Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/4a39e371-6e3b-458b-9b07-c3a075c5aecd/e63332ff-ae2d-3e42-a4e6-7314f52697e0.roa
File:                     e63332ff-ae2d-3e42-a4e6-7314f52697e0.roa (raw, json)
Hash identifier:          LrUdh/cueACTt+to08dgDq41nnCIKOcpyUzWBtTYGmA=
Subject key identifier:   0B:BE:C2:A8:B4:25:82:C8:34:16:54:7B:08:1F:7D:D9:AD:16:43:BA
Certificate issuer:       /CN=4a39e371-6e3b-458b-9b07-c3a075c5aecd
Certificate serial:       010D0C9F4328584EBA86806133C273DEC7A7C380
Authority key identifier: 56:D5:8B:45:0B:7A:97:85:04:F5:AD:94:62:26:62:54:ED:E2:B1:AF
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/4a39e371-6e3b-458b-9b07-c3a075c5aecd.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/4a39e371-6e3b-458b-9b07-c3a075c5aecd/e63332ff-ae2d-3e42-a4e6-7314f52697e0.roa
Signing time:             Tue 04 Aug 2026 20:19:52 +0000
ROA not before:           Tue 04 Aug 2026 20:19:52 +0000
ROA not after:            Mon 02 Nov 2026 21:19:52 +0000
asID:                     40933
IP address blocks:        70.33.0.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/4a39e371-6e3b-458b-9b07-c3a075c5aecd/4a39e371-6e3b-458b-9b07-c3a075c5aecd.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/4a39e371-6e3b-458b-9b07-c3a075c5aecd/4a39e371-6e3b-458b-9b07-c3a075c5aecd.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/4a39e371-6e3b-458b-9b07-c3a075c5aecd.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/615fe1dd-d829-4c87-b2cc-5689381a3c42.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/615fe1dd-d829-4c87-b2cc-5689381a3c42.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 27 Aug 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:ba:86:80:61:33:c2:73:de:c7:a7:c3:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4a39e371-6e3b-458b-9b07-c3a075c5aecd
        Validity
            Not Before: Aug  4 20:19:52 2026 GMT
            Not After : Nov  2 21:19:52 2026 GMT
        Subject: CN=ab52c340-e9f6-4326-ae13-c03270ee1752
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:db:3d:60:3d:9b:c9:fd:8b:5b:00:47:f4:43:dc:
                    64:c2:30:de:f3:50:5d:97:69:10:fc:f7:6d:4d:4c:
                    33:ba:ac:1f:09:67:67:ae:93:23:a0:97:94:4d:11:
                    d3:7e:87:6a:57:52:9c:43:e1:da:6a:86:2b:81:39:
                    2f:4d:f2:d9:77:20:fd:15:0e:44:0a:97:ad:42:ba:
                    2e:0a:11:af:dd:0e:4c:98:e5:26:77:40:79:63:fd:
                    15:79:de:fe:dc:d5:16:ed:97:c2:14:98:fc:5a:55:
                    c1:cb:f6:b1:20:50:1c:45:37:5c:15:2d:3e:38:b6:
                    41:a1:b6:0c:38:c2:55:17:e0:fb:f0:35:26:ef:c6:
                    f8:81:0f:1c:af:08:83:55:3b:ff:71:4a:c4:e9:dc:
                    74:72:12:51:49:9a:e2:87:a6:9f:b2:d1:5c:ca:c2:
                    ad:e2:4b:0b:70:a8:be:11:94:1b:e3:33:7a:a6:ad:
                    49:39:a6:46:18:6c:e4:30:cb:cd:21:a8:39:be:b7:
                    60:84:b8:c1:8c:e1:94:37:85:e8:0c:e5:37:ec:e6:
                    0a:8a:4e:2c:cf:df:61:b7:fa:a6:b3:97:28:d2:cf:
                    39:48:dd:e2:1b:02:0d:e7:fd:1e:1e:f4:eb:e4:b4:
                    65:5d:68:bf:28:d0:fd:14:ca:a6:af:0d:e6:3a:73:
                    7e:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0B:BE:C2:A8:B4:25:82:C8:34:16:54:7B:08:1F:7D:D9:AD:16:43:BA
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/4a39e371-6e3b-458b-9b07-c3a075c5aecd/e63332ff-ae2d-3e42-a4e6-7314f52697e0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/4a39e371-6e3b-458b-9b07-c3a075c5aecd/4a39e371-6e3b-458b-9b07-c3a075c5aecd.crl

            X509v3 Authority Key Identifier:
                keyid:56:D5:8B:45:0B:7A:97:85:04:F5:AD:94:62:26:62:54:ED:E2:B1:AF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/4a39e371-6e3b-458b-9b07-c3a075c5aecd.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  70.33.0.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         91:81:97:f3:d0:69:aa:f7:84:5b:ca:b2:87:b6:36:1a:ea:e6:
         66:66:e9:b1:01:e6:2c:e2:fa:7a:a6:6a:f2:37:36:50:df:1e:
         71:65:15:cb:e9:31:35:dc:c6:f8:3d:b8:4b:83:fc:c1:d5:71:
         b0:cd:7b:4a:20:82:96:05:d0:0b:58:87:79:85:7f:48:cc:ac:
         8c:e2:af:92:be:53:43:56:a0:0d:42:72:56:ba:8b:77:7d:7f:
         2c:e8:8a:d7:af:2a:37:c8:73:3c:06:87:4f:96:58:cf:5b:98:
         84:f8:e7:56:90:3b:6e:63:ef:6f:82:cf:5e:4d:c2:dc:e4:6a:
         84:f3:72:50:99:a3:e9:31:95:8f:57:d2:c0:7f:f2:2e:7c:5c:
         74:65:31:c9:c5:8e:f9:7e:00:a7:e1:f9:85:a6:ba:a5:7f:03:
         8f:2d:6c:17:a2:4c:f0:57:4e:80:5b:15:98:24:b8:32:ee:6a:
         35:ad:97:83:99:f0:42:84:91:d2:52:66:05:86:5b:44:1f:73:
         de:6c:9a:74:f1:a4:1d:2c:e2:2c:19:35:99:32:fe:2e:b1:83:
         f7:ed:05:e4:1a:34:4c:60:e8:4b:b7:81:38:51:85:cb:3f:76:
         7a:0f:a1:21:f6:33:b7:a4:ed:2d:a7:06:c4:01:36:24:bc:6a:
         3d:ac:3c:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 26 07:58:41 2026 by rpki-client