Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ebbeaf16-b802-46ab-b69d-b00bed66688b/77e4efc5-83da-3379-bdb7-e2e471014363.roa
File:                     77e4efc5-83da-3379-bdb7-e2e471014363.roa (raw, json)
Hash identifier:          gz9wh7J5pIcg4x5QlxRsLLYcdPMdcX1v6xL0IyiknKA=
Subject key identifier:   AA:24:BF:4A:00:73:76:3A:CF:18:78:3C:80:54:F2:5A:4F:FF:75:42
Certificate issuer:       /CN=ebbeaf16-b802-46ab-b69d-b00bed66688b
Certificate serial:       010D0C9F4328584E5AE739467049327C34F30340
Authority key identifier: B4:AD:F0:68:70:19:60:3C:35:4E:81:8B:F8:72:66:F8:FD:B6:CB:EE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ebbeaf16-b802-46ab-b69d-b00bed66688b.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ebbeaf16-b802-46ab-b69d-b00bed66688b/77e4efc5-83da-3379-bdb7-e2e471014363.roa
Signing time:             Wed 01 Jul 2026 14:17:09 +0000
ROA not before:           Wed 01 Jul 2026 14:17:09 +0000
ROA not after:            Tue 29 Sep 2026 14:17:09 +0000
asID:                     401703
IP address blocks:        192.48.33.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ebbeaf16-b802-46ab-b69d-b00bed66688b/ebbeaf16-b802-46ab-b69d-b00bed66688b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ebbeaf16-b802-46ab-b69d-b00bed66688b/ebbeaf16-b802-46ab-b69d-b00bed66688b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ebbeaf16-b802-46ab-b69d-b00bed66688b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 25 Jul 2026 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:5a:e7:39:46:70:49:32:7c:34:f3:03:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ebbeaf16-b802-46ab-b69d-b00bed66688b
        Validity
            Not Before: Jul  1 14:17:09 2026 GMT
            Not After : Sep 29 14:17:09 2026 GMT
        Subject: CN=2c27bf94-009f-4963-aa37-ab8299794c23
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:c8:c2:ee:d8:8d:ae:a9:a7:1d:9e:b9:47:dc:
                    56:77:46:b0:6e:23:ec:43:23:46:c4:16:f4:87:8e:
                    78:77:77:6b:72:02:86:4e:0c:ac:92:57:eb:f9:ea:
                    f8:65:37:8a:96:21:0d:f3:18:f7:eb:70:8e:f6:e7:
                    60:63:2d:69:43:85:a6:a8:dc:f9:41:70:ce:21:99:
                    29:c2:74:6e:cf:40:54:94:10:dd:f7:de:2e:a9:05:
                    69:70:2c:b8:13:86:21:5a:91:2c:6a:e5:c3:5c:ff:
                    c7:52:a4:2a:ec:bb:5b:0b:b5:05:12:0e:37:47:32:
                    c8:71:b6:1b:15:eb:63:64:3e:3b:5a:96:e8:ed:e8:
                    ec:6e:ef:e0:df:4c:cf:4d:fa:d6:63:3e:81:06:37:
                    70:5d:3a:09:c6:18:d1:51:6f:9d:fa:32:2c:9c:97:
                    ac:e7:70:42:cb:77:55:d9:f7:7c:74:2e:82:7f:bc:
                    41:ba:6d:88:7a:be:fd:b6:80:fe:ec:84:39:d5:68:
                    ba:31:d1:4a:67:98:71:3c:37:b3:da:41:07:87:47:
                    ea:b4:a3:09:b5:a8:58:e4:18:51:b8:70:a0:e9:19:
                    9d:ac:d2:11:77:5a:a2:19:47:3c:03:4d:5b:75:c3:
                    8c:b2:4e:bc:49:54:ee:7d:df:8c:ad:6d:27:7a:c1:
                    f2:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AA:24:BF:4A:00:73:76:3A:CF:18:78:3C:80:54:F2:5A:4F:FF:75:42
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ebbeaf16-b802-46ab-b69d-b00bed66688b/77e4efc5-83da-3379-bdb7-e2e471014363.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ebbeaf16-b802-46ab-b69d-b00bed66688b/ebbeaf16-b802-46ab-b69d-b00bed66688b.crl

            X509v3 Authority Key Identifier:
                keyid:B4:AD:F0:68:70:19:60:3C:35:4E:81:8B:F8:72:66:F8:FD:B6:CB:EE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ebbeaf16-b802-46ab-b69d-b00bed66688b.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.48.33.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         33:89:36:f1:cb:a3:95:ac:a6:b0:07:c5:78:7e:91:5a:5e:90:
         1c:fc:6e:93:a4:09:cb:86:94:95:31:3d:2f:5c:02:ce:cd:2d:
         58:60:af:24:a1:18:7b:29:86:47:ae:a0:df:cc:50:02:19:34:
         98:9c:43:d5:bf:cc:df:4e:10:4d:b7:c6:49:99:9c:ff:23:78:
         01:f1:62:3f:0c:a2:80:34:7e:04:1b:15:72:5c:0b:e1:32:ab:
         a1:94:31:07:3b:d3:e4:b1:65:30:d5:3d:62:39:49:e4:a6:73:
         ae:db:80:ce:30:bd:c7:37:f0:7d:65:cf:2d:a7:cf:6f:1d:8b:
         b1:0f:26:8a:5f:d6:4a:bd:8c:83:cb:f8:61:9d:a4:ed:29:0b:
         61:a3:f3:ba:c4:b4:df:29:93:07:54:21:5b:bd:7b:b9:8a:dd:
         e4:a9:be:88:a6:24:99:eb:06:01:e5:36:42:09:ad:a9:a3:34:
         3b:1f:15:48:95:fc:87:bd:20:50:b2:b6:36:18:c2:86:14:e5:
         30:d8:9b:de:9c:1d:18:f7:1d:21:34:95:d1:a2:61:39:6b:41:
         38:cc:5f:c7:4f:c3:7e:a8:6f:cc:5a:bb:45:40:63:af:ea:ba:
         7e:05:59:c6:74:c1:2e:b2:5b:92:5b:ef:51:b6:75:1f:46:03:
         a5:b0:b7:35
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE5a5zlGcEkyfDTzA0AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZWJiZWFmMTYtYjgwMi00NmFiLWI2OWQtYjAwYmVkNjY2
ODhiMB4XDTI2MDcwMTE0MTcwOVoXDTI2MDkyOTE0MTcwOVowLzEtMCsGA1UEAxMk
MmMyN2JmOTQtMDA5Zi00OTYzLWFhMzctYWI4Mjk5Nzk0YzIzMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtsjC7tiNrqmnHZ65R9xWd0awbiPsQyNGxBb0
h454d3drcgKGTgysklfr+er4ZTeKliEN8xj363CO9udgYy1pQ4WmqNz5QXDOIZkp
wnRuz0BUlBDd994uqQVpcCy4E4YhWpEsauXDXP/HUqQq7LtbC7UFEg43RzLIcbYb
FetjZD47Wpbo7ejsbu/g30zPTfrWYz6BBjdwXToJxhjRUW+d+jIsnJes53BCy3dV
2fd8dC6Cf7xBum2Ier79toD+7IQ51Wi6MdFKZ5hxPDez2kEHh0fqtKMJtahY5BhR
uHCg6RmdrNIRd1qiGUc8A01bdcOMsk68SVTufd+MrW0nesHyuQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFKokv0oAc3Y6zxh4PIBU8lpP/3VCMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS9lYmJl
YWYxNi1iODAyLTQ2YWItYjY5ZC1iMDBiZWQ2NjY4OGIvNzdlNGVmYzUtODNkYS0z
Mzc5LWJkYjctZTJlNDcxMDE0MzYzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i
YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvZWJiZWFmMTYtYjgwMi00NmFiLWI2
OWQtYjAwYmVkNjY2ODhiL2ViYmVhZjE2LWI4MDItNDZhYi1iNjlkLWIwMGJlZDY2
Njg4Yi5jcmwwHwYDVR0jBBgwFoAUtK3waHAZYDw1ToGL+HJm+P22y+4wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi
Ni1iZjMyLWM5NDkyMjg2ZjE5NS9lYmJlYWYxNi1iODAyLTQ2YWItYjY5ZC1iMDBi
ZWQ2NjY4OGIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwDAhMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBADOJNvHLo5WsprAHxXh+kVpekBz8bpOkCcuGlJUxPS9cAs7NLVhgrySh
GHsphkeuoN/MUAIZNJicQ9W/zN9OEE23xkmZnP8jeAHxYj8MooA0fgQbFXJcC+Ey
q6GUMQc70+SxZTDVPWI5SeSmc67bgM4wvcc38H1lzy2nz28di7EPJopf1kq9jIPL
+GGdpO0pC2Gj87rEtN8pkwdUIVu9e7mK3eSpvoimJJnrBgHlNkIJramjNDsfFUiV
/Ie9IFCytjYYwoYU5TDYm96cHRj3HSE0ldGiYTlrQTjMX8dPw36ob8xau0VAY6/q
un4FWcZ0wS6yW5Jb71G2dR9GA6WwtzU=
-----END CERTIFICATE-----
Generated at Fri Jul 24 02:00:10 2026 by rpki-client