Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5dce877b-b7a0-44f5-b8c2-1115311c773e/778c411d-d7df-3c97-9219-3ef234ab6f08.roa
File:                     778c411d-d7df-3c97-9219-3ef234ab6f08.roa (raw, json)
Hash identifier:          4revIk99k3BdLQKeocPC5iqECkvb8fjCzRfoIM2zTRs=
Subject key identifier:   3D:49:BF:BF:36:72:F1:DE:F7:86:C5:19:11:EC:95:12:A9:0A:BE:58
Certificate issuer:       /CN=5dce877b-b7a0-44f5-b8c2-1115311c773e
Certificate serial:       010D0C9F4328584F5E62E38314710474DA259400
Authority key identifier: 91:40:49:57:21:04:32:E7:F1:28:40:C4:C1:5B:49:A8:24:DF:F2:2A
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5dce877b-b7a0-44f5-b8c2-1115311c773e.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5dce877b-b7a0-44f5-b8c2-1115311c773e/778c411d-d7df-3c97-9219-3ef234ab6f08.roa
Signing time:             Fri 02 Oct 2026 13:00:13 +0000
ROA not before:           Fri 02 Oct 2026 13:00:13 +0000
ROA not after:            Thu 31 Dec 2026 14:00:13 +0000
asID:                     16509
IP address blocks:        207.202.33.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5dce877b-b7a0-44f5-b8c2-1115311c773e/5dce877b-b7a0-44f5-b8c2-1115311c773e.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5dce877b-b7a0-44f5-b8c2-1115311c773e/5dce877b-b7a0-44f5-b8c2-1115311c773e.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5dce877b-b7a0-44f5-b8c2-1115311c773e.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 07 Oct 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:5e:62:e3:83:14:71:04:74:da:25:94:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5dce877b-b7a0-44f5-b8c2-1115311c773e
        Validity
            Not Before: Oct  2 13:00:13 2026 GMT
            Not After : Dec 31 14:00:13 2026 GMT
        Subject: CN=c671f2a5-1627-4e71-b74d-48f5da511d64
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:bc:12:96:76:13:b5:33:04:d9:2a:ea:e2:e6:
                    ab:91:dd:1f:fa:a3:40:bd:5a:12:2f:e1:c3:df:ba:
                    ea:21:29:91:a3:2b:14:5e:e3:b3:27:18:6f:bc:f1:
                    c3:2c:7d:c7:18:88:de:f0:d5:b5:c2:1b:6b:3e:84:
                    eb:a9:1f:96:fa:cf:21:e9:29:8e:f1:c5:3b:aa:da:
                    e2:3f:5e:8e:39:9b:1d:bd:8c:7b:84:8b:bb:81:6a:
                    2a:57:4c:b9:a7:e8:3a:a5:1f:4a:1b:6d:18:b5:84:
                    ba:63:1b:38:4a:23:f9:82:0e:5d:59:c6:0e:8c:47:
                    e8:bf:17:14:1c:40:f3:21:ab:a8:3e:45:48:ad:18:
                    4a:db:21:22:58:47:3f:ca:78:6f:a1:75:a9:cc:18:
                    79:82:e3:d6:b6:bd:bd:7f:cb:ef:ca:2b:90:4a:26:
                    74:ce:67:2c:99:85:6f:90:ed:0c:b3:10:cd:26:e7:
                    1a:14:59:31:e6:c7:45:cb:74:b0:03:65:89:b1:7c:
                    3a:5f:1a:3e:62:97:d4:b6:5d:0a:fc:84:2d:0f:cd:
                    e7:2f:14:c9:e2:bf:c0:a2:cd:18:07:79:04:94:c3:
                    d9:88:56:b8:ad:6f:46:40:f5:4f:75:77:05:89:e8:
                    67:6f:36:db:92:2e:87:92:ff:59:c2:24:34:2f:d4:
                    3b:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3D:49:BF:BF:36:72:F1:DE:F7:86:C5:19:11:EC:95:12:A9:0A:BE:58
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5dce877b-b7a0-44f5-b8c2-1115311c773e/778c411d-d7df-3c97-9219-3ef234ab6f08.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5dce877b-b7a0-44f5-b8c2-1115311c773e/5dce877b-b7a0-44f5-b8c2-1115311c773e.crl

            X509v3 Authority Key Identifier:
                keyid:91:40:49:57:21:04:32:E7:F1:28:40:C4:C1:5B:49:A8:24:DF:F2:2A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5dce877b-b7a0-44f5-b8c2-1115311c773e.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  207.202.33.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         73:25:77:1b:c3:ef:06:07:85:37:60:4d:9b:9c:8f:17:97:e8:
         d5:b8:12:e7:ff:74:19:8f:30:75:9e:d1:b1:6a:13:37:b5:2d:
         be:98:e0:c6:e7:b4:82:31:a2:c0:5c:8d:d3:27:1f:60:13:71:
         ec:27:e0:21:53:64:b7:b3:11:a8:cc:b4:4f:7b:42:53:37:a9:
         97:d7:d3:5a:8a:22:13:31:f2:92:04:4d:bf:17:9b:41:08:b1:
         ac:a1:f3:d9:cc:5e:67:03:2f:00:ca:70:df:36:92:10:9e:f3:
         c3:5d:94:90:10:14:e3:2c:27:2d:1d:3b:2d:9d:0c:9e:0d:fa:
         48:48:ab:05:a9:d7:59:9c:7b:9a:20:40:2f:12:66:94:6a:ff:
         55:db:28:f4:20:51:e2:25:83:db:b7:72:77:8a:fd:8e:cb:54:
         73:7f:84:35:d3:25:92:c8:c3:c1:59:eb:76:7b:53:68:70:bf:
         f8:31:a3:73:18:3d:f3:07:35:42:c0:03:06:01:a1:6d:79:b2:
         10:1d:77:02:81:70:3f:b3:8a:6b:19:1b:9d:fb:05:72:16:11:
         7f:11:d5:33:bd:dd:25:8b:1a:8a:ba:c5:20:ad:bf:46:f8:aa:
         85:97:30:58:70:76:55:14:fb:bd:57:a6:78:d8:3b:6f:a4:80:
         6d:07:04:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 5 22:54:59 2026 by rpki-client