sat 22 Aug 2026 01:00:12 +0000
ROA not after:            Fri 20 Nov 2026 02:00:12 +0000
asID:                     18798
IP address blocks:        216.222.88.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119/93458135-7183-45e8-9dbc-dd82d2ffa119.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119/93458135-7183-45e8-9dbc-dd82d2ffa119.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 23 Sep 2026 15:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:ea:87:59:58:3e:5a:23:2b:07:f3:ce:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=93458135-7183-45e8-9dbc-dd82d2ffa119
        Validity
            Not Before: Aug 22 01:00:12 2026 GMT
            Not After : Nov 20 02:00:12 2026 GMT
        Subject: CN=b8bd6b15-8d72-40f6-a707-6310018d4de9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:85:7e:20:65:4b:85:5c:9f:6a:92:f0:24:58:07:
                    b8:47:34:d9:70:59:91:a6:e9:6d:1d:c8:8e:7a:48:
                    32:fd:e0:9e:50:3c:f1:17:f7:87:87:84:d4:9d:d0:
                    9f:4c:67:ec:79:43:1b:99:88:be:a0:c4:9c:ad:fe:
                    ef:6f:b0:5b:96:1e:82:1c:6d:9c:cc:0f:9e:46:b5:
                    76:35:cc:f7:7d:5f:bf:ee:ba:6a:2a:b2:24:b4:12:
                    5d:dd:88:c0:a1:27:e3:bb:e4:16:8b:1e:72:7f:b0:
                    ff:29:52:a5:ed:66:d4:b3:5b:f8:17:62:b5:11:4f:
                    30:65:34:43:95:42:00:30:4d:25:2c:4e:e6:32:fd:
                    4d:12:43:11:c9:d0:25:61:e5:bb:67:de:f9:8f:44:
                    1e:8a:90:07:dd:e9:6b:87:39:92:26:ee:4b:25:bb:
                    7d:2b:d7:2c:d8:0a:ef:dd:55:86:c2:74:3e:68:b6:
                    7a:72:e0:d0:b1:e1:d0:56:d3:c7:d5:dd:fd:2c:21:
                    61:cb:c9:13:a0:cc:c7:56:c1:e8:8d:66:ae:e2:55:
                    90:3d:c3:ad:c3:d7:2d:9a:2f:44:b3:73:e9:46:12:
                    e6:f6:a1:35:84:a9:d4:f4:e9:66:0f:e1:01:f0:84:
                    01:ff:f1:1e:e0:cb:87:c6:e0:ed:53:f3:2e:46:12:
                    0d:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1C:69:C3:D7:CE:97:EC:F3:9B:5E:52:D8:FB:B6:29:74:49:16:BD:11
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119/33977f8c-8641-3e7f-ae17-8b45a94fb4fa.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119/93458135-7183-45e8-9dbc-dd82d2ffa119.crl

            X509v3 Authority Key Identifier:
                keyid:EA:B4:18:7E:09:07:4B:16:FC:10:B7:7B:BE:F4:BC:B2:04:21:DE:E7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  216.222.88.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         12:42:ec:b4:3c:0f:fe:e6:fc:22:0c:41:c6:e8:72:ee:f3:9c:
         1d:ba:ed:e7:2d:87:d0:a1:ae:e3:db:8e:10:9b:34:7b:58:f2:
         b6:86:23:8f:85:2d:b5:1b:77:25:48:52:c4:dd:36:bf:50:7b:
         ab:67:81:3e:80:9e:08:02:1f:fb:b0:7e:17:cb:58:cd:0a:1f:
         00:38:83:38:6f:f3:70:62:bb:66:1c:36:03:b3:37:d5:b9:24:
         d9:be:b7:b7:1d:cb:81:0b:87:f3:5a:03:5f:2b:d3:8b:3b:5b:
         de:c9:e4:70:d0:3b:94:f8:b6:0e:0e:cc:7f:96:48:9a:e0:4c:
         28:25:c0:ef:ea:e4:19:09:29:9d:eb:f2:8d:ac:4e:3b:5c:27:
         2d:28:8e:f8:2a:cd:1e:f8:d4:bf:fe:2f:50:2c:12:e5:63:b3:
         37:46:f6:4b:44:61:a7:0f:f7:70:ba:85:3d:33:00:b4:17:4c:
         b4:20:67:00:3a:7a:8f:c3:9d:89:0e:09:b1:51:c9:e8:78:ab:
         f8:6d:1e:d1:36:b9:ec:b5:48:84:dd:6c:35:25:30:f8:78:a8:
         fc:02:bb:1e:11:6b:83:07:43:78:2f:f4:0e:d5:43:db:13:62:
         3f:18:c4:b3:7c:39:91:86:bb:ca:a4:5f:41:c0:f8:28:23:f7:
         58:af:e5:4c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 10:16:21 2026 by rpki-client