Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/2026b921-2d83-4f47-a24e-db9a3c451c72/33af3755-83aa-37f9-a9bb-2c92fb09f2b9.roa
File:                     33af3755-83aa-37f9-a9bb-2c92fb09f2b9.roa (raw, json)
Hash identifier:          fYnauHvArTP6aGC4SOOmCVayXrqgw0w3YnX6ZCl1rVw=
Subject key identifier:   ED:66:E6:A5:AA:63:1D:A0:B3:95:17:E3:FB:A5:31:44:5A:6E:29:21
Certificate issuer:       /CN=2026b921-2d83-4f47-a24e-db9a3c451c72
Certificate serial:       010D0C9F4328584A28174BCB041CCF25D7D2FD70
Authority key identifier: 10:D1:A5:25:83:0C:98:91:7C:6D:AF:91:D5:6C:2E:5F:F7:2D:7D:63
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/2026b921-2d83-4f47-a24e-db9a3c451c72.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/2026b921-2d83-4f47-a24e-db9a3c451c72/33af3755-83aa-37f9-a9bb-2c92fb09f2b9.roa
Signing time:             Wed 11 Jun 2025 14:20:02 +0000
ROA not before:           Wed 11 Jun 2025 14:20:02 +0000
ROA not after:            Tue 09 Sep 2025 14:20:02 +0000
asID:                     2648
IP address blocks:        132.163.72.0/21 maxlen: 21
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/2026b921-2d83-4f47-a24e-db9a3c451c72/2026b921-2d83-4f47-a24e-db9a3c451c72.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/2026b921-2d83-4f47-a24e-db9a3c451c72/2026b921-2d83-4f47-a24e-db9a3c451c72.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/2026b921-2d83-4f47-a24e-db9a3c451c72.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 01 Jul 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:28:17:4b:cb:04:1c:cf:25:d7:d2:fd:70
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2026b921-2d83-4f47-a24e-db9a3c451c72
        Validity
            Not Before: Jun 11 14:20:02 2025 GMT
            Not After : Sep  9 14:20:02 2025 GMT
        Subject: CN=9ae81e1c-8595-46d2-a273-eb4a769503fc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:57:fc:99:ae:97:b0:63:7f:bf:be:13:e4:c2:
                    7b:10:8b:91:fa:f6:0d:e9:c3:66:06:ee:06:50:b1:
                    86:a4:5a:96:6f:08:fa:e4:a4:e0:a4:5c:3b:e1:76:
                    66:7d:b1:3c:ed:a9:5a:bd:f7:d4:98:6f:87:9a:0f:
                    44:af:6b:3f:f8:01:0b:6c:7b:70:ea:50:11:b3:3e:
                    5d:43:0c:0d:d8:f3:79:cd:fd:23:1c:dd:fb:5e:f3:
                    b5:aa:39:8a:76:62:0b:5b:86:bb:a4:63:b1:07:7b:
                    54:95:c7:a1:6e:35:b3:0f:05:4c:ed:e0:57:3a:fd:
                    87:ab:fa:1c:ea:20:03:2c:4f:25:95:31:c6:65:a0:
                    75:ff:01:dc:93:5f:27:8f:14:49:18:e2:63:6b:51:
                    49:ee:d3:60:9a:bf:76:70:0c:1b:83:56:23:f3:15:
                    f4:0d:34:43:96:35:3e:7c:c3:76:48:32:9b:bb:e2:
                    51:c0:c2:91:a1:a3:16:96:39:2d:60:d3:97:75:dc:
                    43:38:6e:2d:ae:2b:60:1e:f3:80:43:1f:93:27:c0:
                    c5:75:d1:81:b7:c3:1e:cd:09:b5:38:a5:3b:f6:5f:
                    27:a9:ba:af:c0:98:9c:37:fe:24:24:4d:cb:0e:1f:
                    f6:93:41:32:33:a4:8f:8f:4e:65:2d:ff:fa:f5:e5:
                    29:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                ED:66:E6:A5:AA:63:1D:A0:B3:95:17:E3:FB:A5:31:44:5A:6E:29:21
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/2026b921-2d83-4f47-a24e-db9a3c451c72/33af3755-83aa-37f9-a9bb-2c92fb09f2b9.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/2026b921-2d83-4f47-a24e-db9a3c451c72/2026b921-2d83-4f47-a24e-db9a3c451c72.crl

            X509v3 Authority Key Identifier:
                keyid:10:D1:A5:25:83:0C:98:91:7C:6D:AF:91:D5:6C:2E:5F:F7:2D:7D:63

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/2026b921-2d83-4f47-a24e-db9a3c451c72.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  132.163.72.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         20:62:6b:76:0e:de:4a:72:6b:e1:49:f2:43:10:9d:4d:6f:15:
         8a:7e:b1:23:23:49:5a:84:f1:e7:48:e4:ec:ac:aa:dc:e2:04:
         ba:e5:d7:86:4f:32:cc:bd:c4:31:fd:9e:65:cb:ab:e5:e1:40:
         73:37:16:23:45:ea:63:b2:07:c1:4d:5f:23:19:71:09:6b:49:
         9d:98:88:e0:33:a6:28:74:12:59:03:af:ba:28:88:18:6d:a1:
         96:8b:70:e3:82:9e:ee:4c:b3:28:10:b7:36:83:35:ba:1e:63:
         ef:93:92:16:04:87:72:02:10:48:1a:9f:bf:80:e4:99:79:bf:
         38:cc:6b:ce:40:9a:dc:f0:e4:7e:97:f7:3d:98:33:09:02:51:
         db:c6:13:45:11:72:47:91:d6:9a:9f:fc:8f:ba:d8:fd:dd:c9:
         0f:4f:6c:89:a9:26:3a:0d:4d:08:57:d6:5e:97:89:47:d5:e1:
         56:e7:84:05:29:74:a6:df:84:ec:c4:5c:4c:c5:96:20:73:ca:
         11:b7:71:36:70:c4:3e:a1:a8:6e:3c:b3:f5:f8:e7:1c:ac:50:
         5d:29:46:c4:7b:f0:a2:56:73:5f:d9:6b:8b:cb:57:96:35:a0:
         38:dd:ce:4c:a9:a1:63:43:81:40:2e:d0:67:d4:42:6a:b6:4c:
         6a:b1:2f:8a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 30 13:55:35 2025 by rpki-client