Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7e463b2c-538a-4f93-bfa3-fe1643a77085/33d546c6-0b05-3601-9362-e638011b3a17.roa
File:                     33d546c6-0b05-3601-9362-e638011b3a17.roa (raw, json)
Hash identifier:          moiLycO7rMxfSwQj6I8gtdKX3Uz44fax/vAwzC6nQnk=
Subject key identifier:   16:2C:ED:75:0A:2B:7E:33:D9:E9:37:C8:8D:0B:57:93:0D:8C:D5:BC
Certificate issuer:       /CN=7e463b2c-538a-4f93-bfa3-fe1643a77085
Certificate serial:       010D0C9F4328584D359FA9E9226BEF21A951C0B0
Authority key identifier: 29:30:ED:0F:85:A6:01:7A:2F:42:BD:40:9C:E0:C7:90:94:14:17:42
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7e463b2c-538a-4f93-bfa3-fe1643a77085.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7e463b2c-538a-4f93-bfa3-fe1643a77085/33d546c6-0b05-3601-9362-e638011b3a17.roa
Signing time:             Wed 18 Mar 2026 13:00:40 +0000
ROA not before:           Wed 18 Mar 2026 13:00:40 +0000
ROA not after:            Tue 16 Jun 2026 13:00:40 +0000
asID:                     11232
IP address blocks:        184.83.66.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7e463b2c-538a-4f93-bfa3-fe1643a77085/7e463b2c-538a-4f93-bfa3-fe1643a77085.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7e463b2c-538a-4f93-bfa3-fe1643a77085/7e463b2c-538a-4f93-bfa3-fe1643a77085.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7e463b2c-538a-4f93-bfa3-fe1643a77085.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 27 Mar 2026 22:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:35:9f:a9:e9:22:6b:ef:21:a9:51:c0:b0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7e463b2c-538a-4f93-bfa3-fe1643a77085
        Validity
            Not Before: Mar 18 13:00:40 2026 GMT
            Not After : Jun 16 13:00:40 2026 GMT
        Subject: CN=ecfc8d05-6aab-4fff-9388-dd65d8a9e836
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:db:0a:bb:42:40:1f:0e:f8:0d:3d:cb:86:86:79:
                    3b:b5:e8:f3:c2:75:81:a6:f2:49:7e:a2:64:e9:51:
                    17:12:98:94:fd:17:66:e5:4d:b6:17:93:e2:88:f0:
                    cf:6b:05:8f:32:e5:69:a5:62:c4:56:a6:b5:ec:8d:
                    5a:b7:08:bb:c4:a2:09:84:e7:a4:ec:54:f1:b6:45:
                    68:a8:de:99:6a:3e:ba:ad:26:34:83:2d:28:01:c8:
                    03:48:83:72:86:62:00:36:81:3d:50:85:a9:b9:2a:
                    07:29:b3:17:27:37:18:71:8e:f9:76:5c:c0:63:24:
                    7c:4c:87:1c:a4:35:b5:e9:e4:a0:5c:cd:bf:df:de:
                    13:cb:d8:eb:6b:11:64:d9:b4:7a:91:82:08:d3:68:
                    98:aa:b8:09:2c:77:52:18:09:8c:ae:08:21:a2:10:
                    e7:72:b7:ac:43:75:91:b4:f0:c9:ff:12:4b:4d:ff:
                    78:d1:29:23:cb:8e:8f:1b:1d:9d:bf:1e:9c:bb:0b:
                    98:06:8e:20:9d:0e:18:ec:1a:7c:d7:05:38:f7:82:
                    9c:fd:13:0f:df:40:84:b2:42:ee:a1:53:55:10:e4:
                    1e:54:2e:50:87:8a:0a:01:fa:25:f9:86:34:dc:26:
                    c1:36:fe:27:61:1c:43:c5:d7:57:64:60:64:96:9c:
                    6b:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                16:2C:ED:75:0A:2B:7E:33:D9:E9:37:C8:8D:0B:57:93:0D:8C:D5:BC
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7e463b2c-538a-4f93-bfa3-fe1643a77085/33d546c6-0b05-3601-9362-e638011b3a17.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7e463b2c-538a-4f93-bfa3-fe1643a77085/7e463b2c-538a-4f93-bfa3-fe1643a77085.crl

            X509v3 Authority Key Identifier:
                keyid:29:30:ED:0F:85:A6:01:7A:2F:42:BD:40:9C:E0:C7:90:94:14:17:42

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7e463b2c-538a-4f93-bfa3-fe1643a77085.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  184.83.66.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1d:34:e5:df:65:2e:66:03:42:37:b2:f3:29:1e:84:fb:5a:f8:
         a3:37:6f:22:b1:6d:fb:66:0a:c9:c5:1b:3d:00:91:13:cb:c2:
         f6:0d:69:07:e2:25:dc:36:fc:34:0e:6c:4e:95:8d:c6:91:b5:
         56:0b:7c:29:f7:4d:cd:43:23:11:e0:47:0c:35:42:54:1b:7c:
         06:20:5b:46:2a:a9:81:3f:26:e0:b7:3c:84:5b:7e:ec:55:d9:
         66:df:e2:be:b7:47:9e:6b:aa:7c:43:1b:e2:ac:dd:e7:7f:2c:
         1d:12:f4:b1:ea:82:73:47:83:b9:f3:89:d9:38:1d:13:97:3e:
         97:00:c0:b1:0d:b8:96:f2:1e:68:aa:62:5c:4d:44:50:05:0b:
         44:5b:70:34:22:60:8b:da:4d:db:1f:5c:ca:7b:04:29:66:3e:
         da:0d:a9:5f:89:c1:c5:8f:59:b6:d6:b2:b8:6c:0a:21:c2:bd:
         db:6e:d3:ca:a4:e1:22:5e:d2:be:11:7e:61:d9:88:ae:1c:5c:
         f6:7e:22:3b:6e:86:23:76:20:21:f5:64:d3:ec:53:26:ab:9b:
         d5:49:72:8e:15:fd:78:e1:a0:6d:a9:2d:c3:df:96:b4:23:b1:
         36:36:4e:e0:d9:55:40:8d:52:ba:3f:b5:11:92:09:67:41:56:
         4e:4a:4b:15
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 15:42:08 2026 by rpki-client