Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/5410af3b-1667-4dd4-9260-1835889ae3a3/33480d40-c821-3e04-8391-d8b52bb73e5a.roa
File:                     33480d40-c821-3e04-8391-d8b52bb73e5a.roa (raw, json)
Hash identifier:          bxC58rUVOp25J1KtEU4ZJXiM20mI99ACBRqUryoYAko=
Subject key identifier:   C1:5F:36:31:62:77:FF:66:6D:6D:2F:68:E1:7E:45:D1:BF:08:5E:57
Certificate issuer:       /CN=5410af3b-1667-4dd4-9260-1835889ae3a3
Certificate serial:       010D0C9F4328584D492A583608DC85C4661CC9D0
Authority key identifier: B8:7F:76:B3:F1:DA:95:1F:69:6F:EC:30:F0:FB:FA:25:16:48:C1:66
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/5410af3b-1667-4dd4-9260-1835889ae3a3.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/5410af3b-1667-4dd4-9260-1835889ae3a3/33480d40-c821-3e04-8391-d8b52bb73e5a.roa
Signing time:             Wed 25 Mar 2026 13:00:41 +0000
ROA not before:           Wed 25 Mar 2026 13:00:41 +0000
ROA not after:            Tue 23 Jun 2026 13:00:41 +0000
asID:                     23528
IP address blocks:        162.247.166.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/5410af3b-1667-4dd4-9260-1835889ae3a3/5410af3b-1667-4dd4-9260-1835889ae3a3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/5410af3b-1667-4dd4-9260-1835889ae3a3/5410af3b-1667-4dd4-9260-1835889ae3a3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/5410af3b-1667-4dd4-9260-1835889ae3a3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 28 Mar 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:49:2a:58:36:08:dc:85:c4:66:1c:c9:d0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5410af3b-1667-4dd4-9260-1835889ae3a3
        Validity
            Not Before: Mar 25 13:00:41 2026 GMT
            Not After : Jun 23 13:00:41 2026 GMT
        Subject: CN=36878d21-faaf-4937-b9b1-ddec32a6fb84
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f5:1e:33:5c:90:fc:79:de:74:bf:c2:d5:14:6b:
                    ae:45:c7:6b:5f:71:4d:dc:0d:47:cd:e2:93:35:e2:
                    2e:e3:e8:9e:1b:4f:84:4f:30:29:0d:de:46:9c:32:
                    3f:d6:fd:65:7c:47:93:dc:28:85:57:6e:95:13:1e:
                    36:5b:95:09:ed:fd:3f:97:22:26:07:b5:ec:7d:94:
                    6a:c8:36:23:3f:35:c9:87:2b:2a:98:df:b1:70:5b:
                    ba:c9:5e:24:4d:31:a2:06:b5:5a:a8:31:59:e0:a7:
                    93:bd:1f:aa:43:f8:fc:0e:d1:96:48:7f:6c:67:52:
                    98:4a:53:13:87:33:e8:a1:11:ac:21:9a:01:61:3b:
                    4f:76:53:9b:82:b1:de:a1:b3:61:ac:0f:e1:df:78:
                    93:e1:04:61:cb:97:bb:38:33:e9:62:df:a4:d7:d3:
                    48:5e:a1:db:66:06:0b:95:b1:4c:58:7f:74:53:1b:
                    65:45:c3:a0:75:3a:8b:cf:3b:d4:08:59:55:ee:7f:
                    1f:8a:66:e4:2e:d1:cc:ae:53:41:b9:00:9a:da:c6:
                    df:7b:81:3f:55:9b:7c:e3:af:ff:1f:e6:25:cd:03:
                    cc:82:cd:ec:26:92:76:e9:8f:77:f6:6e:29:ba:33:
                    18:7a:00:b8:92:20:fc:1f:62:41:3c:dd:52:28:42:
                    81:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C1:5F:36:31:62:77:FF:66:6D:6D:2F:68:E1:7E:45:D1:BF:08:5E:57
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/5410af3b-1667-4dd4-9260-1835889ae3a3/33480d40-c821-3e04-8391-d8b52bb73e5a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/5410af3b-1667-4dd4-9260-1835889ae3a3/5410af3b-1667-4dd4-9260-1835889ae3a3.crl

            X509v3 Authority Key Identifier:
                keyid:B8:7F:76:B3:F1:DA:95:1F:69:6F:EC:30:F0:FB:FA:25:16:48:C1:66

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/5410af3b-1667-4dd4-9260-1835889ae3a3.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  162.247.166.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         83:56:f1:19:de:71:0a:1f:88:37:05:58:49:c5:68:50:7f:2a:
         d7:60:e8:ad:f7:f7:d8:89:d7:f1:e4:9b:d6:aa:3e:78:a8:3a:
         16:13:09:6f:63:db:2d:30:08:46:70:ce:74:86:d0:f5:6e:0b:
         cf:b6:52:b1:e2:c0:92:63:f5:3e:e7:bf:6d:76:1b:e5:a6:c6:
         1a:62:7e:44:24:ee:eb:b1:64:0e:24:1c:0a:54:dc:4d:13:b2:
         cf:9d:76:bc:67:4b:6a:21:bd:48:be:3c:ba:af:4e:e1:55:e5:
         27:9c:fb:e3:40:e5:9a:c0:18:fb:73:80:c1:ad:a1:d9:41:df:
         c9:c4:b3:7f:a1:03:9a:0b:d3:f4:eb:27:de:a7:6b:36:e4:65:
         7c:3f:18:9a:6d:c8:d2:54:3f:ab:b2:bb:3c:22:f8:68:59:4f:
         63:90:ce:2b:e9:5f:04:fe:82:b6:6e:45:d9:79:7f:e9:36:9f:
         d6:48:be:8d:a6:ef:e1:73:41:86:db:82:6f:b7:c0:4e:81:52:
         39:81:c3:e5:66:cb:d8:7c:21:27:d6:ad:ba:60:c4:cd:df:ab:
         f2:0c:06:7c:ef:02:5a:57:af:df:ec:a4:ee:8d:cb:67:e8:d1:
         db:fd:e0:f1:cf:d4:b6:e1:81:e6:cf:5a:15:8e:b6:92:fd:e2:
         30:8b:86:17
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 20:15:35 2026 by rpki-client