Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/927d18e8-718f-412b-a0b2-a97decff6f3f/28ff7c38-7edb-3215-bd95-9de310b80ea2.roa
File:                     28ff7c38-7edb-3215-bd95-9de310b80ea2.roa (raw, json)
Hash identifier:          OZK9Z2fqIWw45X0KV609tOp+gO/MyzoRy5gJeAsFRWI=
Subject key identifier:   18:A7:09:BD:3F:A3:F3:19:80:B8:D6:DE:72:8C:C4:E9:FD:43:FF:83
Certificate issuer:       /CN=927d18e8-718f-412b-a0b2-a97decff6f3f
Certificate serial:       010D0C9F4328584AD2AB1E552D23C8CCE7850300
Authority key identifier: 65:DD:C3:69:D5:D8:1B:0F:95:D5:AB:AD:7B:F5:30:38:B1:C0:60:04
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/927d18e8-718f-412b-a0b2-a97decff6f3f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/927d18e8-718f-412b-a0b2-a97decff6f3f/28ff7c38-7edb-3215-bd95-9de310b80ea2.roa
Signing time:             Mon 11 Aug 2025 16:45:18 +0000
ROA not before:           Mon 11 Aug 2025 16:45:18 +0000
ROA not after:            Sun 09 Nov 2025 17:45:18 +0000
asID:                     10753
IP address blocks:        162.33.165.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/927d18e8-718f-412b-a0b2-a97decff6f3f/927d18e8-718f-412b-a0b2-a97decff6f3f.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/927d18e8-718f-412b-a0b2-a97decff6f3f/927d18e8-718f-412b-a0b2-a97decff6f3f.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/927d18e8-718f-412b-a0b2-a97decff6f3f.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 24 Aug 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:d2:ab:1e:55:2d:23:c8:cc:e7:85:03:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=927d18e8-718f-412b-a0b2-a97decff6f3f
        Validity
            Not Before: Aug 11 16:45:18 2025 GMT
            Not After : Nov  9 17:45:18 2025 GMT
        Subject: CN=ab918b82-382a-4ec7-afe0-f0c4c530d96f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:3b:c9:73:b1:4f:9a:b3:56:f9:a7:60:95:80:
                    53:75:e9:2c:fa:42:a2:bb:41:be:90:5b:51:41:48:
                    46:d8:65:33:18:6b:30:49:75:97:f6:7e:b6:eb:53:
                    28:3f:62:a3:be:0a:dd:73:c8:60:a7:c2:e1:36:33:
                    a2:86:e6:33:0f:c5:5e:6a:2e:89:a6:03:9e:4d:fb:
                    c1:8d:6e:af:ab:55:5e:06:f9:c8:f6:bb:21:fa:df:
                    d4:fb:b9:4b:be:b1:f7:1d:2b:7c:18:0d:b4:e1:5e:
                    02:2a:ba:f9:91:21:97:20:39:21:af:d7:48:35:77:
                    aa:a9:70:e9:28:2c:a7:13:b1:71:bd:15:92:0e:34:
                    3a:53:01:92:8e:6d:cd:56:b9:3f:7f:0b:f0:45:03:
                    24:0c:08:6e:e8:ac:2f:a4:3b:db:a4:80:68:11:9d:
                    56:b3:80:ac:42:dc:44:ee:55:89:43:42:5b:f4:18:
                    17:9b:be:ab:72:ec:ce:bc:a3:ba:30:06:80:fb:63:
                    11:79:3c:ae:e8:86:34:71:cf:71:cc:f2:5f:22:d7:
                    d9:68:df:5b:35:3a:93:cd:3b:c2:71:82:99:45:2f:
                    5b:88:64:21:30:ee:2d:21:74:7e:e7:6b:c5:3e:1a:
                    5f:6d:d4:54:f7:fb:15:82:17:cd:50:8b:e3:ee:e8:
                    be:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                18:A7:09:BD:3F:A3:F3:19:80:B8:D6:DE:72:8C:C4:E9:FD:43:FF:83
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/927d18e8-718f-412b-a0b2-a97decff6f3f/28ff7c38-7edb-3215-bd95-9de310b80ea2.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/927d18e8-718f-412b-a0b2-a97decff6f3f/927d18e8-718f-412b-a0b2-a97decff6f3f.crl

            X509v3 Authority Key Identifier:
                keyid:65:DD:C3:69:D5:D8:1B:0F:95:D5:AB:AD:7B:F5:30:38:B1:C0:60:04

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/927d18e8-718f-412b-a0b2-a97decff6f3f.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  162.33.165.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0d:4f:4a:06:0e:9b:6c:86:db:3a:6c:1d:72:23:69:fe:ee:c5:
         e0:25:6d:a5:6f:f8:53:39:ac:b8:ce:5a:5d:65:44:4e:90:54:
         c6:82:a9:41:71:40:ec:4d:da:7e:79:c0:ad:f9:bc:e0:0e:17:
         10:9e:ee:09:8f:6f:35:8c:10:54:9f:30:a9:c2:a5:ef:7f:de:
         f5:f3:ab:3f:30:43:fe:16:34:22:a4:3e:00:85:5d:be:5f:d5:
         b5:46:f6:2f:9f:dd:0c:c4:83:4f:20:eb:1c:ee:d2:8d:9b:33:
         18:f6:73:de:31:9d:75:81:2d:fb:b6:e8:35:91:c8:f4:bc:ce:
         1d:6f:af:90:0f:31:0e:b9:f5:49:03:e4:10:0d:47:80:fd:6d:
         f5:a7:5a:a4:8f:5f:a7:60:95:9c:a4:6a:92:6f:8a:64:f0:3a:
         bc:57:0f:fb:df:53:51:f7:73:92:36:b7:b0:d6:03:10:b5:1e:
         8c:48:60:55:b0:69:bb:65:f8:94:5a:c3:f1:60:e4:0b:22:21:
         f3:96:ea:9d:6b:2c:ad:9a:5e:84:13:cf:22:5b:6f:80:8c:f4:
         ca:96:a6:2f:13:16:54:1d:f6:11:32:9d:40:82:64:18:8c:d2:
         0e:0e:9e:92:54:35:18:d1:78:9f:29:6e:a8:a1:c3:b9:f9:5d:
         f1:4e:f1:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 08:57:43 2025 by rpki-client