Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/f9bc2011-5153-496f-bab6-66966f6f0df9/0ff03b56-62f7-366f-bd10-b85204eb6e0c.roa
File:                     0ff03b56-62f7-366f-bd10-b85204eb6e0c.roa (raw, json)
Hash identifier:          JNlc7qnIyoT369AhljzeRay0gn3YsKzof1bNVm7R/Mg=
Subject key identifier:   BC:BA:91:14:8C:2E:D4:76:24:87:F6:E1:53:21:3B:CB:42:9C:B8:DD
Certificate issuer:       /CN=f9bc2011-5153-496f-bab6-66966f6f0df9
Certificate serial:       010D0C9F4328584D905AA39A20B61982EC30AD80
Authority key identifier: 10:17:1F:F6:98:19:30:73:51:1B:32:CA:14:5D:C7:14:FD:FC:02:A0
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/f9bc2011-5153-496f-bab6-66966f6f0df9.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/f9bc2011-5153-496f-bab6-66966f6f0df9/0ff03b56-62f7-366f-bd10-b85204eb6e0c.roa
Signing time:             Mon 20 Apr 2026 01:00:24 +0000
ROA not before:           Mon 20 Apr 2026 01:00:24 +0000
ROA not after:            Sun 19 Jul 2026 01:00:24 +0000
asID:                     22328
IP address blocks:        192.231.133.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/f9bc2011-5153-496f-bab6-66966f6f0df9/f9bc2011-5153-496f-bab6-66966f6f0df9.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/f9bc2011-5153-496f-bab6-66966f6f0df9/f9bc2011-5153-496f-bab6-66966f6f0df9.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/f9bc2011-5153-496f-bab6-66966f6f0df9.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 14 May 2026 23:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:90:5a:a3:9a:20:b6:19:82:ec:30:ad:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f9bc2011-5153-496f-bab6-66966f6f0df9
        Validity
            Not Before: Apr 20 01:00:24 2026 GMT
            Not After : Jul 19 01:00:24 2026 GMT
        Subject: CN=2bef2fd5-80a0-435c-9d5b-d0354774d23b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8f:96:3e:ae:b8:b2:a9:44:b9:b4:52:7e:93:18:
                    eb:9d:ae:07:6f:86:2a:f4:d9:71:1f:5e:3b:fa:58:
                    ce:34:c8:b9:dc:4a:15:0a:29:4a:61:29:0f:93:5a:
                    49:9a:ae:b1:09:78:fe:d4:76:9e:f9:e7:6a:5a:cd:
                    5b:6a:8a:ef:0c:1c:b1:9b:92:e9:14:8d:d5:70:e0:
                    5a:ce:50:00:81:96:2a:5f:70:b0:59:44:70:a2:c5:
                    18:bc:0d:96:29:1f:66:1c:48:4f:ea:4e:9f:f5:56:
                    a8:28:b3:61:b9:34:5a:64:25:72:a5:2d:91:49:5f:
                    12:a7:a2:1a:23:0d:9c:bb:e8:a3:40:1f:7a:96:25:
                    88:c8:4e:2b:33:0b:ff:4c:49:5f:31:6f:3e:2c:ad:
                    16:02:f4:e1:71:da:79:0b:51:cd:b7:b9:c9:80:88:
                    3f:d7:7e:2d:c8:88:0f:d5:17:2e:8e:1b:84:04:23:
                    7f:2a:5f:7b:28:94:4d:76:83:9c:a4:ae:78:a9:91:
                    33:41:fc:6f:38:9e:ff:4d:78:8e:eb:f1:b8:89:f1:
                    26:7b:54:eb:88:03:b4:4a:b8:f8:6a:48:ee:af:ec:
                    ba:cf:12:00:27:d9:10:32:31:e5:24:11:d4:78:56:
                    ef:3a:34:e4:2d:9f:40:34:ce:8f:7e:c6:bd:9e:70:
                    a9:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BC:BA:91:14:8C:2E:D4:76:24:87:F6:E1:53:21:3B:CB:42:9C:B8:DD
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/f9bc2011-5153-496f-bab6-66966f6f0df9/0ff03b56-62f7-366f-bd10-b85204eb6e0c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/f9bc2011-5153-496f-bab6-66966f6f0df9/f9bc2011-5153-496f-bab6-66966f6f0df9.crl

            X509v3 Authority Key Identifier:
                keyid:10:17:1F:F6:98:19:30:73:51:1B:32:CA:14:5D:C7:14:FD:FC:02:A0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/f9bc2011-5153-496f-bab6-66966f6f0df9.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.231.133.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         b3:2d:14:2f:ec:23:f1:52:ce:b0:00:19:e3:81:08:98:a7:90:
         5e:6c:04:98:e6:ca:9d:2f:a7:82:81:46:83:c0:8f:27:c6:47:
         a4:9b:9c:53:8f:d0:0e:60:d5:df:11:c2:e5:f5:65:9b:27:19:
         35:95:68:39:ab:4a:11:38:58:c3:21:13:24:23:2a:4e:42:eb:
         71:1d:2e:9f:90:35:15:fc:9e:ed:52:29:6e:76:e4:56:10:ee:
         86:07:28:db:be:88:ba:7b:5f:87:80:12:69:44:27:82:5a:24:
         98:ab:df:4e:2e:4a:a7:04:f1:52:e8:9e:80:9a:44:1a:7e:2a:
         8b:22:df:6e:3d:a0:41:d1:7f:15:f8:48:48:a2:0b:de:2b:a0:
         c3:86:7e:28:c4:75:44:41:a6:8d:e6:dc:bd:04:1f:43:6e:6a:
         b0:7d:59:c9:c3:dc:51:51:01:f1:e1:76:26:9d:d2:06:b3:fe:
         9a:9a:8f:d6:46:a1:24:6b:a2:f5:f9:ff:5f:b2:a3:1d:e9:94:
         36:20:f6:1d:87:96:99:a6:9d:73:a4:87:c0:43:00:35:15:7e:
         02:6c:5b:fa:8a:d5:85:e0:a5:de:26:48:a0:e0:96:37:d3:d6:
         11:64:8b:8e:8d:45:68:e6:b3:45:1c:46:aa:6b:83:62:49:a3:
         58:49:33:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 07:08:22 2026 by rpki-client