Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/803514f9-05ca-4865-b58e-7e1188184f19/76bc3ebf-a0a2-3bc0-827a-3d75acbeb104.roa
File:                     76bc3ebf-a0a2-3bc0-827a-3d75acbeb104.roa (raw, json)
Hash identifier:          h2pecClWERZni8jsiL3A1oyvE2CYvIHXNSUCQaliP9k=
Subject key identifier:   BC:E4:1F:FA:B8:5C:BA:52:1E:E5:2D:97:02:01:3E:8E:A1:25:69:73
Certificate issuer:       /CN=803514f9-05ca-4865-b58e-7e1188184f19
Certificate serial:       010D0C9F4328584F19FD01BEB26AF025BE5B6840
Authority key identifier: 8A:AB:1A:FF:A2:37:47:C3:08:C6:65:DB:56:61:CF:A3:04:6B:7F:A6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/803514f9-05ca-4865-b58e-7e1188184f19.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/803514f9-05ca-4865-b58e-7e1188184f19/76bc3ebf-a0a2-3bc0-827a-3d75acbeb104.roa
Signing time:             Tue 08 Sep 2026 01:00:12 +0000
ROA not before:           Tue 08 Sep 2026 01:00:12 +0000
ROA not after:            Mon 07 Dec 2026 02:00:12 +0000
asID:                     30688
IP address blocks:        162.33.0.0/20 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/803514f9-05ca-4865-b58e-7e1188184f19/803514f9-05ca-4865-b58e-7e1188184f19.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/803514f9-05ca-4865-b58e-7e1188184f19/803514f9-05ca-4865-b58e-7e1188184f19.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/803514f9-05ca-4865-b58e-7e1188184f19.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 27 Sep 2026 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:19:fd:01:be:b2:6a:f0:25:be:5b:68:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=803514f9-05ca-4865-b58e-7e1188184f19
        Validity
            Not Before: Sep  8 01:00:12 2026 GMT
            Not After : Dec  7 02:00:12 2026 GMT
        Subject: CN=12af4e2a-b149-4f53-a072-2d58f58ec47f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8b:89:19:e0:bb:4a:ea:7b:4e:38:52:e5:bc:70:
                    8d:cc:a9:9d:5c:d2:17:d4:5c:c1:0a:ed:9e:4c:01:
                    b9:38:36:81:61:93:1c:56:31:a5:f2:19:4a:09:07:
                    06:4f:e5:f0:6a:45:e2:fe:78:fc:03:77:b7:21:96:
                    15:ab:0d:f7:6c:ff:83:f8:52:30:b7:0b:59:d1:5e:
                    23:15:53:95:07:46:b8:86:92:fa:9b:6c:aa:96:05:
                    eb:41:53:ec:6e:71:2c:cc:a6:90:d6:77:93:7d:3f:
                    09:98:4b:13:5e:49:39:6b:3e:f3:56:12:62:41:8d:
                    09:d2:6a:30:58:0e:ca:ed:d6:88:0b:2f:7e:8a:8f:
                    6d:b7:82:81:1b:e1:b6:89:0d:70:0a:59:e7:08:30:
                    b7:b7:75:57:53:ee:42:f8:fc:34:7e:f6:92:8c:68:
                    21:68:5e:82:b2:30:73:2e:47:28:4c:57:3b:c7:61:
                    cc:4c:a9:d2:32:13:69:0d:7e:42:0c:7c:7e:6f:86:
                    3c:dc:9f:e1:10:a6:a9:7f:54:ab:7f:31:05:ac:75:
                    34:75:f7:70:44:04:5d:d6:2e:03:e0:39:bc:12:76:
                    c9:de:28:7d:26:a1:ee:66:a1:99:24:2f:8c:1e:6c:
                    62:46:0d:37:0c:45:5f:2c:66:5f:ef:10:bd:f0:f2:
                    b3:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BC:E4:1F:FA:B8:5C:BA:52:1E:E5:2D:97:02:01:3E:8E:A1:25:69:73
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/803514f9-05ca-4865-b58e-7e1188184f19/76bc3ebf-a0a2-3bc0-827a-3d75acbeb104.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/803514f9-05ca-4865-b58e-7e1188184f19/803514f9-05ca-4865-b58e-7e1188184f19.crl

            X509v3 Authority Key Identifier:
                keyid:8A:AB:1A:FF:A2:37:47:C3:08:C6:65:DB:56:61:CF:A3:04:6B:7F:A6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/803514f9-05ca-4865-b58e-7e1188184f19.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  162.33.0.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a7:b1:3c:14:68:cb:40:81:0a:0d:9f:c5:70:2e:cb:3e:dc:85:
         cb:ef:35:ed:4a:3b:22:05:b9:80:09:07:e7:3f:04:b6:bb:64:
         d6:3e:9f:e1:5f:e2:e6:48:01:31:ba:ad:94:e7:9b:0e:57:82:
         59:29:43:82:5c:d8:c2:57:af:0b:aa:11:23:fe:cb:39:5a:45:
         df:d6:b7:19:59:ac:36:90:fa:ce:a0:79:7f:0d:91:bf:8e:8f:
         10:26:d0:30:4d:ba:2d:40:4a:45:24:69:08:a6:3e:85:d4:ac:
         ee:9a:e8:67:02:90:10:29:00:00:2f:01:af:2b:a7:51:6b:59:
         e6:ba:f0:aa:37:28:08:28:7b:c0:27:94:8b:16:de:92:c0:33:
         ba:99:e3:9c:1c:29:4a:19:43:67:80:3f:b9:83:90:ab:d9:62:
         0e:2b:e7:ea:4a:a5:57:9e:d1:38:4c:3b:9a:95:42:6c:51:aa:
         b9:c4:dc:dc:01:c3:45:1d:41:a3:4e:67:36:af:24:f6:52:6c:
         9d:3b:b3:21:e9:53:65:67:85:3f:67:bf:ef:15:10:bb:bd:3e:
         d2:29:57:ce:f3:0b:f7:65:db:46:95:47:de:c1:7d:ab:a5:ff:
         4b:dd:46:2e:c0:c0:05:4e:5d:f4:44:80:7f:fa:80:06:dc:41:
         60:05:28:42
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 26 03:45:55 2026 by rpki-client