Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/31671c23-3278-409b-837d-7dfe69606940/33330f62-f621-30ef-aec0-b2d8fe0dc591.roa
File:                     33330f62-f621-30ef-aec0-b2d8fe0dc591.roa (raw, json)
Hash identifier:          4dMCuyH2vMRzFe8LW+m/qKpTnu2Fw98qm4IEBcpnU5c=
Subject key identifier:   A5:0F:D2:B7:C6:00:2D:42:44:68:64:0A:64:41:F9:E4:54:10:C4:40
Certificate issuer:       /CN=31671c23-3278-409b-837d-7dfe69606940
Certificate serial:       010D0C9F4328584ACCA6574CADE858D8E6E0A500
Authority key identifier: 67:16:23:E0:67:5A:30:1F:51:52:AF:3F:47:2F:FC:27:CE:8D:3F:1A
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/31671c23-3278-409b-837d-7dfe69606940.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/31671c23-3278-409b-837d-7dfe69606940/33330f62-f621-30ef-aec0-b2d8fe0dc591.roa
Signing time:             Sat 09 Aug 2025 13:00:41 +0000
ROA not before:           Sat 09 Aug 2025 13:00:41 +0000
ROA not after:            Fri 07 Nov 2025 14:00:41 +0000
asID:                     16509
IP address blocks:        170.62.42.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/31671c23-3278-409b-837d-7dfe69606940/31671c23-3278-409b-837d-7dfe69606940.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/31671c23-3278-409b-837d-7dfe69606940/31671c23-3278-409b-837d-7dfe69606940.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/31671c23-3278-409b-837d-7dfe69606940.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 24 Aug 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:cc:a6:57:4c:ad:e8:58:d8:e6:e0:a5:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=31671c23-3278-409b-837d-7dfe69606940
        Validity
            Not Before: Aug  9 13:00:41 2025 GMT
            Not After : Nov  7 14:00:41 2025 GMT
        Subject: CN=a5ff8d80-7464-4dff-8c42-9ebbf6b0b91e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:03:cc:41:2d:e2:18:55:2d:31:8e:37:25:9d:
                    c4:1b:58:36:da:aa:b3:13:6f:a1:de:66:67:f0:48:
                    3a:06:bf:d1:0c:17:11:af:18:11:25:01:91:8c:7e:
                    4c:56:ad:05:ad:40:ef:70:5b:ba:9e:ea:20:67:ee:
                    42:a1:75:20:a2:02:ea:4b:31:9a:f1:24:a7:a2:b9:
                    4c:f1:d3:b0:d0:19:ec:35:cc:3b:10:20:a6:b9:db:
                    d8:5d:2f:03:d8:fc:76:b0:00:88:7e:54:f0:f3:ee:
                    98:8b:c2:bb:79:95:08:57:e7:df:40:d7:43:83:c9:
                    4b:46:89:00:33:7c:2e:af:43:b0:ca:02:6a:31:28:
                    e6:54:38:d4:44:f9:8d:3b:f4:81:a3:cd:42:75:29:
                    af:ae:4d:c8:93:94:07:d1:e0:d4:e6:b9:aa:0f:f7:
                    8b:f0:9b:5b:50:6e:00:fe:11:2d:6a:3e:a2:e7:0a:
                    18:31:9c:df:f2:69:e2:d3:29:0e:82:16:30:27:fd:
                    19:58:9b:a3:67:e5:95:f6:02:96:1c:0b:25:1e:64:
                    75:c4:37:91:56:e7:29:67:8a:27:59:fb:b9:99:29:
                    57:11:ab:eb:ad:04:88:6a:90:9b:e6:8f:44:b5:39:
                    b4:38:b1:c4:6d:4c:f2:81:e0:95:3f:31:54:0a:4b:
                    3b:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A5:0F:D2:B7:C6:00:2D:42:44:68:64:0A:64:41:F9:E4:54:10:C4:40
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/31671c23-3278-409b-837d-7dfe69606940/33330f62-f621-30ef-aec0-b2d8fe0dc591.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/31671c23-3278-409b-837d-7dfe69606940/31671c23-3278-409b-837d-7dfe69606940.crl

            X509v3 Authority Key Identifier:
                keyid:67:16:23:E0:67:5A:30:1F:51:52:AF:3F:47:2F:FC:27:CE:8D:3F:1A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/31671c23-3278-409b-837d-7dfe69606940.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.62.42.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3a:5d:3c:09:4a:c4:9e:0b:d4:ff:41:ee:9d:80:6b:56:fe:11:
         7e:18:6d:a8:dd:e9:10:5c:79:97:51:6f:84:99:92:04:15:c1:
         69:b6:fe:06:f0:63:c0:48:8d:e4:b5:df:12:f2:dd:68:46:55:
         c2:9c:c6:b3:00:fc:9f:f2:2b:72:d2:f9:c5:d8:28:60:f9:49:
         72:71:c4:5e:69:c9:18:eb:d5:48:19:e9:4a:4d:9e:a4:96:b2:
         f6:23:d9:19:14:b4:e7:c7:bf:54:f8:f4:b6:8a:cf:58:7d:7b:
         55:c2:4d:be:50:c9:4c:e2:59:9d:99:79:eb:b2:bb:aa:07:01:
         db:13:60:0c:9c:90:2c:b0:b2:c1:3d:e5:1d:02:dc:2a:ca:18:
         d6:f1:99:50:f3:4b:a4:02:fe:da:84:af:5f:bb:b7:3b:61:59:
         09:60:41:b4:f6:dc:a9:51:2a:70:16:2a:c3:63:87:51:76:60:
         20:95:aa:2e:d5:12:09:0c:ac:e7:8f:fa:1c:4c:9b:e1:31:09:
         7a:a5:5c:76:96:e2:0b:f9:3e:fb:df:a2:ed:83:4e:69:20:02:
         28:47:00:c7:be:1e:e1:dc:03:42:b9:73:5c:eb:2e:61:96:bd:
         1e:5b:01:49:a5:6d:eb:3e:28:0c:ac:85:5a:30:39:f5:32:ab:
         54:9b:56:b8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 09:09:50 2025 by rpki-client