Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/927d18e8-718f-412b-a0b2-a97decff6f3f/33959479-ae8d-3115-be3f-5b3af9939e80.roa
File:                     33959479-ae8d-3115-be3f-5b3af9939e80.roa (raw, json)
Hash identifier:          aSGle9pQPAugb2uyapBY43dyHWNyptnfPn1/gcWg2tA=
Subject key identifier:   4A:7E:10:11:FA:CF:DD:29:D7:93:42:EC:2A:2B:E5:65:3B:F6:94:B4
Certificate issuer:       /CN=927d18e8-718f-412b-a0b2-a97decff6f3f
Certificate serial:       010D0C9F4328584DE05BC60FA99335E9C6419100
Authority key identifier: 65:DD:C3:69:D5:D8:1B:0F:95:D5:AB:AD:7B:F5:30:38:B1:C0:60:04
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/927d18e8-718f-412b-a0b2-a97decff6f3f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/927d18e8-718f-412b-a0b2-a97decff6f3f/33959479-ae8d-3115-be3f-5b3af9939e80.roa
Signing time:             Mon 18 May 2026 16:47:33 +0000
ROA not before:           Mon 18 May 2026 16:47:33 +0000
ROA not after:            Sun 16 Aug 2026 16:47:33 +0000
asID:                     399138
IP address blocks:        162.244.211.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/927d18e8-718f-412b-a0b2-a97decff6f3f/927d18e8-718f-412b-a0b2-a97decff6f3f.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/927d18e8-718f-412b-a0b2-a97decff6f3f/927d18e8-718f-412b-a0b2-a97decff6f3f.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/927d18e8-718f-412b-a0b2-a97decff6f3f.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 26 May 2026 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:e0:5b:c6:0f:a9:93:35:e9:c6:41:91:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=927d18e8-718f-412b-a0b2-a97decff6f3f
        Validity
            Not Before: May 18 16:47:33 2026 GMT
            Not After : Aug 16 16:47:33 2026 GMT
        Subject: CN=5b1d78c7-ca8a-4e6f-8f7a-812678f5147f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:42:73:d2:0e:31:25:1d:b3:42:66:78:2e:bf:
                    9d:bb:6c:bd:2e:85:c8:b5:54:41:f8:25:8b:61:33:
                    7c:84:9e:79:ad:77:1f:f1:0b:50:70:91:2d:d4:bd:
                    60:a7:92:d9:79:c1:5c:2f:42:75:07:c0:43:88:a2:
                    57:58:dc:b4:a4:e7:1b:b7:29:63:eb:15:19:ee:ec:
                    cf:e5:fc:a9:53:c8:08:93:ab:d3:91:97:93:07:bc:
                    a8:ef:65:e1:22:6a:19:c6:57:01:0e:87:16:85:ce:
                    3b:e3:0c:d7:cb:97:d6:7b:91:0b:4e:ff:50:f6:37:
                    28:cf:c4:05:bb:26:30:f1:35:22:b6:dd:5e:f6:8b:
                    8d:45:bb:de:b1:8c:c6:14:d7:92:aa:01:76:14:38:
                    c3:8c:4b:57:e4:c4:b2:bb:1b:8d:c1:29:19:43:dd:
                    eb:22:3c:2d:c3:dc:2b:fa:f1:80:84:07:7d:03:7b:
                    fd:5c:a3:42:96:4a:0a:59:ef:e5:bd:65:41:ec:73:
                    74:5c:01:5e:93:a2:48:21:be:45:e1:56:f5:e2:ed:
                    ea:1f:bd:e5:6a:8e:81:e5:01:9b:b3:c5:1f:01:1a:
                    63:4c:de:df:bb:1b:a9:3f:e6:f9:60:20:b6:42:83:
                    64:1a:53:b2:12:d4:85:87:1e:fa:bd:c2:89:2e:9c:
                    b4:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4A:7E:10:11:FA:CF:DD:29:D7:93:42:EC:2A:2B:E5:65:3B:F6:94:B4
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/927d18e8-718f-412b-a0b2-a97decff6f3f/33959479-ae8d-3115-be3f-5b3af9939e80.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/927d18e8-718f-412b-a0b2-a97decff6f3f/927d18e8-718f-412b-a0b2-a97decff6f3f.crl

            X509v3 Authority Key Identifier:
                keyid:65:DD:C3:69:D5:D8:1B:0F:95:D5:AB:AD:7B:F5:30:38:B1:C0:60:04

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/927d18e8-718f-412b-a0b2-a97decff6f3f.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  162.244.211.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         23:83:ab:fa:3e:57:13:ba:f2:f9:ce:57:c6:1b:43:a2:9f:b2:
         f5:8e:ab:33:53:32:86:f8:f8:d9:d0:22:51:97:9f:45:7f:6e:
         e5:d5:11:96:52:92:1c:86:9a:71:9d:cc:bc:78:a2:65:ca:82:
         a5:0a:b5:07:44:66:e0:f0:5b:1d:4a:f8:0e:94:b0:6f:46:07:
         85:71:1e:cf:f5:02:6b:34:50:da:fd:42:16:1c:36:78:f9:dd:
         7d:05:df:49:64:06:64:d4:6e:79:14:51:68:17:e2:63:63:37:
         c4:cb:43:a2:84:52:85:be:e3:af:d4:99:98:33:d7:ab:0b:81:
         ef:2e:d7:1a:16:2c:78:f0:95:53:e6:a9:e2:2a:56:d4:bb:48:
         8e:65:5a:d8:38:02:2d:dd:65:bf:a2:87:85:64:96:60:17:3a:
         36:e6:3c:d2:84:63:64:34:00:9c:dc:12:8d:1d:7e:56:cb:c0:
         28:da:bb:bc:67:39:71:80:5f:05:6a:af:5c:1f:eb:8c:c2:0d:
         c6:4f:e5:b3:06:38:a6:b3:70:e0:53:40:98:fc:69:c8:aa:a1:
         2f:e3:7c:e7:44:74:1e:91:5b:c8:48:12:13:b3:d5:15:4e:84:
         7b:82:4d:db:75:48:47:6b:92:2f:ca:fc:58:56:7a:c1:9f:b2:
         a1:de:c2:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 25 04:38:47 2026 by rpki-client