Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f29a16-e7b1-40c8-87bc-34e2c5624862/1475c902-fb3c-38ce-9f2d-f449a3246ccf.roa
File:                     1475c902-fb3c-38ce-9f2d-f449a3246ccf.roa (raw, json)
Hash identifier:          V/CHh19dIkceG7iQyhChocShx60yPTJu05OZqPBZQV0=
Subject key identifier:   E5:70:F2:19:18:45:8A:EC:E2:5B:7B:3F:52:6C:2D:E2:7F:D8:B4:E4
Certificate issuer:       /CN=d9f29a16-e7b1-40c8-87bc-34e2c5624862
Certificate serial:       010D0C9F43285849E0BF8C62BA5F55987F3D4200
Authority key identifier: DB:FA:83:FE:6D:96:CD:CC:6C:DE:3A:15:B4:20:98:9D:63:D7:B6:33
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f29a16-e7b1-40c8-87bc-34e2c5624862.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f29a16-e7b1-40c8-87bc-34e2c5624862/1475c902-fb3c-38ce-9f2d-f449a3246ccf.roa
Signing time:             Sat 17 May 2025 01:00:47 +0000
ROA not before:           Sat 17 May 2025 01:00:47 +0000
ROA not after:            Fri 15 Aug 2025 01:00:47 +0000
asID:                     19527
IP address blocks:        162.33.230.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f29a16-e7b1-40c8-87bc-34e2c5624862/d9f29a16-e7b1-40c8-87bc-34e2c5624862.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f29a16-e7b1-40c8-87bc-34e2c5624862/d9f29a16-e7b1-40c8-87bc-34e2c5624862.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f29a16-e7b1-40c8-87bc-34e2c5624862.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 03 Jul 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:e0:bf:8c:62:ba:5f:55:98:7f:3d:42:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d9f29a16-e7b1-40c8-87bc-34e2c5624862
        Validity
            Not Before: May 17 01:00:47 2025 GMT
            Not After : Aug 15 01:00:47 2025 GMT
        Subject: CN=cf68cc4b-f8b2-48b5-a367-ce65e2036d2b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8b:98:ea:7f:7c:a7:68:16:97:63:e0:94:77:1e:
                    de:ef:09:bd:14:01:de:b6:52:a6:86:4f:95:61:43:
                    93:e5:e8:01:77:24:99:d8:49:2b:47:7c:d0:57:69:
                    53:8b:41:32:2e:c2:24:f5:6e:35:e6:0f:7f:d1:18:
                    1d:47:49:81:9c:05:d1:c0:3e:9d:2d:09:50:bd:a4:
                    a7:ec:b0:c7:80:6b:b4:af:bc:20:09:fa:3c:6a:77:
                    75:3e:d8:10:73:66:9a:00:cd:22:7a:4e:5f:b0:5a:
                    a4:fa:9c:15:cb:f0:fd:b8:c5:17:75:82:2e:09:0c:
                    12:71:3d:28:a9:e5:6b:31:de:74:a5:12:bc:71:95:
                    59:0b:48:bc:6f:25:e6:3f:65:25:10:be:ea:4d:a2:
                    23:5d:13:28:04:66:9d:a1:91:5c:9d:fb:71:cf:21:
                    d4:28:bd:c1:f6:69:dc:56:c0:d0:ea:19:14:6f:5d:
                    34:7e:69:2b:54:02:be:3c:f6:d0:4b:49:db:c4:aa:
                    07:ee:49:8e:cf:85:af:c6:21:fa:4f:98:3e:b8:36:
                    b8:84:4d:39:37:82:3e:e5:dc:d0:ec:4f:f9:dc:40:
                    e1:2f:b3:28:74:78:a5:f7:f8:66:25:33:eb:9b:30:
                    17:be:13:61:9b:a2:cb:d7:61:86:f4:8a:f0:23:06:
                    0d:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E5:70:F2:19:18:45:8A:EC:E2:5B:7B:3F:52:6C:2D:E2:7F:D8:B4:E4
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f29a16-e7b1-40c8-87bc-34e2c5624862/1475c902-fb3c-38ce-9f2d-f449a3246ccf.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f29a16-e7b1-40c8-87bc-34e2c5624862/d9f29a16-e7b1-40c8-87bc-34e2c5624862.crl

            X509v3 Authority Key Identifier:
                keyid:DB:FA:83:FE:6D:96:CD:CC:6C:DE:3A:15:B4:20:98:9D:63:D7:B6:33

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f29a16-e7b1-40c8-87bc-34e2c5624862.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  162.33.230.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4c:7f:3e:82:f4:8f:77:5f:fe:f2:bf:c8:12:bc:e3:59:b7:21:
         da:bc:b9:d1:23:2e:37:13:5d:f4:07:05:b1:d1:73:38:d5:8c:
         87:60:e0:28:af:6d:5b:b4:d7:1d:be:89:3e:91:bc:af:fc:b1:
         60:b0:ca:fc:df:83:85:72:9a:fc:13:1f:f2:4b:9d:55:d9:9c:
         37:26:44:2c:6c:ec:73:7d:2d:e9:3d:72:d3:a9:84:ca:3b:31:
         10:d5:0a:46:26:0a:de:91:c5:d8:0e:67:4f:6e:f2:b9:68:e0:
         77:d3:95:8e:54:c6:5e:2f:3f:27:5a:6e:d0:4d:56:98:e1:96:
         cf:6e:93:85:b0:cb:f9:30:31:e5:d6:fe:d7:3f:be:f0:42:5a:
         38:95:8e:30:c2:f4:b0:66:cf:7b:29:c2:de:22:bb:40:1b:8f:
         82:ba:41:c7:5c:5b:3d:cd:e5:ae:68:ac:01:43:66:55:7d:91:
         60:5f:61:a5:34:00:99:b2:13:bb:8a:d3:84:55:e2:c0:b4:0c:
         9e:8c:a3:c0:78:bb:ed:60:62:74:70:25:a1:87:50:11:97:27:
         4d:5a:b9:22:da:30:58:e3:f7:65:70:a8:13:2a:59:0c:77:a6:
         50:91:24:4b:2e:08:e5:58:84:d7:64:8a:a7:e8:06:fd:c3:ef:
         78:b0:18:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 30 16:12:51 2025 by rpki-client