Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bf7d171d-7917-4a21-b6cc-8a27039802a5/33b5444d-1e8b-3bf1-869a-48412810c7b1.roa
File:                     33b5444d-1e8b-3bf1-869a-48412810c7b1.roa (raw, json)
Hash identifier:          IMB28fNUgVWjRGOWjYXD3jOKnj9ShoeFx72jowGZLHE=
Subject key identifier:   D3:1C:FC:B3:0E:A2:29:03:C3:1F:13:D5:72:30:12:EE:92:7B:AA:B0
Certificate issuer:       /CN=bf7d171d-7917-4a21-b6cc-8a27039802a5
Certificate serial:       010D0C9F4328584E4AEF2FA60F8F94CE3BB4ADA0
Authority key identifier: AD:F6:BD:F8:A9:46:C0:37:45:CB:6D:47:C5:6C:D2:C7:15:EF:8A:3B
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bf7d171d-7917-4a21-b6cc-8a27039802a5.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bf7d171d-7917-4a21-b6cc-8a27039802a5/33b5444d-1e8b-3bf1-869a-48412810c7b1.roa
Signing time:             Thu 25 Jun 2026 21:00:12 +0000
ROA not before:           Thu 25 Jun 2026 21:00:12 +0000
ROA not after:            Wed 23 Sep 2026 21:00:12 +0000
asID:                     11475
IP address blocks:        65.181.50.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bf7d171d-7917-4a21-b6cc-8a27039802a5/bf7d171d-7917-4a21-b6cc-8a27039802a5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bf7d171d-7917-4a21-b6cc-8a27039802a5/bf7d171d-7917-4a21-b6cc-8a27039802a5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bf7d171d-7917-4a21-b6cc-8a27039802a5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 23 Jul 2026 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:4a:ef:2f:a6:0f:8f:94:ce:3b:b4:ad:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=bf7d171d-7917-4a21-b6cc-8a27039802a5
        Validity
            Not Before: Jun 25 21:00:12 2026 GMT
            Not After : Sep 23 21:00:12 2026 GMT
        Subject: CN=9c006ddf-9160-412d-baa2-a4f737199fc3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:ba:25:e7:bf:0d:a4:e4:f5:db:f2:7c:d1:ed:
                    be:b3:a2:91:4d:75:55:56:fc:b0:37:2a:da:25:00:
                    ee:f6:ee:9c:be:0f:62:35:67:75:31:c9:64:8d:24:
                    6a:85:ba:88:b4:95:7b:80:c3:7d:6b:66:23:7c:c9:
                    96:b2:82:c8:23:e2:25:06:76:48:bd:ad:03:64:b9:
                    0f:d1:3e:04:dd:9f:c3:ef:2b:9f:f8:7a:57:bc:77:
                    f9:94:c7:56:1c:a1:38:50:2d:5c:1b:f4:03:38:5e:
                    10:66:89:88:b7:ae:30:80:17:52:76:f7:46:2e:37:
                    bb:51:6c:cd:02:20:dd:73:19:38:ca:b0:ee:96:27:
                    4a:cc:07:8d:63:30:a2:31:0f:b5:c0:32:36:81:7d:
                    57:ff:9b:ae:84:23:e0:86:3a:b5:46:93:51:85:fe:
                    f8:49:fa:0f:b3:5e:73:4a:8d:6a:bb:77:24:76:7d:
                    77:fd:8c:e4:12:50:f5:21:04:a7:16:27:3a:26:43:
                    d2:07:c8:63:49:50:aa:b6:44:11:e7:61:be:c2:0b:
                    9f:1a:a8:da:1b:d3:a2:5d:7b:b3:ca:6b:5e:43:58:
                    74:c1:4b:b1:fa:2e:7f:98:35:1c:0e:bf:4d:ad:da:
                    ef:20:31:89:0c:9c:70:1d:63:7f:82:fb:ef:f7:12:
                    ad:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D3:1C:FC:B3:0E:A2:29:03:C3:1F:13:D5:72:30:12:EE:92:7B:AA:B0
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bf7d171d-7917-4a21-b6cc-8a27039802a5/33b5444d-1e8b-3bf1-869a-48412810c7b1.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bf7d171d-7917-4a21-b6cc-8a27039802a5/bf7d171d-7917-4a21-b6cc-8a27039802a5.crl

            X509v3 Authority Key Identifier:
                keyid:AD:F6:BD:F8:A9:46:C0:37:45:CB:6D:47:C5:6C:D2:C7:15:EF:8A:3B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bf7d171d-7917-4a21-b6cc-8a27039802a5.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  65.181.50.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         27:d4:d3:8f:89:b0:fe:d0:e6:0e:da:16:03:75:ac:32:3a:f2:
         0c:01:d0:1c:c2:ff:8a:90:af:93:21:0a:71:67:91:df:32:54:
         bd:55:86:83:a6:f2:57:1b:40:c0:70:d5:f9:d0:f6:32:45:0c:
         63:df:7f:d8:f1:a0:80:84:a5:07:47:98:80:0f:2e:f8:e0:46:
         7c:56:8e:c6:ee:22:b9:48:4f:67:64:18:52:a2:25:4e:84:eb:
         a9:ed:5d:6d:df:16:25:b4:cc:26:80:88:1d:e6:29:a3:74:60:
         a4:1d:f1:59:1f:26:78:2a:6a:52:8a:48:b1:c6:69:10:81:f7:
         1d:76:b8:68:63:c9:9d:2c:a2:27:6a:73:80:be:41:64:07:8d:
         bd:d5:4f:f4:8b:09:95:d0:40:8b:f3:f5:6a:03:02:a7:f9:93:
         1a:58:1a:4a:9e:07:23:3c:6b:e4:26:26:8d:6c:43:8a:0d:3f:
         53:1e:76:fc:76:4a:ae:1e:13:5b:62:44:ca:0d:f0:74:6a:a4:
         fa:c0:97:27:8f:2d:1b:45:4d:0d:59:1b:0e:72:68:32:dc:bf:
         b0:f0:f8:89:1f:da:5a:72:a2:e7:81:ff:8d:1e:c7:94:4f:e7:
         a0:af:a1:bf:1b:85:aa:4a:07:cd:72:90:96:3a:4e:ba:6c:96:
         6c:02:9e:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 22 01:15:07 2026 by rpki-client