Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/927d18e8-718f-412b-a0b2-a97decff6f3f/0f7845c1-cb4b-3235-9801-59e089858239.roa
File:                     0f7845c1-cb4b-3235-9801-59e089858239.roa (raw, json)
Hash identifier:          n1HS8QV1HGsDwFVN3bfPrwfTKXKKBYbpPGN2912n5+s=
Subject key identifier:   E4:C4:76:94:B5:FF:AD:55:6F:0D:DC:40:E3:02:BB:E6:0B:9C:0E:A9
Certificate issuer:       /CN=927d18e8-718f-412b-a0b2-a97decff6f3f
Certificate serial:       010D0C9F43285849ABB4ADB7131EB63B8EAE6380
Authority key identifier: 65:DD:C3:69:D5:D8:1B:0F:95:D5:AB:AD:7B:F5:30:38:B1:C0:60:04
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/927d18e8-718f-412b-a0b2-a97decff6f3f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/927d18e8-718f-412b-a0b2-a97decff6f3f/0f7845c1-cb4b-3235-9801-59e089858239.roa
Signing time:             Mon 28 Apr 2025 01:00:48 +0000
ROA not before:           Mon 28 Apr 2025 01:00:48 +0000
ROA not after:            Sun 27 Jul 2025 01:00:48 +0000
asID:                     14618
IP address blocks:        162.33.163.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/927d18e8-718f-412b-a0b2-a97decff6f3f/927d18e8-718f-412b-a0b2-a97decff6f3f.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/927d18e8-718f-412b-a0b2-a97decff6f3f/927d18e8-718f-412b-a0b2-a97decff6f3f.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/927d18e8-718f-412b-a0b2-a97decff6f3f.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 12 May 2025 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:ab:b4:ad:b7:13:1e:b6:3b:8e:ae:63:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=927d18e8-718f-412b-a0b2-a97decff6f3f
        Validity
            Not Before: Apr 28 01:00:48 2025 GMT
            Not After : Jul 27 01:00:48 2025 GMT
        Subject: CN=7c73cc05-73b0-43ee-9d18-eeab694014d5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:cb:65:05:93:9b:2e:7f:cb:4c:b9:af:4f:41:
                    89:8b:fa:8a:c3:40:22:98:09:fb:7e:f3:bd:cf:49:
                    e2:7a:4a:b1:67:de:7b:20:dc:c8:aa:cc:de:bf:c4:
                    fe:b9:c9:88:b1:f1:82:e5:33:2f:d0:fb:90:b0:ea:
                    24:c3:52:32:5e:7e:8e:c7:d4:54:36:71:56:64:0d:
                    46:f9:a3:1d:21:bf:03:be:16:a0:d7:c7:8d:85:87:
                    17:96:e4:59:d3:b8:1f:5c:a5:9d:0b:47:77:cc:d4:
                    79:77:b4:61:1b:f7:d2:3b:65:8e:24:31:f4:3f:ce:
                    8d:9a:99:88:b6:af:0c:6b:d9:21:c6:d6:fc:5e:cc:
                    cb:88:f7:9a:6d:d0:a3:66:ca:75:ce:b8:36:24:7f:
                    79:a2:aa:66:01:4f:56:bd:bd:14:93:b3:27:11:1e:
                    6c:5b:d1:73:8a:9d:fa:0d:3a:4e:f0:b6:b5:ca:b6:
                    11:59:82:f4:24:31:c6:19:a8:48:1d:e7:f9:ab:c3:
                    ab:c3:76:88:f7:46:50:55:e1:9e:d6:0d:fd:16:41:
                    c5:89:67:d0:07:96:29:4c:16:53:75:5c:54:62:9c:
                    da:ac:ed:93:73:2f:a8:df:36:0d:07:a7:49:ec:c2:
                    29:be:90:45:6f:2b:0b:e4:6f:3a:9f:86:95:a8:b2:
                    77:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E4:C4:76:94:B5:FF:AD:55:6F:0D:DC:40:E3:02:BB:E6:0B:9C:0E:A9
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/927d18e8-718f-412b-a0b2-a97decff6f3f/0f7845c1-cb4b-3235-9801-59e089858239.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/927d18e8-718f-412b-a0b2-a97decff6f3f/927d18e8-718f-412b-a0b2-a97decff6f3f.crl

            X509v3 Authority Key Identifier:
                keyid:65:DD:C3:69:D5:D8:1B:0F:95:D5:AB:AD:7B:F5:30:38:B1:C0:60:04

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/927d18e8-718f-412b-a0b2-a97decff6f3f.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  162.33.163.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0e:d7:ee:2c:4f:70:17:70:a2:47:02:d2:a9:32:40:66:c5:00:
         f0:3b:87:49:af:5c:8a:2b:9f:8d:c7:ce:e4:3b:dd:ab:7a:41:
         73:0b:6f:5d:87:c1:39:f7:05:08:c3:13:fb:6e:1e:ce:1f:1a:
         99:2a:96:0c:14:a9:1c:d8:c9:c4:01:c7:99:e6:60:45:7b:2e:
         93:34:61:1d:55:e4:fb:af:bd:4d:0d:e0:4d:77:5b:94:40:83:
         3a:d5:f0:c2:de:93:c5:6a:3c:59:53:c7:bc:7a:4e:78:69:35:
         51:9e:9b:bb:72:38:d3:2c:ec:f8:58:dc:49:0c:d5:44:e1:6c:
         67:87:41:b4:37:86:d3:90:40:17:3d:1c:ec:bb:81:a2:48:d8:
         6f:ef:76:e1:e9:39:ed:9e:1e:95:1d:e9:f9:e1:d7:dd:74:e2:
         71:87:4f:2c:cc:a1:f6:1b:0d:fc:8c:91:69:4e:ce:51:cb:fb:
         a5:07:ce:a4:0e:65:6f:78:e6:bd:45:8c:50:9e:a0:71:72:d2:
         c5:dd:f0:a9:c3:3b:39:d8:cf:39:a8:ab:88:56:73:63:54:21:
         5c:a9:a1:15:d6:bc:ef:18:2e:a8:0f:d2:50:79:14:a9:8f:53:
         94:e3:b3:ee:07:1b:2a:ab:79:d8:85:16:42:dd:0d:07:2d:f4:
         37:e5:07:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 11 04:23:00 2025 by rpki-client