Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5dce877b-b7a0-44f5-b8c2-1115311c773e/7ee7228b-bbfa-3084-82dc-bdb8695a3e98.roa
File:                     7ee7228b-bbfa-3084-82dc-bdb8695a3e98.roa (raw, json)
Hash identifier:          J/+04Cp0xMsRv5MxTi7maJWjEMbou8Y2IkkEerY0HA8=
Subject key identifier:   33:CD:CB:4E:E0:1D:07:51:52:1A:42:48:D5:1F:6F:ED:31:D6:30:2C
Certificate issuer:       /CN=5dce877b-b7a0-44f5-b8c2-1115311c773e
Certificate serial:       010D0C9F4328584D39CF819AE1D2B5E463E0DDC0
Authority key identifier: 91:40:49:57:21:04:32:E7:F1:28:40:C4:C1:5B:49:A8:24:DF:F2:2A
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5dce877b-b7a0-44f5-b8c2-1115311c773e.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5dce877b-b7a0-44f5-b8c2-1115311c773e/7ee7228b-bbfa-3084-82dc-bdb8695a3e98.roa
Signing time:             Fri 20 Mar 2026 01:00:32 +0000
ROA not before:           Fri 20 Mar 2026 01:00:32 +0000
ROA not after:            Thu 18 Jun 2026 01:00:32 +0000
asID:                     14618
IP address blocks:        207.202.33.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5dce877b-b7a0-44f5-b8c2-1115311c773e/5dce877b-b7a0-44f5-b8c2-1115311c773e.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5dce877b-b7a0-44f5-b8c2-1115311c773e/5dce877b-b7a0-44f5-b8c2-1115311c773e.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5dce877b-b7a0-44f5-b8c2-1115311c773e.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 27 Mar 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:39:cf:81:9a:e1:d2:b5:e4:63:e0:dd:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5dce877b-b7a0-44f5-b8c2-1115311c773e
        Validity
            Not Before: Mar 20 01:00:32 2026 GMT
            Not After : Jun 18 01:00:32 2026 GMT
        Subject: CN=b95ae719-6f61-4805-a4a3-903ecc7c6425
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:ca:48:fd:a2:ba:79:f1:1d:aa:c0:33:d3:f1:
                    db:9a:e1:50:05:4d:6f:eb:af:1c:2f:e5:7b:64:4a:
                    04:d9:a1:f1:b8:85:fa:31:7b:a5:d0:a0:be:7e:3a:
                    05:b0:87:32:71:bc:36:db:60:81:53:2c:da:1f:df:
                    e0:5e:1a:cc:79:ac:bd:58:19:c3:7e:ff:6e:19:6d:
                    c9:c3:f7:1a:b9:73:ab:f0:79:ca:0c:f5:02:4f:97:
                    e3:98:a6:27:d2:07:7e:d1:63:44:96:28:f3:85:6c:
                    b4:84:c2:c4:a8:71:1c:71:55:84:8e:9d:c7:0e:f4:
                    eb:04:cc:42:4a:de:0d:02:25:19:98:4d:ed:42:e1:
                    a2:cd:23:d5:03:1a:b9:46:fb:65:4b:a1:2c:06:cf:
                    81:b9:f8:bd:8d:23:3b:de:40:91:e6:4c:b0:63:6e:
                    0a:b7:70:1e:1c:56:5f:12:4b:a3:dd:c1:bd:0e:33:
                    dd:3c:5e:73:6e:3b:09:d6:f6:18:9c:7e:56:bd:77:
                    b9:a1:79:61:90:b1:b0:29:eb:bd:fe:e3:93:04:58:
                    e6:a1:e5:53:fe:ac:1c:7f:1a:32:bd:24:e7:1c:ac:
                    7f:f4:6f:92:8b:b0:60:9e:62:08:dc:f4:d4:d3:22:
                    f4:cf:42:bd:61:3b:8e:28:1d:f5:6b:81:2e:46:1d:
                    89:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                33:CD:CB:4E:E0:1D:07:51:52:1A:42:48:D5:1F:6F:ED:31:D6:30:2C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5dce877b-b7a0-44f5-b8c2-1115311c773e/7ee7228b-bbfa-3084-82dc-bdb8695a3e98.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5dce877b-b7a0-44f5-b8c2-1115311c773e/5dce877b-b7a0-44f5-b8c2-1115311c773e.crl

            X509v3 Authority Key Identifier:
                keyid:91:40:49:57:21:04:32:E7:F1:28:40:C4:C1:5B:49:A8:24:DF:F2:2A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5dce877b-b7a0-44f5-b8c2-1115311c773e.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  207.202.33.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2b:4b:cd:9d:75:7c:69:5e:84:2d:13:3f:ac:d4:55:ec:8c:f9:
         ee:2f:91:59:fd:b6:d1:f3:3e:b0:e6:9e:5c:90:6f:c1:c9:11:
         d1:4c:88:88:78:7b:01:33:bf:0b:66:b7:b3:9c:59:6f:59:bb:
         42:ea:70:fd:94:77:ba:4c:ab:82:f6:f7:cb:24:6c:f7:2f:d2:
         97:bc:42:b6:83:87:f0:ee:5d:5d:86:9c:4b:ac:71:97:24:88:
         c9:28:58:c5:9b:39:5d:ef:44:a4:38:1d:0b:60:75:b1:c9:12:
         ae:41:b6:e1:07:c0:ed:f0:69:71:d4:19:1a:ca:54:8c:7a:e3:
         ad:f2:d6:fd:a7:87:d4:a8:96:24:e5:36:81:cd:46:5e:4c:37:
         bd:aa:1d:18:3c:fd:68:33:ed:88:77:1f:26:e6:69:29:42:a4:
         16:ad:70:54:72:fd:7e:9a:c6:10:c2:2f:40:6f:d0:88:9f:f1:
         f6:2d:06:8e:b6:d5:b2:e7:df:00:46:a0:29:b9:41:b1:70:98:
         dc:4a:9c:63:f2:64:82:25:b0:ba:db:7d:1b:17:40:a3:a3:13:
         69:b7:e3:e0:54:bb:f8:31:43:35:1b:18:a8:aa:26:b7:25:90:
         97:cb:c7:c9:fd:74:97:bf:ef:31:7d:9d:f4:c6:08:db:da:ca:
         7b:54:de:3d
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE05z4Ga4dK15GPg3cAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNWRjZTg3N2ItYjdhMC00NGY1LWI4YzItMTExNTMxMWM3
NzNlMB4XDTI2MDMyMDAxMDAzMloXDTI2MDYxODAxMDAzMlowLzEtMCsGA1UEAxMk
Yjk1YWU3MTktNmY2MS00ODA1LWE0YTMtOTAzZWNjN2M2NDI1MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAycpI/aK6efEdqsAz0/HbmuFQBU1v668cL+V7
ZEoE2aHxuIX6MXul0KC+fjoFsIcycbw222CBUyzaH9/gXhrMeay9WBnDfv9uGW3J
w/cauXOr8HnKDPUCT5fjmKYn0gd+0WNElijzhWy0hMLEqHEccVWEjp3HDvTrBMxC
St4NAiUZmE3tQuGizSPVAxq5RvtlS6EsBs+Bufi9jSM73kCR5kywY24Kt3AeHFZf
Ekuj3cG9DjPdPF5zbjsJ1vYYnH5WvXe5oXlhkLGwKeu9/uOTBFjmoeVT/qwcfxoy
vSTnHKx/9G+Si7BgnmII3PTU0yL0z0K9YTuOKB31a4EuRh2JlwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFDPNy07gHQdRUhpCSNUfb+0x1jAsMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZGNl
ODc3Yi1iN2EwLTQ0ZjUtYjhjMi0xMTE1MzExYzc3M2UvN2VlNzIyOGItYmJmYS0z
MDg0LTgyZGMtYmRiODY5NWEzZTk4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWRjZTg3N2ItYjdhMC00NGY1LWI4
YzItMTExNTMxMWM3NzNlLzVkY2U4NzdiLWI3YTAtNDRmNS1iOGMyLTExMTUzMTFj
NzczZS5jcmwwHwYDVR0jBBgwFoAUkUBJVyEEMufxKEDEwVtJqCTf8iowDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS81ZGNlODc3Yi1iN2EwLTQ0ZjUtYjhjMi0xMTE1
MzExYzc3M2UuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAz8ohMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBACtLzZ11fGlehC0TP6zUVeyM+e4vkVn9ttHzPrDmnlyQb8HJEdFMiIh4
ewEzvwtmt7OcWW9Zu0LqcP2Ud7pMq4L298skbPcv0pe8QraDh/DuXV2GnEuscZck
iMkoWMWbOV3vRKQ4HQtgdbHJEq5BtuEHwO3waXHUGRrKVIx6463y1v2nh9SoliTl
NoHNRl5MN72qHRg8/Wgz7Yh3HybmaSlCpBatcFRy/X6axhDCL0Bv0Iif8fYtBo62
1bLn3wBGoCm5QbFwmNxKnGPyZIIlsLrbfRsXQKOjE2m34+BUu/gxQzUbGKiqJrcl
kJfLx8n9dJe/7zF9nfTGCNvayntU3j0=
-----END CERTIFICATE-----
Generated at Thu Mar 26 02:02:43 2026 by rpki-client