Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/33303536-5fcf-3461-8027-74ec6935aca8.roa
File:                     33303536-5fcf-3461-8027-74ec6935aca8.roa (raw, json)
Hash identifier:          ov7oboTpqE9Q7KzuzVlOShtfXIA9MtMUQg1z4S++FS8=
Subject key identifier:   5C:70:47:8D:AD:50:BA:48:1C:6F:E5:58:29:60:41:FD:98:BC:B1:E8
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F43285849D4307EFE7E13283715BC8280
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/33303536-5fcf-3461-8027-74ec6935aca8.roa
Signing time:             Mon 12 May 2025 13:01:00 +0000
ROA not before:           Mon 12 May 2025 13:01:00 +0000
ROA not after:            Sun 10 Aug 2025 13:01:00 +0000
asID:                     33668
IP address blocks:        174.162.100.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 14 May 2025 10:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:d4:30:7e:fe:7e:13:28:37:15:bc:82:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: May 12 13:01:00 2025 GMT
            Not After : Aug 10 13:01:00 2025 GMT
        Subject: CN=33b0c789-6252-4f08-8f19-8a91139e2572
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:f5:b5:00:f5:62:6e:02:94:1d:37:46:a0:39:
                    af:e5:c0:41:4b:a5:0d:37:76:5d:79:f2:ff:36:88:
                    d3:35:29:1d:06:8f:76:0b:60:fe:ca:ee:ca:5c:1a:
                    5e:82:d6:97:8f:0a:07:b2:ff:2c:c5:f2:39:a9:ea:
                    34:57:cf:db:ce:4b:3f:37:c9:0b:d4:25:d4:c4:3c:
                    20:6b:ca:21:11:36:2d:f4:5c:b0:a7:19:4b:88:37:
                    a4:70:66:1e:9d:10:43:a6:3a:80:29:89:19:fe:63:
                    5d:5c:03:2d:d1:56:51:a2:77:4b:6a:10:96:3e:41:
                    59:2c:c2:2e:a9:8d:9f:33:dd:be:ec:c9:dd:af:66:
                    a0:b6:e9:21:fa:81:5e:bb:f7:6e:ad:4f:d5:22:75:
                    44:18:ed:8b:4e:a8:95:66:26:48:16:13:34:27:06:
                    01:b9:c3:92:b2:bd:bc:10:1b:4c:f7:05:3a:da:9f:
                    a6:c4:5d:c0:32:d6:3b:42:0a:22:38:07:41:e7:d9:
                    2e:5c:c9:ed:d4:74:7c:4a:c6:60:45:7f:63:be:79:
                    c2:84:48:44:d2:fc:15:d5:e3:fb:7e:f8:60:5d:fc:
                    74:64:7c:dc:e5:44:d4:09:05:83:3d:5c:45:2b:31:
                    8f:21:a4:7f:f6:7b:9f:32:de:53:9d:02:15:dd:b5:
                    88:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5C:70:47:8D:AD:50:BA:48:1C:6F:E5:58:29:60:41:FD:98:BC:B1:E8
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/33303536-5fcf-3461-8027-74ec6935aca8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  174.162.100.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         ac:8b:c2:9d:c9:5e:b9:6d:94:51:d1:69:b0:d3:54:78:56:2b:
         bb:8d:8e:24:9e:03:fb:ed:79:2a:3e:99:a3:4d:69:e1:dc:9a:
         97:bb:85:47:ec:ad:88:00:b1:89:7e:a9:81:ef:90:ea:b5:81:
         ee:6a:83:e2:c9:97:e6:fd:f2:8c:d8:5d:27:b0:20:e6:87:77:
         9c:79:ad:3d:b3:91:12:e7:17:04:3e:5c:a8:f9:06:f5:4c:63:
         43:f1:a2:e2:cb:e7:8c:33:22:7d:17:bf:57:e0:f3:23:22:71:
         61:5e:7a:94:9d:64:83:b3:1c:6a:54:3a:cd:6b:82:cd:c8:db:
         e6:e2:70:40:3c:21:b4:e2:b9:6f:39:2b:74:9a:c2:1a:2d:3b:
         b6:57:3a:51:e2:28:51:24:45:8e:b6:c7:4e:43:63:52:ab:5c:
         5e:21:2b:30:b9:ab:16:33:99:d6:89:34:3c:4a:8d:fe:6e:61:
         b1:60:60:bd:59:1c:04:4b:0d:59:78:f8:83:db:1a:18:c1:a1:
         ae:d2:5a:26:36:03:b5:f2:37:e2:dc:c4:8f:76:fe:5a:de:cc:
         f1:a4:7e:d4:78:4e:8f:ab:d7:ee:32:55:9e:67:ed:8c:fa:13:
         a6:80:94:b4:f8:82:18:db:3a:ea:68:92:13:1b:8c:c4:83:f8:
         a0:1f:cb:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 13 04:22:57 2025 by rpki-client