Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119/33977f8c-8641-3e7f-ae17-8b45a94fb4fa.roa
File:                     33977f8c-8641-3e7f-ae17-8b45a94fb4fa.roa (raw, json)
Hash identifier:          vT3injDUxudBOFddWKBn/Q+4NtJH/2mMx/YEXxXOmsA=
Subject key identifier:   21:84:F2:50:E7:7E:68:EA:BD:11:1A:BA:D9:F6:A7:5E:63:1E:76:1C
Certificate issuer:       /CN=93458135-7183-45e8-9dbc-dd82d2ffa119
Certificate serial:       010D0C9F4328584AC710F24B4FDDACDE7C048880
Authority key identifier: EA:B4:18:7E:09:07:4B:16:FC:10:B7:7B:BE:F4:BC:B2:04:21:DE:E7
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119/33977f8c-8641-3e7f-ae17-8b45a94fb4fa.roa
Signing time:             Thu 07 Aug 2025 13:00:40 +0000
ROA not before:           Thu 07 Aug 2025 13:00:40 +0000
ROA not after:            Wed 05 Nov 2025 14:00:40 +0000
asID:                     18798
IP address blocks:        216.222.88.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119/93458135-7183-45e8-9dbc-dd82d2ffa119.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119/93458135-7183-45e8-9dbc-dd82d2ffa119.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 24 Aug 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:c7:10:f2:4b:4f:dd:ac:de:7c:04:88:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=93458135-7183-45e8-9dbc-dd82d2ffa119
        Validity
            Not Before: Aug  7 13:00:40 2025 GMT
            Not After : Nov  5 14:00:40 2025 GMT
        Subject: CN=acd33017-0104-43a1-b488-d6f1291bb32e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:d9:3b:93:ee:bd:cd:28:a5:29:f0:37:84:ba:
                    42:8e:2b:de:1f:1d:e4:d3:8a:e4:b1:5c:a1:42:c4:
                    c0:b9:01:2b:94:39:b9:af:fb:a6:ef:f6:63:a4:59:
                    2b:d2:2b:80:46:35:e4:1b:ff:13:85:bf:bf:84:d8:
                    0b:a8:6b:94:36:29:14:1f:50:69:47:b8:56:ea:54:
                    67:bc:2b:41:bb:59:6a:b9:de:82:78:2c:09:26:cb:
                    5f:c6:cc:b6:5b:36:e0:70:a1:8e:36:dc:5c:ce:b5:
                    cf:83:69:65:23:0c:41:66:42:ef:fa:ae:cf:69:e4:
                    a7:c4:31:31:b0:2a:7b:f6:a2:ee:5f:f8:0e:76:9e:
                    5b:81:2a:27:f8:2f:f8:e0:77:3c:74:e6:f0:8c:90:
                    20:dd:74:31:09:55:74:a9:e5:40:eb:3e:ab:61:a2:
                    62:a1:6f:d5:cd:89:ca:c6:89:06:50:97:a5:27:75:
                    b6:b1:1f:61:70:cf:04:d1:9a:c7:c0:e8:18:af:84:
                    32:c2:e4:97:e4:7e:3d:51:fd:f3:ee:ca:9a:e0:36:
                    8e:d7:64:a2:15:6d:f1:c4:43:01:ca:25:80:67:80:
                    6e:13:df:9b:e9:ac:cd:fe:36:93:e7:44:e0:d7:83:
                    1c:76:43:0c:10:b5:bf:af:ea:28:9b:41:28:70:07:
                    5b:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                21:84:F2:50:E7:7E:68:EA:BD:11:1A:BA:D9:F6:A7:5E:63:1E:76:1C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119/33977f8c-8641-3e7f-ae17-8b45a94fb4fa.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119/93458135-7183-45e8-9dbc-dd82d2ffa119.crl

            X509v3 Authority Key Identifier:
                keyid:EA:B4:18:7E:09:07:4B:16:FC:10:B7:7B:BE:F4:BC:B2:04:21:DE:E7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  216.222.88.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1d:38:a2:bf:df:4e:da:92:d8:de:d0:6b:36:71:e6:e8:0b:9b:
         ac:65:65:fe:27:ed:7c:ec:67:e1:0c:76:74:c4:7a:6e:ab:96:
         71:fa:24:b0:c7:51:fe:c4:45:cb:19:76:05:eb:39:c2:ec:fd:
         e9:fa:7b:22:15:63:b0:98:f6:05:6c:8c:4d:22:94:86:25:54:
         d4:bd:4d:02:bd:3f:6b:6e:37:6f:cc:86:20:6e:cc:41:d6:89:
         cd:3c:b1:c9:89:32:e2:29:20:5e:65:5d:6f:b9:26:7e:19:68:
         41:52:56:fb:e8:8b:e3:85:c1:a3:38:cd:85:3b:c2:fe:60:9b:
         3d:f6:6a:2a:11:76:66:a3:42:2a:b1:92:90:81:7e:b2:e5:cb:
         f9:d2:fe:9c:69:10:34:86:86:c8:fc:b5:1b:d5:cc:8c:6a:c6:
         6e:61:b5:43:dd:4c:a1:0e:0e:1f:69:4a:f9:d2:26:c1:b8:4b:
         fd:47:01:9d:de:76:aa:71:97:d6:9b:9e:a0:a4:8b:94:f1:3d:
         d2:76:25:11:e8:18:f1:b1:80:ac:12:c3:1d:43:de:2a:b5:1f:
         71:93:91:bd:a0:85:d5:3f:fe:d6:90:7f:1f:bd:0b:b3:1f:3c:
         37:f9:a6:55:0e:1b:3b:7f:50:34:db:e8:5a:f7:4f:dd:0f:80:
         38:12:36:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 14:11:27 2025 by rpki-client