Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/b76e0d15-9976-4466-b6ff-2d067b7ef5fe/33f9e5d1-6c64-3898-b855-2315e8819343.roa
File:                     33f9e5d1-6c64-3898-b855-2315e8819343.roa (raw, json)
Hash identifier:          TTdpWe5MZ8eZiALjn2uENDV1Vd6R/9NRXL1zObqipQI=
Subject key identifier:   BB:C9:22:83:90:7A:E8:0E:0C:1C:E9:A6:BE:63:8E:19:24:67:D6:B6
Certificate issuer:       /CN=b76e0d15-9976-4466-b6ff-2d067b7ef5fe
Certificate serial:       010D0C9F4328584DC29AF12B10A62B94EE2D99D0
Authority key identifier: DE:78:2E:6A:FA:D3:05:00:58:EE:E8:80:F5:16:D9:68:51:F3:90:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/b76e0d15-9976-4466-b6ff-2d067b7ef5fe.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/b76e0d15-9976-4466-b6ff-2d067b7ef5fe/33f9e5d1-6c64-3898-b855-2315e8819343.roa
Signing time:             Fri 08 May 2026 01:00:24 +0000
ROA not before:           Fri 08 May 2026 01:00:24 +0000
ROA not after:            Thu 06 Aug 2026 01:00:24 +0000
asID:                     12083
IP address blocks:        24.42.192.0/19 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/b76e0d15-9976-4466-b6ff-2d067b7ef5fe/b76e0d15-9976-4466-b6ff-2d067b7ef5fe.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/b76e0d15-9976-4466-b6ff-2d067b7ef5fe/b76e0d15-9976-4466-b6ff-2d067b7ef5fe.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/b76e0d15-9976-4466-b6ff-2d067b7ef5fe.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 14 May 2026 15:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:c2:9a:f1:2b:10:a6:2b:94:ee:2d:99:d0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b76e0d15-9976-4466-b6ff-2d067b7ef5fe
        Validity
            Not Before: May  8 01:00:24 2026 GMT
            Not After : Aug  6 01:00:24 2026 GMT
        Subject: CN=d28e7124-f74d-4f48-ae40-c8581ba21024
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:87:13:d6:17:b7:df:73:f0:ed:9b:79:d8:94:a0:
                    3f:7f:22:1c:5b:ed:7b:f8:7a:e2:72:f0:b0:bb:15:
                    76:4b:1b:97:58:a8:35:79:4c:b6:43:80:25:22:5e:
                    03:10:4c:4a:11:d8:66:9d:3d:d5:2e:49:26:dc:a9:
                    53:b7:3b:37:0a:a9:3d:c3:44:f1:0c:fd:9d:46:c3:
                    3f:5c:cc:5d:6f:61:02:f9:86:40:98:3e:e3:77:be:
                    cd:e9:e4:8b:d2:92:16:0d:8f:4b:38:73:00:0b:21:
                    65:5c:83:ed:ba:8e:b1:35:60:1a:d2:e9:04:c5:18:
                    53:8f:a6:b6:8f:1e:f4:e2:45:ae:c5:ee:5d:55:ce:
                    2a:60:d7:7b:6a:3e:23:ce:5b:eb:a0:03:fb:b2:27:
                    47:99:8c:f3:85:ff:bc:68:cb:09:71:cd:07:72:58:
                    33:32:2c:2f:ae:fe:4f:be:5f:06:86:a3:f9:ec:55:
                    ca:11:69:79:e6:f1:40:2c:50:9f:9b:61:07:53:5b:
                    81:34:1d:5a:df:1b:92:03:96:f9:32:cb:27:b9:6d:
                    2e:35:af:ae:28:fe:d2:9a:f0:f1:bc:f8:e7:ee:4e:
                    78:ac:c7:12:f8:64:17:74:6b:2c:f6:25:34:e0:ff:
                    c1:02:46:9b:2b:bc:43:c0:d1:2f:0b:9b:02:8e:64:
                    a7:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BB:C9:22:83:90:7A:E8:0E:0C:1C:E9:A6:BE:63:8E:19:24:67:D6:B6
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/b76e0d15-9976-4466-b6ff-2d067b7ef5fe/33f9e5d1-6c64-3898-b855-2315e8819343.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/b76e0d15-9976-4466-b6ff-2d067b7ef5fe/b76e0d15-9976-4466-b6ff-2d067b7ef5fe.crl

            X509v3 Authority Key Identifier:
                keyid:DE:78:2E:6A:FA:D3:05:00:58:EE:E8:80:F5:16:D9:68:51:F3:90:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/b76e0d15-9976-4466-b6ff-2d067b7ef5fe.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  24.42.192.0/19

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4b:b9:ae:b4:03:f9:fa:bf:8d:4a:7b:e5:d2:cf:5c:44:87:d4:
         7c:a0:31:2e:fe:ed:26:50:54:3c:97:9b:6e:06:d3:1c:02:5b:
         c1:4e:05:7a:24:2c:a0:5e:1c:42:08:c6:0a:3f:bd:43:70:9b:
         5d:79:11:68:e4:46:16:aa:9c:00:75:64:31:aa:51:20:a3:6a:
         27:62:a1:12:b7:bb:d3:07:7a:0d:97:35:2f:16:05:98:a8:81:
         cf:40:28:38:ae:ce:9e:ec:ae:c2:7f:ab:50:44:39:f6:f0:2a:
         eb:c4:88:1d:57:7c:d7:92:6a:ce:c4:4a:cc:b5:0f:cb:12:db:
         92:69:cd:33:f9:1f:fa:95:c4:b4:fc:6f:7a:32:4f:75:bc:7a:
         a7:74:90:2c:50:f6:92:21:21:9a:76:23:99:da:cd:42:c6:56:
         d0:c0:e6:8a:55:f4:b7:5f:72:78:23:54:13:11:11:f8:11:ee:
         86:50:e9:2c:6f:68:bf:96:62:af:9e:b4:c9:5f:c3:3d:ab:2c:
         3a:80:c3:a9:ba:43:07:f3:40:b2:1c:42:96:d6:df:dd:69:51:
         18:e1:9a:dd:ba:75:30:00:52:eb:51:57:f4:c1:3a:9a:aa:bc:
         b6:a3:17:6a:ba:14:06:e9:99:e6:57:21:62:ad:8d:22:98:c3:
         82:f1:85:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 05:39:24 2026 by rpki-client