Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/803514f9-05ca-4865-b58e-7e1188184f19/76bc3ebf-a0a2-3bc0-827a-3d75acbeb104.roa
File:                     76bc3ebf-a0a2-3bc0-827a-3d75acbeb104.roa (raw, json)
Hash identifier:          sgY8ntjoDAnRmy/aYUZDKFp9WU4z2bK+qLCUuGm46jE=
Subject key identifier:   A4:2F:DF:63:30:42:EA:08:83:48:89:5C:B1:52:4A:2B:8B:68:30:70
Certificate issuer:       /CN=803514f9-05ca-4865-b58e-7e1188184f19
Certificate serial:       010D0C9F4328584D97556FEF6A9C184F2592E140
Authority key identifier: 8A:AB:1A:FF:A2:37:47:C3:08:C6:65:DB:56:61:CF:A3:04:6B:7F:A6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/803514f9-05ca-4865-b58e-7e1188184f19.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/803514f9-05ca-4865-b58e-7e1188184f19/76bc3ebf-a0a2-3bc0-827a-3d75acbeb104.roa
Signing time:             Wed 22 Apr 2026 13:00:32 +0000
ROA not before:           Wed 22 Apr 2026 13:00:32 +0000
ROA not after:            Tue 21 Jul 2026 13:00:32 +0000
asID:                     30688
IP address blocks:        162.33.0.0/20 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/803514f9-05ca-4865-b58e-7e1188184f19/803514f9-05ca-4865-b58e-7e1188184f19.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/803514f9-05ca-4865-b58e-7e1188184f19/803514f9-05ca-4865-b58e-7e1188184f19.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/803514f9-05ca-4865-b58e-7e1188184f19.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 08 May 2026 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:97:55:6f:ef:6a:9c:18:4f:25:92:e1:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=803514f9-05ca-4865-b58e-7e1188184f19
        Validity
            Not Before: Apr 22 13:00:32 2026 GMT
            Not After : Jul 21 13:00:32 2026 GMT
        Subject: CN=fa1a5348-f180-4e91-b292-1da4c779ec50
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:61:1b:22:ee:ad:5b:bd:f6:15:16:5b:04:8a:
                    d2:80:c7:ba:f2:e2:83:80:d1:39:0b:c6:6f:ad:49:
                    33:76:a6:09:3f:d3:e9:49:cf:72:06:7d:ba:10:c7:
                    e2:d3:92:c0:ef:d2:bb:a1:42:0a:c4:c0:a9:ee:c3:
                    e4:81:a7:41:4c:f4:e0:05:1f:4b:14:2c:25:70:4e:
                    39:e7:d1:8e:bf:34:61:30:40:94:6a:85:66:69:cf:
                    26:51:d5:5a:df:b8:80:e3:73:93:13:03:09:6d:53:
                    5e:c3:97:00:50:bb:e3:c6:84:ec:06:09:2c:5e:f2:
                    db:88:56:6d:2a:b4:dd:33:6e:76:a5:d9:b6:29:bd:
                    a8:7d:73:e1:38:95:7e:d1:73:c7:45:bb:05:b1:1b:
                    eb:a7:84:a1:b7:85:0b:4a:c3:0f:7a:fa:c8:e4:ae:
                    0e:9d:70:e5:25:f2:65:1a:fb:37:51:84:e2:10:09:
                    14:a7:93:cc:da:8a:f9:c1:7f:00:44:ff:b9:e4:c5:
                    cf:5d:37:00:96:d4:bc:e2:ea:70:ad:4e:dd:fe:ba:
                    9b:48:f5:5c:ea:23:3e:75:0a:15:91:5e:f0:77:3d:
                    1e:a9:9d:f1:af:d7:df:d2:32:20:05:9f:63:09:c1:
                    f5:04:74:b4:70:35:de:f9:e1:6f:41:56:84:48:d8:
                    15:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A4:2F:DF:63:30:42:EA:08:83:48:89:5C:B1:52:4A:2B:8B:68:30:70
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/803514f9-05ca-4865-b58e-7e1188184f19/76bc3ebf-a0a2-3bc0-827a-3d75acbeb104.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/803514f9-05ca-4865-b58e-7e1188184f19/803514f9-05ca-4865-b58e-7e1188184f19.crl

            X509v3 Authority Key Identifier:
                keyid:8A:AB:1A:FF:A2:37:47:C3:08:C6:65:DB:56:61:CF:A3:04:6B:7F:A6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/803514f9-05ca-4865-b58e-7e1188184f19.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  162.33.0.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7f:27:60:d7:5b:6d:18:15:d1:47:d8:1e:28:db:d1:28:54:e2:
         6b:4c:b3:85:f0:e9:cf:c9:db:ee:7d:27:0f:99:c3:48:4a:4a:
         cf:97:4c:19:16:59:59:9c:0a:bf:e1:d8:67:3d:ec:24:e8:8e:
         ee:89:56:3d:a7:18:b3:80:c3:fb:24:03:95:a1:48:00:93:13:
         aa:68:b0:01:e5:9c:67:58:a1:aa:86:7f:2d:ed:2a:74:48:4c:
         1f:ec:0b:f0:bb:99:fd:c2:f0:4d:59:51:fa:67:1d:b4:92:9f:
         c6:8e:dd:9f:c1:23:4b:e6:f7:1b:1f:83:31:3a:fc:0d:89:9a:
         3f:97:fe:08:3c:29:7a:5f:61:e5:93:7e:b6:12:15:13:14:34:
         26:35:5a:83:ba:2b:ff:fb:22:e8:37:a2:c6:de:7b:00:0d:b0:
         18:e9:7f:cc:8a:85:15:68:b8:ef:c9:ed:9c:88:c5:4d:f7:b8:
         47:92:e2:23:80:e1:f8:7f:10:9b:4c:5b:76:b0:93:81:b1:f2:
         4d:c4:8f:61:71:b6:30:b1:3b:8e:59:21:0c:ee:83:42:4c:5b:
         14:08:d7:e0:fb:6f:30:22:cd:c8:8a:1e:2e:ff:a1:4c:2e:1b:
         bd:90:f8:8a:77:76:fb:ea:2d:a5:fe:d4:47:5c:26:8c:04:88:
         f6:c7:49:37
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE2XVW/vapwYTyWS4UAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkODAzNTE0ZjktMDVjYS00ODY1LWI1OGUtN2UxMTg4MTg0
ZjE5MB4XDTI2MDQyMjEzMDAzMloXDTI2MDcyMTEzMDAzMlowLzEtMCsGA1UEAxMk
ZmExYTUzNDgtZjE4MC00ZTkxLWIyOTItMWRhNGM3NzllYzUwMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnGEbIu6tW732FRZbBIrSgMe68uKDgNE5C8Zv
rUkzdqYJP9PpSc9yBn26EMfi05LA79K7oUIKxMCp7sPkgadBTPTgBR9LFCwlcE45
59GOvzRhMECUaoVmac8mUdVa37iA43OTEwMJbVNew5cAULvjxoTsBgksXvLbiFZt
KrTdM252pdm2Kb2ofXPhOJV+0XPHRbsFsRvrp4Sht4ULSsMPevrI5K4OnXDlJfJl
Gvs3UYTiEAkUp5PM2or5wX8ARP+55MXPXTcAltS84upwrU7d/rqbSPVc6iM+dQoV
kV7wdz0eqZ3xr9ff0jIgBZ9jCcH1BHS0cDXe+eFvQVaESNgVPwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFKQv32MwQuoIg0iJXLFSSiuLaDBwMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC84MDM1
MTRmOS0wNWNhLTQ4NjUtYjU4ZS03ZTExODgxODRmMTkvNzZiYzNlYmYtYTBhMi0z
YmMwLTgyN2EtM2Q3NWFjYmViMTA0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k
MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvODAzNTE0ZjktMDVjYS00ODY1LWI1
OGUtN2UxMTg4MTg0ZjE5LzgwMzUxNGY5LTA1Y2EtNDg2NS1iNThlLTdlMTE4ODE4
NGYxOS5jcmwwHwYDVR0jBBgwFoAUiqsa/6I3R8MIxmXbVmHPowRrf6YwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2
NS04MzA4LWRmMjU5N2UzNDNmOC84MDM1MTRmOS0wNWNhLTQ4NjUtYjU4ZS03ZTEx
ODgxODRmMTkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEoiEAMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAH8nYNdbbRgV0UfYHijb0ShU4mtMs4Xw6c/J2+59Jw+Zw0hKSs+XTBkW
WVmcCr/h2Gc97CToju6JVj2nGLOAw/skA5WhSACTE6posAHlnGdYoaqGfy3tKnRI
TB/sC/C7mf3C8E1ZUfpnHbSSn8aO3Z/BI0vm9xsfgzE6/A2Jmj+X/gg8KXpfYeWT
frYSFRMUNCY1WoO6K//7Iug3osbeewANsBjpf8yKhRVouO/J7ZyIxU33uEeS4iOA
4fh/EJtMW3awk4Gx8k3Ej2FxtjCxO45ZIQzug0JMWxQI1+D7bzAizciKHi7/oUwu
G72Q+Ip3dvvqLaX+1EdcJowEiPbHSTc=
-----END CERTIFICATE-----
Generated at Thu May 7 03:15:44 2026 by rpki-client