Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/27b21455-8e8a-309e-8de5-3a3b6898ac0e.roa
File:                     27b21455-8e8a-309e-8de5-3a3b6898ac0e.roa (raw, json)
Hash identifier:          ZaQ6H7VSwgQoMk+CtOubO/APKlNCQeJt/qujm1pTKs0=
Subject key identifier:   82:01:D8:8F:80:1C:38:CF:8C:9A:B3:98:8D:A1:94:8F:DC:5B:BC:12
Certificate issuer:       /CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Certificate serial:       010D0C9F4328584E3A2F6601822A16D8873FACC0
Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/27b21455-8e8a-309e-8de5-3a3b6898ac0e.roa
Signing time:             Fri 19 Jun 2026 21:00:12 +0000
ROA not before:           Fri 19 Jun 2026 21:00:12 +0000
ROA not after:            Thu 17 Sep 2026 21:00:12 +0000
asID:                     54502
IP address blocks:        184.105.33.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 25 Jul 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:3a:2f:66:01:82:2a:16:d8:87:3f:ac:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa
        Validity
            Not Before: Jun 19 21:00:12 2026 GMT
            Not After : Sep 17 21:00:12 2026 GMT
        Subject: CN=3bc57d83-ea7b-47b5-b33a-6a04843e01f5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:85:99:72:f0:37:a7:47:7a:74:b9:e2:72:18:ec:
                    81:2d:7d:10:61:7b:8f:43:36:03:94:80:c8:1a:9a:
                    3d:ee:f9:39:9e:85:b1:d2:8a:3c:6d:c4:bb:ad:29:
                    fd:13:be:d1:1a:1a:3f:ad:03:5f:65:6e:d6:22:5d:
                    28:d1:f3:b8:21:40:32:4b:ba:c8:b4:cb:10:03:43:
                    0c:85:64:53:aa:d0:7d:46:0c:85:b1:31:c6:5d:1b:
                    41:bf:a4:e1:f7:95:e0:75:03:59:c5:ff:5f:6d:0d:
                    f5:0f:a0:62:0c:d9:2c:67:d9:dc:86:9f:89:dd:fe:
                    93:e4:86:4e:07:02:91:16:41:5c:1c:52:22:29:83:
                    0e:9a:ba:cb:f8:db:f6:88:b2:37:dd:8d:a5:24:a9:
                    89:05:34:dd:42:09:47:51:7e:7b:af:81:5c:f6:90:
                    ec:eb:64:2e:4b:9e:85:37:2c:77:e6:f1:12:24:0d:
                    dd:28:23:32:70:87:2b:63:c9:ee:af:ed:33:bd:78:
                    27:a4:12:49:7a:fe:f1:61:a6:74:9f:b1:e0:7e:1e:
                    c0:bb:f2:f9:08:2b:3e:84:da:04:31:c8:0a:fe:60:
                    8e:80:b1:53:2a:0f:e3:9e:05:a7:50:7a:a9:ea:9c:
                    9d:2a:89:04:9e:db:f7:63:ad:31:ae:05:5a:f6:f0:
                    b0:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                82:01:D8:8F:80:1C:38:CF:8C:9A:B3:98:8D:A1:94:8F:DC:5B:BC:12
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/27b21455-8e8a-309e-8de5-3a3b6898ac0e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl

            X509v3 Authority Key Identifier:
                keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  184.105.33.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         c0:8b:6a:5e:56:6b:ae:fd:c1:28:ca:d7:51:bc:5a:cc:e2:d1:
         d2:b9:db:8c:7d:02:92:42:4f:cb:74:4f:a7:bf:d8:fd:12:5c:
         d5:65:97:16:fa:1c:48:72:43:c4:f0:02:9b:35:10:5d:8c:07:
         42:d9:98:77:cf:d7:7a:77:0b:d8:7e:60:2a:cf:fb:ed:2d:27:
         0f:60:1e:ba:08:3a:f5:03:64:e3:d4:5a:30:df:88:12:5c:31:
         5a:b6:36:4e:0d:d4:20:d7:1b:51:c3:40:af:fb:5f:b4:42:48:
         9e:50:c0:0b:42:d7:b6:0e:18:d9:e9:17:f2:f1:63:89:13:23:
         b2:30:69:74:36:4e:00:85:c5:91:bf:e3:e1:77:9e:85:17:d4:
         6f:a5:36:da:3a:3d:f2:f5:50:db:4c:4f:e6:54:4b:a9:32:c4:
         0e:55:36:4e:a0:f7:34:b8:5c:ed:2e:95:52:02:8a:56:eb:a5:
         39:a2:a0:8e:be:b2:82:ad:6c:e0:be:d0:5f:3f:ca:3e:d8:14:
         49:ba:e4:33:63:6a:82:07:ae:5b:17:50:35:55:7d:71:98:9c:
         bd:db:34:07:e6:d7:03:65:c0:57:b6:67:d5:ce:ca:68:26:9e:
         fe:9a:f5:d8:c3:4b:5d:52:d1:a4:91:6d:d7:6c:6a:d6:eb:92:
         1a:c8:33:21
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 01:56:47 2026 by rpki-client