Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/927d18e8-718f-412b-a0b2-a97decff6f3f/b59a4496-163e-36fd-a331-f52538a9bf67.roa
File:                     b59a4496-163e-36fd-a331-f52538a9bf67.roa (raw, json)
Hash identifier:          MFYxiniFf29OgxNbpweQeFSf59NQsxM5ICmA/5CyC/k=
Subject key identifier:   58:13:54:FD:12:7C:AE:A8:56:93:4F:4A:E8:8A:8D:2A:6A:24:FC:DD
Certificate issuer:       /CN=927d18e8-718f-412b-a0b2-a97decff6f3f
Certificate serial:       010D0C9F4328584B80B782DC64A499A3FB1B2880
Authority key identifier: 65:DD:C3:69:D5:D8:1B:0F:95:D5:AB:AD:7B:F5:30:38:B1:C0:60:04
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/927d18e8-718f-412b-a0b2-a97decff6f3f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/927d18e8-718f-412b-a0b2-a97decff6f3f/b59a4496-163e-36fd-a331-f52538a9bf67.roa
Signing time:             Mon 13 Oct 2025 01:00:29 +0000
ROA not before:           Mon 13 Oct 2025 01:00:29 +0000
ROA not after:            Sun 11 Jan 2026 02:00:29 +0000
asID:                     53356
IP address blocks:        162.33.161.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/927d18e8-718f-412b-a0b2-a97decff6f3f/927d18e8-718f-412b-a0b2-a97decff6f3f.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/927d18e8-718f-412b-a0b2-a97decff6f3f/927d18e8-718f-412b-a0b2-a97decff6f3f.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/927d18e8-718f-412b-a0b2-a97decff6f3f.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:80:b7:82:dc:64:a4:99:a3:fb:1b:28:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=927d18e8-718f-412b-a0b2-a97decff6f3f
        Validity
            Not Before: Oct 13 01:00:29 2025 GMT
            Not After : Jan 11 02:00:29 2026 GMT
        Subject: CN=a27597e0-3254-42d6-9f8d-a1ac5d8fee2a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:c7:ce:fb:38:56:cf:53:87:71:59:9e:eb:8d:
                    1c:7a:df:8b:50:89:3a:a8:ac:c1:ef:37:11:3e:c5:
                    45:e3:b7:cf:d9:b2:94:50:85:6d:0c:94:b3:e2:30:
                    2e:29:d5:de:40:e4:02:8c:58:39:bc:c8:90:b8:43:
                    7e:cd:75:2f:56:b8:d2:4c:38:54:ac:22:fc:95:1a:
                    80:04:10:e7:cc:17:53:1b:39:49:9b:a5:f3:7f:73:
                    5e:80:19:72:35:90:19:3e:d1:38:a6:c7:27:03:c2:
                    8e:9b:5d:d1:72:de:87:29:9e:43:ac:17:a8:72:1b:
                    f5:cc:73:ca:76:5e:a8:b1:79:b7:1a:59:78:ac:65:
                    42:c3:ec:1d:7a:17:63:0d:8d:58:1c:79:d8:eb:40:
                    2b:57:06:26:a1:b7:d5:50:a2:a5:cd:0c:7a:22:96:
                    4c:01:da:e1:a7:2f:ff:8c:24:21:b2:2b:80:ec:e9:
                    27:dd:51:ce:0e:1e:40:8c:6f:77:2c:3d:a6:6e:f9:
                    b9:71:93:dd:34:6d:b1:fc:ab:b6:01:91:46:a4:52:
                    95:e8:1a:22:5f:6c:01:fa:da:fe:bb:ec:ab:2f:39:
                    51:f8:20:ec:95:89:51:39:7c:b1:96:ac:c3:ac:35:
                    4d:fb:df:fe:0a:fd:b8:95:ff:30:e5:42:be:a1:b9:
                    9b:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                58:13:54:FD:12:7C:AE:A8:56:93:4F:4A:E8:8A:8D:2A:6A:24:FC:DD
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/927d18e8-718f-412b-a0b2-a97decff6f3f/b59a4496-163e-36fd-a331-f52538a9bf67.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/927d18e8-718f-412b-a0b2-a97decff6f3f/927d18e8-718f-412b-a0b2-a97decff6f3f.crl

            X509v3 Authority Key Identifier:
                keyid:65:DD:C3:69:D5:D8:1B:0F:95:D5:AB:AD:7B:F5:30:38:B1:C0:60:04

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/927d18e8-718f-412b-a0b2-a97decff6f3f.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  162.33.161.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2f:cd:f2:2d:a4:a1:28:c5:32:c1:70:a6:eb:bf:ca:e0:09:03:
         0d:6b:61:b4:7a:bc:a2:f4:e2:23:e3:e0:ef:c2:04:ca:19:ba:
         13:20:b9:46:a3:cb:c9:b2:4f:d8:40:96:bd:5f:1d:d8:04:05:
         cd:cc:95:5c:fb:0a:83:e1:51:82:82:9f:99:08:5e:a4:66:14:
         c1:1e:e9:34:71:e7:05:d5:f6:40:40:14:79:b8:2c:58:af:88:
         32:78:b3:cf:ac:4c:f8:70:c3:eb:69:9f:2a:9a:89:c3:14:19:
         ec:ab:39:15:d1:db:e4:80:a2:04:47:56:34:df:c9:df:f7:31:
         36:84:e8:6f:8a:92:71:57:dc:e2:8d:85:f9:16:19:e0:20:e5:
         52:1a:39:35:4f:5f:d5:77:b7:15:43:92:50:fd:d8:d4:6d:d2:
         fa:ba:af:1e:47:40:4e:fd:a2:4d:14:e8:98:bd:43:f5:ed:a5:
         ca:a5:cc:ed:c4:92:5c:a5:6d:44:67:2a:ad:22:65:fd:ce:49:
         16:0a:70:d6:ba:3b:dd:f3:3d:4c:b1:3d:74:28:16:72:68:3f:
         fb:50:ad:e2:0b:c1:9b:1e:79:96:0b:1e:c0:e5:80:7f:4e:a3:
         eb:01:3b:19:69:3f:ba:5c:aa:3e:d5:b8:5f:d1:92:6a:db:9b:
         8b:c2:1c:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 09:24:29 2025 by rpki-client