Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/33ea0a7c-dbc1-3bf6-8b52-8db705e0b3b9.roa
File:                     33ea0a7c-dbc1-3bf6-8b52-8db705e0b3b9.roa (raw, json)
Hash identifier:          f6+tPiIfuWlgEmpWAFLASmSjXwBNwBkIU86rpAZYGZ0=
Subject key identifier:   71:9B:9C:46:15:D0:7B:64:8C:5A:5A:50:F2:95:65:08:CF:9C:94:73
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F4328584EE7BCD0BE207AD7DEE5159000
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/33ea0a7c-dbc1-3bf6-8b52-8db705e0b3b9.roa
Signing time:             Fri 21 Aug 2026 01:00:12 +0000
ROA not before:           Fri 21 Aug 2026 01:00:12 +0000
ROA not after:            Thu 19 Nov 2026 02:00:12 +0000
asID:                     5650
IP address blocks:        47.182.244.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 28 Aug 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:e7:bc:d0:be:20:7a:d7:de:e5:15:90:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: Aug 21 01:00:12 2026 GMT
            Not After : Nov 19 02:00:12 2026 GMT
        Subject: CN=1665d49f-3fe3-43e2-ac39-8701d8146085
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:88:7a:92:d9:3a:51:3d:3a:3f:97:b5:c3:a4:0a:
                    84:58:4e:ea:2b:10:39:bd:f0:91:55:96:29:42:44:
                    5b:cb:10:ba:ea:8b:97:78:de:39:38:8d:68:d5:1c:
                    64:c8:62:e5:0a:e3:5f:bd:10:0d:90:da:31:86:ee:
                    a4:6f:5a:93:ac:00:46:b0:e2:59:09:be:da:25:e2:
                    3e:c3:99:98:b9:50:c3:d8:6f:0f:91:d2:50:13:c0:
                    08:af:dd:89:4d:ff:e4:7b:a8:85:df:ed:3a:43:91:
                    70:b0:58:60:6c:0a:aa:97:e1:eb:ba:eb:11:54:bb:
                    63:31:16:a7:16:ad:a3:52:15:dc:fa:2b:60:e0:b1:
                    82:63:b9:0b:27:8f:be:38:75:bf:d6:67:89:e4:3d:
                    9d:64:24:6d:8a:a0:1c:1e:72:53:28:53:3e:7e:be:
                    46:24:76:a5:0a:00:e7:62:7f:14:36:11:38:aa:c8:
                    13:0c:fd:3a:5b:84:23:33:cb:2a:75:90:5d:d2:82:
                    6a:3e:3e:c2:6f:9a:da:8c:c0:f0:7f:d4:65:b6:1f:
                    0c:2b:a5:d9:12:f3:41:a8:16:d2:e4:2a:8b:88:f6:
                    22:ca:49:5f:2c:15:08:bf:dc:78:9a:46:a5:f5:13:
                    a3:39:e4:25:28:eb:ee:00:42:1e:a3:84:fd:7c:b3:
                    bc:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                71:9B:9C:46:15:D0:7B:64:8C:5A:5A:50:F2:95:65:08:CF:9C:94:73
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/33ea0a7c-dbc1-3bf6-8b52-8db705e0b3b9.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  47.182.244.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         14:36:c7:ca:07:99:75:35:52:5d:bc:5c:f3:8d:4a:48:20:84:
         54:57:42:2a:a3:da:96:27:e9:ca:45:19:7e:b7:3a:64:78:e8:
         3b:60:d1:25:bc:b2:9b:e9:80:61:0b:05:0e:41:fd:be:0d:01:
         94:10:8c:92:ca:1e:77:cf:f8:50:79:a7:93:7d:91:19:9b:2b:
         16:26:49:c8:fe:d9:34:ee:ae:3b:00:4d:c5:16:91:99:62:bc:
         2c:39:f0:05:62:10:79:b8:06:d1:28:47:19:7d:90:cb:0f:5b:
         c3:20:95:8b:13:e5:66:39:88:db:ab:63:2e:2e:d3:b2:ce:78:
         a5:92:58:88:6a:e0:a3:e6:71:94:75:bf:81:9b:37:a4:bf:e9:
         72:c2:76:e3:88:ab:bd:2f:b8:47:26:a2:8a:0c:61:aa:8d:dd:
         97:c8:08:c9:83:46:d5:9e:60:28:27:d1:be:69:01:77:0d:11:
         f2:20:3e:c9:e6:3f:aa:77:01:a2:0d:34:29:75:ac:6e:24:5e:
         4a:db:53:78:37:0c:6a:2e:75:2a:ce:79:b6:ff:de:ad:b9:60:
         b6:a4:4e:88:99:18:74:a9:5b:c1:24:c8:2d:07:c0:64:51:3d:
         95:06:de:ba:af:50:fa:cf:ee:17:b3:24:ff:f0:3e:bf:12:c4:
         7b:ee:bf:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 27 21:44:16 2026 by rpki-client