Route Origin Authorization

$ rpki-client -vvvf rpki-rps.arin.net/repository/8a848ade82d5de410183f68661084b86/0/AS133183.roa
File:                     AS133183.roa (raw, json)
Hash identifier:          bjCyLvC0Fup6oaM75TEXeuExKzmsTQaWNlzSdEYZ+1c=
Subject key identifier:   CA:75:4D:57:A7:13:17:E6:F6:EF:53:DA:60:8C:A3:ED:D0:89:8C:1D
Certificate issuer:       /CN=1ff4e25c458e44e252922dcf512a568dfe098242d00cb65a3d
Certificate serial:       4409CEB8D230A5B769EF85FCCDDF445971336E68
Authority key identifier: 00:99:DE:AB:07:3E:FD:74:C2:50:C0:A3:82:B2:50:12:B5:08:2A:EE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/30d422dc-98d1-4304-9f8a-097127e15d5e/1ff4e25c458e44e252922dcf512a568dfe098242d00cb65a3d.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848ade82d5de410183f68661084b86/0/AS133183.roa
Signing time:             Tue 03 Nov 2026 16:39:12 +0000
ROA not before:           Tue 03 Nov 2026 16:34:12 +0000
ROA not after:            Tue 02 Nov 2027 16:39:12 +0000
asID:                     133183
IP address blocks:        104.225.33.0/24 maxlen: 24
                          148.163.208.0/24 maxlen: 24
                          2607:f740:e039::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848ade82d5de410183f68661084b86/0/0099DEAB073EFD74C250C0A382B25012B5082AEE.crl
                          rsync://rpki-rps.arin.net/repository/8a848ade82d5de410183f68661084b86/0/0099DEAB073EFD74C250C0A382B25012B5082AEE.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/30d422dc-98d1-4304-9f8a-097127e15d5e/1ff4e25c458e44e252922dcf512a568dfe098242d00cb65a3d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/30d422dc-98d1-4304-9f8a-097127e15d5e/30d422dc-98d1-4304-9f8a-097127e15d5e.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/30d422dc-98d1-4304-9f8a-097127e15d5e/30d422dc-98d1-4304-9f8a-097127e15d5e.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/30d422dc-98d1-4304-9f8a-097127e15d5e.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 16 Nov 2026 01:31:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            44:09:ce:b8:d2:30:a5:b7:69:ef:85:fc:cd:df:44:59:71:33:6e:68
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1ff4e25c458e44e252922dcf512a568dfe098242d00cb65a3d
        Validity
            Not Before: Nov  3 16:34:12 2026 GMT
            Not After : Nov  2 16:39:12 2027 GMT
        Subject: CN=CA754D57A71317E6F6EF53DA608CA3EDD0898C1D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:8e:c0:d1:fe:2d:10:55:36:46:7a:a5:be:5e:
                    c3:e7:5e:94:c0:c1:77:5c:a8:de:eb:b4:a5:5d:67:
                    4d:b7:b0:3a:d5:75:2b:c8:3a:ad:95:fa:12:6a:fb:
                    3c:0b:5b:8e:43:03:d2:7a:0f:a6:f8:b1:34:a9:0d:
                    43:33:5d:5e:b9:1c:8c:ad:83:98:94:d4:3c:73:52:
                    cd:0e:af:08:44:2b:f1:80:ed:dc:63:f3:bb:31:08:
                    e4:50:9a:8e:35:a6:3d:80:32:f7:7c:d2:df:77:11:
                    d6:6f:4b:96:e4:49:3b:7f:9d:3c:72:98:80:13:32:
                    ed:a6:0e:77:c7:ae:95:be:a8:3c:59:d1:5a:22:20:
                    e7:58:eb:30:5b:89:30:dc:7f:d1:37:e3:e4:e1:e3:
                    15:9f:77:37:6e:63:90:cd:1a:f0:d7:db:97:a4:a5:
                    dd:f6:b6:b3:59:3f:42:25:1a:fe:c5:ab:5a:84:d1:
                    7e:61:8a:a8:87:4e:3e:93:7d:85:84:f8:3f:19:19:
                    a2:b2:2c:e2:5a:a0:e6:50:09:e9:5d:dd:50:47:e7:
                    e1:35:35:58:8d:1e:66:50:5d:01:41:7e:97:ab:5a:
                    cd:2e:97:1c:5a:dd:ce:f5:cf:de:dd:a3:be:94:e6:
                    87:58:18:7e:02:b9:04:47:a5:ee:98:f5:e9:8d:0a:
                    42:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CA:75:4D:57:A7:13:17:E6:F6:EF:53:DA:60:8C:A3:ED:D0:89:8C:1D
            X509v3 Authority Key Identifier:
                keyid:00:99:DE:AB:07:3E:FD:74:C2:50:C0:A3:82:B2:50:12:B5:08:2A:EE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848ade82d5de410183f68661084b86/0/0099DEAB073EFD74C250C0A382B25012B5082AEE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/30d422dc-98d1-4304-9f8a-097127e15d5e/1ff4e25c458e44e252922dcf512a568dfe098242d00cb65a3d.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade82d5de410183f68661084b86/0/AS133183.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.225.33.0/24
                  148.163.208.0/24
                IPv6:
                  2607:f740:e039::/48

    Signature Algorithm: sha256WithRSAEncryption
         0c:a2:ad:c2:31:32:e1:3c:a3:8b:1a:92:4b:8b:90:60:a6:b5:
         4f:84:15:79:67:1f:c1:6a:fd:7c:dd:d9:f9:0f:9a:e8:a3:5d:
         64:44:34:7b:77:60:3d:7a:4c:02:3b:09:3d:8d:ef:a0:b6:ba:
         a7:22:8d:45:8b:75:f8:7a:fd:e3:ec:b5:47:a9:55:a5:9e:19:
         09:26:4d:83:97:88:33:dc:a8:c6:c3:a4:9b:f6:5c:24:3d:09:
         14:35:44:e1:48:fc:87:e3:b0:69:5d:13:de:eb:94:80:a0:77:
         f3:56:a1:48:c6:e9:2e:41:42:91:7a:93:f5:b3:b8:29:9c:46:
         95:dd:d5:81:6e:db:42:6e:b3:be:71:29:5e:73:1e:e6:ac:cb:
         07:9d:74:f6:e6:d3:19:75:17:7e:0f:8d:52:11:62:04:c9:54:
         ab:57:3d:d7:fd:c0:af:09:44:d3:b9:b4:88:26:d3:30:60:26:
         da:fb:b0:b4:20:e5:f8:4a:45:e4:fe:d3:b2:33:84:27:db:ed:
         df:98:37:42:66:89:6b:82:0e:3a:e1:f8:75:cb:6d:98:41:9c:
         4d:7a:0d:95:0e:30:cf:18:63:ce:0f:83:8e:0d:5a:7a:59:ea:
         b2:88:e6:1e:69:89:e7:74:4e:31:4b:af:f4:37:1a:1a:c0:67:
         10:db:20:47
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 15 18:58:59 2026 by rpki-client