Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/d46af16d-de13-3757-ae8b-31c2583baa88.roa
File:                     d46af16d-de13-3757-ae8b-31c2583baa88.roa (raw, json)
Hash identifier:          y72ozDRkC5wARI8hKMU98PwTbkmRd3CieEDK1jr32cU=
Subject key identifier:   35:DD:22:49:B7:06:1D:FB:8E:D3:DE:8C:8F:71:4F:87:5D:12:2C:7B
Certificate issuer:       /CN=3f6f9653-9fda-4d20-925a-51db772aeb24
Certificate serial:       010D0C9F4328584DF6409BEE161E68D076490500
Authority key identifier: 70:26:53:EC:95:EF:B6:61:20:47:4D:9A:22:EB:01:74:7E:A5:10:1F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/d46af16d-de13-3757-ae8b-31c2583baa88.roa
Signing time:             Tue 26 May 2026 13:00:31 +0000
ROA not before:           Tue 26 May 2026 13:00:31 +0000
ROA not after:            Mon 24 Aug 2026 13:00:31 +0000
asID:                     852
IP address blocks:        207.194.33.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 14 Jun 2026 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:f6:40:9b:ee:16:1e:68:d0:76:49:05:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3f6f9653-9fda-4d20-925a-51db772aeb24
        Validity
            Not Before: May 26 13:00:31 2026 GMT
            Not After : Aug 24 13:00:31 2026 GMT
        Subject: CN=a0507cde-80c6-4967-ac56-bff4cde688b3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:63:18:a9:5e:e9:8d:c3:5b:84:e8:d8:b5:d0:
                    47:50:87:1a:f2:7f:97:ea:79:46:11:d4:56:e5:52:
                    52:00:22:32:77:c1:16:b0:ab:cc:a6:e7:8d:95:d7:
                    d3:f1:bd:0e:b4:1a:9e:c4:f7:c6:9d:e5:ec:52:4c:
                    6f:c5:19:b4:3f:17:57:03:6c:5c:d8:2f:16:1f:46:
                    28:66:0e:39:8c:e2:e3:d7:9a:6d:51:27:21:8d:13:
                    57:b7:a4:14:53:d4:a7:11:a5:04:8d:0f:00:53:50:
                    d7:7d:28:79:b5:ee:ce:0c:9e:3a:83:ec:db:34:af:
                    22:be:86:c8:d2:1f:49:1e:82:f9:15:fb:94:70:50:
                    bf:52:23:4b:3f:43:06:df:de:55:e9:37:b4:3d:52:
                    b1:cc:9f:de:de:42:14:4f:60:a7:6b:8b:5e:56:62:
                    d4:8e:3b:48:46:a2:16:f4:6b:ce:e5:47:b3:8b:e8:
                    b8:74:2e:f5:03:48:62:59:9a:db:ba:7c:8e:b8:66:
                    9a:91:53:90:8a:3d:14:39:c0:13:dd:41:03:ec:d8:
                    30:95:90:b9:04:66:c5:6e:cd:34:3c:a1:75:5d:25:
                    f1:06:b1:e5:9a:05:2e:82:9a:19:fe:00:c1:a9:46:
                    ce:93:a6:e4:be:1f:20:5d:4c:b7:80:76:3e:58:18:
                    74:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                35:DD:22:49:B7:06:1D:FB:8E:D3:DE:8C:8F:71:4F:87:5D:12:2C:7B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/d46af16d-de13-3757-ae8b-31c2583baa88.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.crl

            X509v3 Authority Key Identifier:
                keyid:70:26:53:EC:95:EF:B6:61:20:47:4D:9A:22:EB:01:74:7E:A5:10:1F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  207.194.33.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         13:a4:55:5a:4e:88:2c:a7:5f:54:ff:c0:6a:ae:7f:1b:52:f0:
         74:de:6e:ff:9f:e0:e5:c2:19:66:cb:c1:f5:65:36:3c:8b:92:
         0a:ae:e8:07:d6:76:e9:17:a5:0b:ee:07:14:d5:32:6c:ca:8f:
         68:b2:18:7d:d7:a3:00:33:a0:f8:e5:75:fb:b9:b1:64:08:01:
         55:54:5a:45:61:cd:12:e5:55:e6:5b:9d:ec:54:0f:bc:e5:54:
         4b:35:b4:0e:b4:6d:33:33:db:05:6c:13:63:78:e3:2a:ef:ee:
         39:8d:9d:c3:01:07:07:d1:ae:12:ad:f2:28:66:78:d6:b7:50:
         9f:db:b4:48:2a:c5:d1:cd:1a:cc:c3:ee:08:21:64:2e:f2:7e:
         b0:a7:08:7f:e1:64:1c:d8:81:3f:97:fa:0d:98:36:44:5e:6b:
         51:0a:0c:cf:ee:86:8a:a8:2b:ab:40:93:d6:4e:d8:25:03:d6:
         71:a9:16:a6:a6:c2:f4:02:76:4a:ac:d5:12:80:88:c7:e8:80:
         08:8d:03:4f:f4:db:52:79:75:36:4e:f5:fe:dc:3f:4e:6e:b8:
         79:a1:28:37:3c:fa:01:e1:4d:a9:2a:cd:7b:b0:50:79:66:17:
         e9:d7:c2:ad:1d:4a:ab:25:dd:3d:dc:79:95:7e:c1:4f:b2:46:
         58:a6:57:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 12 22:55:51 2026 by rpki-client