Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/33c0e7b0-87c8-3bbe-9b8a-4d711348f583.roa
File:                     33c0e7b0-87c8-3bbe-9b8a-4d711348f583.roa (raw, json)
Hash identifier:          E4gYBp3nuzIUp95z6CWfnVco0jdcPPdbYCfTqFAmn5E=
Subject key identifier:   88:E7:3E:33:26:57:87:4F:83:22:2B:2A:EE:63:E2:F3:C1:A3:5C:D4
Certificate issuer:       /CN=18800324-5150-4981-a144-bdb80e6bcb7c
Certificate serial:       010D0C9F4328584AC5AB8B74905B0B0CC4E76000
Authority key identifier: 11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/33c0e7b0-87c8-3bbe-9b8a-4d711348f583.roa
Signing time:             Thu 07 Aug 2025 01:00:33 +0000
ROA not before:           Thu 07 Aug 2025 01:00:33 +0000
ROA not after:            Wed 05 Nov 2025 02:00:33 +0000
asID:                     48031
IP address blocks:        192.177.147.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 24 Aug 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:c5:ab:8b:74:90:5b:0b:0c:c4:e7:60:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=18800324-5150-4981-a144-bdb80e6bcb7c
        Validity
            Not Before: Aug  7 01:00:33 2025 GMT
            Not After : Nov  5 02:00:33 2025 GMT
        Subject: CN=6b80b827-87b0-44e7-82d6-97e6563f632f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:c4:2e:1b:48:bc:94:cd:64:11:f3:81:17:87:
                    44:c0:91:09:dc:31:c6:49:5a:a5:e9:ce:dc:6f:98:
                    57:07:d5:40:ab:13:9c:c7:d6:6a:60:7c:fb:0f:36:
                    97:0a:dd:c8:22:72:83:18:ca:0d:10:a9:b0:b6:5e:
                    c4:8d:ff:b0:a1:36:5c:0a:07:e7:66:71:0f:40:92:
                    8f:81:89:54:ab:a8:98:ae:53:6b:7d:6e:87:c2:87:
                    52:75:3b:c4:df:98:d0:e6:45:c2:4d:b3:cd:a3:e2:
                    8b:80:dd:82:3e:86:0d:93:4a:b9:6e:ed:75:fa:57:
                    cc:d7:33:11:ac:08:f6:d5:fd:bf:36:bd:61:f0:89:
                    bf:02:c9:0a:e7:48:f1:24:a2:26:be:96:24:8b:01:
                    ad:18:8e:50:14:e9:a6:74:7c:f1:74:78:4a:ad:8a:
                    bc:14:13:53:0a:2c:e8:0e:74:47:f4:fa:2e:77:d4:
                    f5:f1:fa:62:17:46:f9:1e:24:a9:1f:74:0a:cf:f3:
                    ad:ec:b7:56:ee:b6:51:d6:f7:cd:f1:ce:e7:18:0a:
                    db:58:fe:96:fb:36:f8:a7:d7:26:53:62:64:53:b1:
                    fe:33:b9:c8:b8:d0:1a:a7:54:87:51:3f:5e:05:72:
                    bc:52:fa:14:9d:22:66:24:15:9a:c6:6a:f1:21:dd:
                    cb:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                88:E7:3E:33:26:57:87:4F:83:22:2B:2A:EE:63:E2:F3:C1:A3:5C:D4
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/33c0e7b0-87c8-3bbe-9b8a-4d711348f583.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl

            X509v3 Authority Key Identifier:
                keyid:11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.177.147.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2c:bb:e9:76:4d:32:a4:70:59:94:21:fe:f6:d0:26:4e:ab:17:
         bf:8a:7a:bd:1e:b4:5e:44:47:76:ae:73:ac:c1:6c:a9:ba:b8:
         f3:90:14:71:fd:d5:95:7c:52:9c:ce:12:7f:be:8e:42:2e:e1:
         15:4b:38:9b:17:45:82:c4:19:7d:ac:fa:3a:d7:d4:9b:3d:13:
         20:3b:c3:3a:fa:19:04:01:a7:c3:6b:d9:90:73:70:c7:a5:e6:
         c4:aa:94:e4:1b:e4:83:e8:1b:5a:7b:8d:d7:ee:0c:cb:84:40:
         71:a9:0e:4e:dd:a8:c9:65:15:7e:39:27:78:09:db:59:ae:a4:
         17:10:b2:ea:01:8a:f9:43:a5:92:53:49:7f:c1:2c:66:d4:f3:
         c7:73:df:54:51:99:30:88:a3:8f:e0:ed:bd:33:d2:8b:b9:56:
         aa:51:2a:46:d8:5c:e5:ac:67:c8:0e:7d:cf:98:86:cb:b9:d7:
         73:4c:cb:6b:15:e9:ef:ec:41:b0:ce:da:3f:47:34:77:45:b7:
         d0:9f:a2:77:31:5e:6c:9a:9b:b2:23:96:03:7d:f0:af:64:03:
         58:3d:68:56:d5:b5:3d:db:b1:88:55:06:4b:f8:93:48:bc:68:
         6f:57:28:c0:d3:fd:57:79:82:4c:ac:bc:6c:c9:0c:54:67:bd:
         d3:23:26:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 13:51:34 2025 by rpki-client