Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d44ce5f4-28a9-4c1f-b029-cc35b3e3950e/4f6e0cb8-2f04-3aff-b6ab-5bb2b9545c42.roa
File:                     4f6e0cb8-2f04-3aff-b6ab-5bb2b9545c42.roa (raw, json)
Hash identifier:          xpLvgIgWLipQI9FcJohef7+y7UDW5CiOh4p67XSEXb4=
Subject key identifier:   53:D8:1E:5B:0F:83:84:A7:DC:71:BA:E3:F4:31:3C:A9:80:AD:15:8A
Certificate issuer:       /CN=d44ce5f4-28a9-4c1f-b029-cc35b3e3950e
Certificate serial:       010D0C9F4328584AE1971D3905CADA1B451B1F40
Authority key identifier: D2:70:53:AA:1E:41:4B:CD:A4:FF:3C:F8:BC:B0:DC:1C:2B:B6:0C:52
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d44ce5f4-28a9-4c1f-b029-cc35b3e3950e.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d44ce5f4-28a9-4c1f-b029-cc35b3e3950e/4f6e0cb8-2f04-3aff-b6ab-5bb2b9545c42.roa
Signing time:             Sun 17 Aug 2025 01:00:32 +0000
ROA not before:           Sun 17 Aug 2025 01:00:32 +0000
ROA not after:            Sat 15 Nov 2025 02:00:32 +0000
asID:                     7311
IP address blocks:        162.33.188.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d44ce5f4-28a9-4c1f-b029-cc35b3e3950e/d44ce5f4-28a9-4c1f-b029-cc35b3e3950e.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d44ce5f4-28a9-4c1f-b029-cc35b3e3950e/d44ce5f4-28a9-4c1f-b029-cc35b3e3950e.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d44ce5f4-28a9-4c1f-b029-cc35b3e3950e.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 25 Aug 2025 22:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:e1:97:1d:39:05:ca:da:1b:45:1b:1f:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d44ce5f4-28a9-4c1f-b029-cc35b3e3950e
        Validity
            Not Before: Aug 17 01:00:32 2025 GMT
            Not After : Nov 15 02:00:32 2025 GMT
        Subject: CN=e8524dd0-e0c4-438c-a3ce-d185bdb4348a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:e2:c1:3e:ff:7c:21:73:f6:77:29:02:6c:59:
                    b8:1e:40:3d:4c:c9:d8:72:79:f2:76:34:c8:79:3b:
                    9e:7f:e6:13:bc:73:f6:0f:7d:c7:5d:87:82:8d:bc:
                    68:f2:85:d1:f7:e1:30:a1:ad:dc:50:c7:c9:e0:28:
                    2c:6a:06:cd:f3:d6:15:e3:a1:8c:28:0b:83:9c:90:
                    ff:65:c4:75:26:6c:a8:6c:7e:4f:cc:24:e5:d5:c5:
                    ee:20:f1:37:93:55:93:ac:a3:13:14:71:dd:e4:c6:
                    52:1d:4d:60:b8:65:7f:71:ed:55:43:0d:6e:a9:43:
                    a8:2e:4e:e6:7e:93:8d:85:1f:3c:eb:f9:99:2f:70:
                    25:5d:7f:5f:83:2e:fa:a0:ef:c4:50:20:09:30:68:
                    ac:4c:20:4c:46:04:8f:a4:b5:bb:ba:a8:f7:ce:34:
                    d4:1c:73:0f:83:67:a5:2d:8c:fa:c8:79:77:2f:5a:
                    f4:17:f3:4e:7b:09:42:5f:ee:3c:ba:d8:80:c4:68:
                    18:3b:13:f9:ac:4f:7e:60:38:b2:23:ad:a1:ea:80:
                    e2:92:61:56:57:bf:f6:18:83:25:c2:2f:05:ad:70:
                    a6:62:e2:fa:87:16:bd:f8:8c:36:69:ea:a9:b6:0f:
                    42:69:cf:1b:05:98:f2:d1:43:1a:43:e9:73:f9:c5:
                    9c:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                53:D8:1E:5B:0F:83:84:A7:DC:71:BA:E3:F4:31:3C:A9:80:AD:15:8A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d44ce5f4-28a9-4c1f-b029-cc35b3e3950e/4f6e0cb8-2f04-3aff-b6ab-5bb2b9545c42.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d44ce5f4-28a9-4c1f-b029-cc35b3e3950e/d44ce5f4-28a9-4c1f-b029-cc35b3e3950e.crl

            X509v3 Authority Key Identifier:
                keyid:D2:70:53:AA:1E:41:4B:CD:A4:FF:3C:F8:BC:B0:DC:1C:2B:B6:0C:52

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d44ce5f4-28a9-4c1f-b029-cc35b3e3950e.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  162.33.188.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         15:f0:74:4f:3d:33:3c:c7:49:91:3a:6f:7e:c7:f8:09:25:29:
         7b:c0:ad:29:3e:1d:0b:fd:75:51:8f:40:b1:01:45:13:ee:e0:
         f5:6e:92:47:47:68:db:b2:45:c4:6a:b5:6e:bb:8d:77:86:80:
         f2:53:20:ce:d4:f3:07:bf:fe:90:5f:4d:6c:cf:12:dd:e7:ef:
         7c:4f:28:c5:e2:ac:8b:4b:d8:93:db:0b:5f:1a:e6:86:ce:9c:
         a6:8a:62:a8:6a:42:37:2c:a4:e6:45:1b:16:6a:e0:39:22:be:
         e0:49:cd:a4:c3:f8:7b:69:22:de:cd:75:b8:43:65:f7:30:4d:
         61:e6:b3:95:f3:86:d9:20:c0:db:4e:0f:7f:72:59:7b:7a:a5:
         3e:7e:98:d9:f0:b4:57:e7:ba:b6:8d:bd:f2:66:c7:4c:c2:ed:
         e5:b6:7a:80:c8:26:20:8c:0f:fe:07:af:3f:ec:e5:fc:3b:3c:
         2b:e8:17:1d:60:27:8e:ee:63:a9:48:0c:52:fb:92:8b:f6:9c:
         df:43:a7:08:83:75:cb:b3:af:cd:57:81:09:92:91:00:04:b3:
         43:c6:f3:de:4d:0c:b7:bc:58:d6:02:1e:55:cf:e4:95:a6:9c:
         00:3b:79:de:6a:6b:7d:76:8c:3c:38:a4:25:24:6c:65:72:3a:
         d8:50:1c:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 24 01:35:32 2025 by rpki-client