Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/e8253a5c-5822-44df-8846-56b6c0450bbe/9d20ee29-516f-3930-b849-ad0ee8b7e392.roa
File:                     9d20ee29-516f-3930-b849-ad0ee8b7e392.roa (raw, json)
Hash identifier:          oODhuT/lB6XEZxCNektkjWCvQiksNC/ED53ltVgIhWg=
Subject key identifier:   22:7F:B0:B5:29:FA:27:41:BB:CD:AE:E9:14:85:EF:FE:ED:44:FB:6E
Certificate issuer:       /CN=e8253a5c-5822-44df-8846-56b6c0450bbe
Certificate serial:       010D0C9F4328584A90A0BAE24C4FDE59B5612F80
Authority key identifier: 8C:04:51:41:EF:65:44:0D:8D:BF:17:38:32:1A:7E:73:4A:4D:EA:0A
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/e8253a5c-5822-44df-8846-56b6c0450bbe.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/e8253a5c-5822-44df-8846-56b6c0450bbe/9d20ee29-516f-3930-b849-ad0ee8b7e392.roa
Signing time:             Sat 19 Jul 2025 01:00:49 +0000
ROA not before:           Sat 19 Jul 2025 01:00:49 +0000
ROA not after:            Fri 17 Oct 2025 01:00:49 +0000
asID:                     33362
IP address blocks:        158.222.94.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/e8253a5c-5822-44df-8846-56b6c0450bbe/e8253a5c-5822-44df-8846-56b6c0450bbe.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/e8253a5c-5822-44df-8846-56b6c0450bbe/e8253a5c-5822-44df-8846-56b6c0450bbe.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/e8253a5c-5822-44df-8846-56b6c0450bbe.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 25 Aug 2025 23:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:90:a0:ba:e2:4c:4f:de:59:b5:61:2f:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e8253a5c-5822-44df-8846-56b6c0450bbe
        Validity
            Not Before: Jul 19 01:00:49 2025 GMT
            Not After : Oct 17 01:00:49 2025 GMT
        Subject: CN=dcbf1098-028e-41e7-b74b-eefdac76ff7c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f2:af:36:98:c3:17:70:73:31:a3:07:7b:49:46:
                    97:5f:49:bb:d4:87:87:15:52:c5:a9:ba:b8:ec:fc:
                    ed:e9:fe:86:00:86:49:80:e7:fa:b5:34:9a:60:04:
                    47:cb:a9:eb:85:b8:ee:1c:ed:b7:d9:7c:ff:52:75:
                    fc:08:95:b5:bb:8f:2a:b3:37:a2:2e:2b:8d:58:f1:
                    51:29:20:1e:c0:2f:c9:72:91:6d:a8:8c:33:8e:66:
                    de:f7:ff:29:74:ba:0e:22:dc:03:67:a2:66:0d:e2:
                    30:17:3a:2d:cb:cc:48:42:55:ff:cb:2b:ad:f4:22:
                    ac:65:95:fa:bc:db:28:c3:4e:87:2e:b3:62:5f:d3:
                    68:92:f7:6e:ca:da:83:0b:4b:13:34:36:26:d9:43:
                    1c:7e:5f:ed:1b:b8:5e:2a:dc:c6:a1:98:1d:71:35:
                    c9:ae:43:13:bd:6b:ea:5e:e7:91:0e:97:f6:29:f8:
                    fb:a4:59:03:de:53:e9:0a:68:ea:21:f0:13:84:1b:
                    ed:3b:95:b3:ae:21:71:b9:dd:a7:b0:09:81:37:28:
                    0f:74:92:93:79:29:2e:a3:f5:eb:96:13:52:82:d2:
                    1e:c6:f5:d2:ae:5f:e9:11:d6:ad:6f:c9:fb:a7:fc:
                    82:71:8c:c1:03:f6:37:7f:fc:ed:77:b9:c5:6b:aa:
                    97:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                22:7F:B0:B5:29:FA:27:41:BB:CD:AE:E9:14:85:EF:FE:ED:44:FB:6E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/e8253a5c-5822-44df-8846-56b6c0450bbe/9d20ee29-516f-3930-b849-ad0ee8b7e392.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/e8253a5c-5822-44df-8846-56b6c0450bbe/e8253a5c-5822-44df-8846-56b6c0450bbe.crl

            X509v3 Authority Key Identifier:
                keyid:8C:04:51:41:EF:65:44:0D:8D:BF:17:38:32:1A:7E:73:4A:4D:EA:0A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/e8253a5c-5822-44df-8846-56b6c0450bbe.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  158.222.94.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a3:c2:ec:3e:bd:41:01:cc:7c:ba:5a:0a:c5:5a:24:c3:f2:a0:
         a6:a5:7d:da:56:d5:84:22:66:eb:66:d4:8e:6a:f3:c7:b8:6f:
         88:5c:13:d1:2c:9a:cd:cc:d7:1c:a2:c6:c9:4b:d5:50:42:b6:
         90:07:6b:90:8f:eb:a3:d4:af:92:56:be:d5:e8:68:50:3d:29:
         29:f6:c4:e6:b6:d5:be:06:91:c8:ea:22:fa:25:17:6e:41:36:
         9a:e9:08:50:b1:b9:a7:e4:09:1f:9c:40:17:8a:12:5a:9e:ce:
         9c:1c:0b:a7:fe:72:03:fb:19:cd:df:25:4d:f7:50:f9:f0:5d:
         17:01:f2:9b:c8:1c:b0:5c:ca:87:15:c7:a7:5a:88:cf:62:9d:
         e5:78:37:73:71:ba:69:f7:6f:46:08:cf:20:8d:a9:51:ce:54:
         4c:a2:00:57:7f:bd:0e:64:5a:a5:ae:77:ce:b8:6e:99:ab:29:
         ba:57:db:88:2f:d5:96:00:eb:9d:6c:b6:8d:b9:40:22:c2:e8:
         fa:81:30:41:84:a3:23:9b:ef:75:3b:a7:b9:e3:16:85:2c:2d:
         0e:3e:96:85:59:e3:24:6c:97:f6:34:eb:b7:a2:28:4d:76:e4:
         64:fd:c3:26:d0:02:9b:80:d9:88:23:c6:d8:ca:70:bb:60:47:
         77:8d:8c:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 18:57:02 2025 by rpki-client