Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/1c2bd1bc-6b2b-33a7-92ab-7d4723b06df7.roa
File:                     1c2bd1bc-6b2b-33a7-92ab-7d4723b06df7.roa (raw, json)
Hash identifier:          1ug6lfVwUQgYY/6fYfG75YN4c1cOmnAyjSkCledJlCw=
Subject key identifier:   5A:6D:B1:EC:5E:99:DF:3A:09:0C:74:E6:F4:8D:44:25:BD:5F:8E:E1
Certificate issuer:       /CN=11ee0436-2341-4fcc-9197-d4dc6cce847f
Certificate serial:       010D0C9F4328584B66B73315936900800E31A900
Authority key identifier: 19:7A:BE:AD:ED:5F:CB:7D:47:33:C4:44:FE:0F:FE:2D:16:FB:9E:13
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/1c2bd1bc-6b2b-33a7-92ab-7d4723b06df7.roa
Signing time:             Fri 03 Oct 2025 17:29:17 +0000
ROA not before:           Fri 03 Oct 2025 17:29:17 +0000
ROA not after:            Thu 01 Jan 2026 18:29:17 +0000
asID:                     0
IP address blocks:        24.33.0.0/16 maxlen: 16
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/11ee0436-2341-4fcc-9197-d4dc6cce847f.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/11ee0436-2341-4fcc-9197-d4dc6cce847f.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 09 Oct 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:66:b7:33:15:93:69:00:80:0e:31:a9:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=11ee0436-2341-4fcc-9197-d4dc6cce847f
        Validity
            Not Before: Oct  3 17:29:17 2025 GMT
            Not After : Jan  1 18:29:17 2026 GMT
        Subject: CN=7468aa76-c78a-4f68-97a6-9814417189f9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:2b:b2:1d:72:9a:72:2b:47:0c:db:28:4c:83:
                    90:14:b4:8e:2a:d7:25:df:75:bf:8c:a6:bd:dd:75:
                    ae:f1:0d:47:53:3d:6d:84:19:f2:4a:86:d2:1e:9f:
                    d9:24:17:4c:da:b1:83:24:b1:02:3c:3e:10:e5:81:
                    39:c5:20:22:c0:17:d4:4b:5c:d7:f6:36:35:fc:b7:
                    35:ad:ed:4a:10:86:50:6e:2e:ee:5a:aa:76:37:ae:
                    a8:72:99:2f:d5:43:71:98:54:fa:73:1e:84:08:ee:
                    83:33:07:a4:85:5c:8f:f0:2e:28:a2:cd:d5:6d:65:
                    a7:37:a9:dc:8d:18:cf:8d:46:d3:e2:d6:79:c0:79:
                    1f:43:ea:d1:2d:cc:75:72:19:fa:bb:8e:c2:b6:f9:
                    d1:c0:b8:3e:87:fe:b5:4b:58:1d:9b:94:8d:f4:1c:
                    e5:d9:ce:69:ea:a7:c4:f8:a4:d0:de:80:dc:dd:0f:
                    ab:56:ba:d8:98:7b:5b:59:66:f6:0f:8e:41:41:f9:
                    69:46:aa:63:7b:bf:49:b2:fd:56:4d:6e:47:26:b3:
                    6f:87:85:f9:4d:c5:fc:70:0a:22:09:ca:8b:af:61:
                    6f:84:37:f0:a5:ba:2a:43:e0:22:a7:06:36:8e:8e:
                    c1:0b:c1:e4:b8:57:6f:12:f9:79:13:74:f7:1a:b3:
                    26:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5A:6D:B1:EC:5E:99:DF:3A:09:0C:74:E6:F4:8D:44:25:BD:5F:8E:E1
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/1c2bd1bc-6b2b-33a7-92ab-7d4723b06df7.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/11ee0436-2341-4fcc-9197-d4dc6cce847f.crl

            X509v3 Authority Key Identifier:
                keyid:19:7A:BE:AD:ED:5F:CB:7D:47:33:C4:44:FE:0F:FE:2D:16:FB:9E:13

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  24.33.0.0/16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7a:ea:6b:37:b2:b2:10:89:60:c8:65:c5:4c:7a:66:87:14:56:
         44:7a:d1:d9:ee:f3:43:4f:10:a7:d0:b8:d8:b9:c4:2f:e1:bf:
         26:89:ac:bd:4c:98:26:0b:d8:2f:14:f8:55:fb:5c:6e:ef:e2:
         85:2a:4b:ef:e5:0d:5c:70:9e:c4:75:c1:6a:48:9c:a9:26:f3:
         62:8b:5e:aa:cc:11:d1:97:80:85:8f:49:e2:20:01:e4:15:d1:
         4f:29:51:83:52:c8:f1:47:e1:07:fb:84:4c:bd:36:d4:1d:45:
         4a:92:a7:6b:df:0a:5e:4a:55:39:c6:cb:f8:d1:0c:d2:ee:bf:
         68:6c:0f:92:9d:39:b4:1b:a8:c5:3f:f5:d1:0d:59:ac:29:3c:
         c2:4f:26:58:c2:8d:8c:11:1f:04:6d:46:b1:fa:95:76:76:16:
         4d:f1:d0:16:c0:24:e8:6e:4d:42:9a:99:52:68:29:ac:cb:fc:
         c9:12:76:51:e7:c3:af:e6:75:66:95:ae:57:01:a3:87:70:83:
         4d:75:52:98:76:61:83:27:13:37:a1:e6:67:d4:4f:31:6a:1f:
         4e:b8:b1:c2:bb:d0:e7:f1:ff:26:ee:9c:82:0d:43:59:e3:82:
         ad:2e:94:81:e3:6a:93:06:9f:2f:a7:a0:d4:c2:fc:a5:2b:c3:
         72:6c:6d:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 8 13:59:44 2025 by rpki-client