Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/33d3c304-619d-4e6d-aed5-9e25165cbc73/b4650fb5-7679-338a-8f55-9496e081bd1c.roa
File:                     b4650fb5-7679-338a-8f55-9496e081bd1c.roa (raw, json)
Hash identifier:          ZbRWJPSRrN1Scky1LXXsh6p1pKPXbg384pZGTnuFvJk=
Subject key identifier:   A4:BD:1F:AD:21:24:35:7B:13:74:11:89:A7:C3:65:1C:84:99:37:D5
Certificate issuer:       /CN=33d3c304-619d-4e6d-aed5-9e25165cbc73
Certificate serial:       010D0C9F4328584A3E45B140809EE80A4F786280
Authority key identifier: 8E:4A:0D:B4:C7:E9:33:47:0B:34:BD:00:38:64:1E:4A:78:EC:E2:6A
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/33d3c304-619d-4e6d-aed5-9e25165cbc73.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/33d3c304-619d-4e6d-aed5-9e25165cbc73/b4650fb5-7679-338a-8f55-9496e081bd1c.roa
Signing time:             Thu 19 Jun 2025 13:01:02 +0000
ROA not before:           Thu 19 Jun 2025 13:01:02 +0000
ROA not after:            Wed 17 Sep 2025 13:01:02 +0000
asID:                     16509
IP address blocks:        162.212.228.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/33d3c304-619d-4e6d-aed5-9e25165cbc73/33d3c304-619d-4e6d-aed5-9e25165cbc73.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/33d3c304-619d-4e6d-aed5-9e25165cbc73/33d3c304-619d-4e6d-aed5-9e25165cbc73.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/33d3c304-619d-4e6d-aed5-9e25165cbc73.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 03 Jul 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:3e:45:b1:40:80:9e:e8:0a:4f:78:62:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=33d3c304-619d-4e6d-aed5-9e25165cbc73
        Validity
            Not Before: Jun 19 13:01:02 2025 GMT
            Not After : Sep 17 13:01:02 2025 GMT
        Subject: CN=1c724a1b-7c55-4677-97a1-680fe1244f21
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:4f:d9:a2:df:f1:db:33:76:1f:04:0d:02:29:
                    6d:cd:60:9e:aa:d2:b8:73:ba:b4:ea:da:6d:63:ad:
                    ab:5e:39:77:2d:53:66:64:78:df:43:9c:52:cb:f0:
                    d7:1f:47:83:0f:a8:7a:41:56:96:ce:d3:a3:1e:db:
                    c2:09:41:b2:0f:94:c0:ce:95:49:53:8c:2d:cd:9b:
                    2c:1d:b7:dc:e1:d2:a3:fc:ca:1f:b2:07:21:97:20:
                    2a:cf:ac:5a:4a:b7:6e:25:99:17:85:7f:68:87:fd:
                    dd:da:b8:0a:f4:7b:8a:52:b5:c4:87:5c:09:46:18:
                    bf:b5:a7:b6:69:28:c0:df:c1:3e:5a:22:4e:8a:8f:
                    0f:1d:95:01:14:07:0b:01:46:c8:6f:ea:0b:d6:e9:
                    31:90:f2:fb:df:7a:8c:70:ce:69:06:52:fc:6f:46:
                    24:07:c4:53:78:ff:d6:70:43:49:6f:4a:75:55:1e:
                    e3:9f:a7:ab:c5:a2:a0:fd:b3:98:c0:1b:bf:9e:f4:
                    a0:41:78:54:3b:08:25:e3:b2:0e:1e:6e:51:03:27:
                    d6:dd:d3:91:30:ed:39:4c:b3:74:00:bc:03:fa:b4:
                    80:61:c9:2f:8b:1e:9e:6b:be:f8:25:7e:b9:2e:00:
                    3a:49:22:bd:5a:26:2a:12:8b:b8:88:6d:9d:8a:a5:
                    8a:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A4:BD:1F:AD:21:24:35:7B:13:74:11:89:A7:C3:65:1C:84:99:37:D5
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/33d3c304-619d-4e6d-aed5-9e25165cbc73/b4650fb5-7679-338a-8f55-9496e081bd1c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/33d3c304-619d-4e6d-aed5-9e25165cbc73/33d3c304-619d-4e6d-aed5-9e25165cbc73.crl

            X509v3 Authority Key Identifier:
                keyid:8E:4A:0D:B4:C7:E9:33:47:0B:34:BD:00:38:64:1E:4A:78:EC:E2:6A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/33d3c304-619d-4e6d-aed5-9e25165cbc73.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  162.212.228.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         78:f1:f8:fa:52:e3:65:ac:3f:eb:f9:95:73:05:e9:40:02:a0:
         19:b2:ea:49:36:6c:59:cb:0c:1e:74:6c:ba:f9:f5:94:31:69:
         de:94:32:17:c5:94:94:d2:a2:2c:5b:ed:8d:1d:a1:df:3f:19:
         59:3c:33:98:69:40:90:71:d4:6a:59:52:30:2e:98:2e:7f:7b:
         af:68:32:73:67:68:cf:d3:c5:b4:ce:1b:5b:b4:e2:37:36:c7:
         27:69:3b:e5:2c:ee:68:6e:21:77:f3:0e:0c:b8:7c:f0:4a:bc:
         db:78:c7:73:f7:9c:fb:a5:70:e0:7c:c1:f2:db:20:b0:7a:49:
         ec:8b:a5:a9:55:13:7c:d0:cf:54:a9:c5:3b:8c:0f:e5:1a:22:
         5b:7e:26:cd:ca:d3:76:74:0f:41:8e:a7:c1:8b:08:a1:44:70:
         dd:45:18:51:45:82:cd:3b:17:9e:e8:c8:87:e3:8d:47:d2:57:
         43:32:48:72:27:8e:3b:ab:fb:c6:ed:40:64:78:4f:ae:25:1e:
         cb:46:17:14:b6:7c:87:f8:fe:ce:55:bb:d2:2b:2c:4d:5b:61:
         ea:8d:db:99:63:f9:f3:d4:51:04:cf:c6:79:aa:df:7f:ce:78:
         40:78:4b:b5:8b:80:18:39:1c:b8:45:4a:f9:f1:ad:e5:26:8c:
         ce:0f:22:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 2 15:15:38 2025 by rpki-client