Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/927d18e8-718f-412b-a0b2-a97decff6f3f/bd8d42a6-65b5-3543-9f7a-3219e1a3608c.roa
File:                     bd8d42a6-65b5-3543-9f7a-3219e1a3608c.roa (raw, json)
Hash identifier:          o3Oep73s9BRQvfBKYOxYYys1srnnPmhi8s8MKIXz/5I=
Subject key identifier:   C9:24:1B:E8:A3:28:F4:43:23:99:A5:0B:4B:81:5B:7E:F8:D1:A9:95
Certificate issuer:       /CN=927d18e8-718f-412b-a0b2-a97decff6f3f
Certificate serial:       010D0C9F4328584F3CE29C88D63240D87DFD2DE0
Authority key identifier: 65:DD:C3:69:D5:D8:1B:0F:95:D5:AB:AD:7B:F5:30:38:B1:C0:60:04
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/927d18e8-718f-412b-a0b2-a97decff6f3f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/927d18e8-718f-412b-a0b2-a97decff6f3f/bd8d42a6-65b5-3543-9f7a-3219e1a3608c.roa
Signing time:             Sun 20 Sep 2026 13:00:12 +0000
ROA not before:           Sun 20 Sep 2026 13:00:12 +0000
ROA not after:            Sat 19 Dec 2026 14:00:12 +0000
asID:                     203963
IP address blocks:        162.33.167.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/927d18e8-718f-412b-a0b2-a97decff6f3f/927d18e8-718f-412b-a0b2-a97decff6f3f.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/927d18e8-718f-412b-a0b2-a97decff6f3f/927d18e8-718f-412b-a0b2-a97decff6f3f.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/927d18e8-718f-412b-a0b2-a97decff6f3f.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 27 Sep 2026 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:3c:e2:9c:88:d6:32:40:d8:7d:fd:2d:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=927d18e8-718f-412b-a0b2-a97decff6f3f
        Validity
            Not Before: Sep 20 13:00:12 2026 GMT
            Not After : Dec 19 14:00:12 2026 GMT
        Subject: CN=8ef080ea-bdff-4cac-b67a-6ebb2362effc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8f:24:77:3b:d3:b4:ff:c6:2c:0a:9f:ae:f9:45:
                    6c:2e:d3:cc:f4:29:2b:2c:5c:8b:f1:08:53:e3:15:
                    05:15:d3:3d:bd:15:70:bb:6e:2f:51:92:69:38:57:
                    6c:7e:86:00:90:7c:e1:cb:7e:69:c3:d1:96:fb:22:
                    9f:a2:f6:90:8e:0b:eb:b5:2f:ec:8e:b6:04:be:aa:
                    dc:06:8a:13:d4:fb:cc:96:63:cc:b2:e1:68:29:ef:
                    c8:59:c6:9c:8a:b1:03:e8:3e:9b:0a:5b:fc:1c:3b:
                    b6:4f:4c:76:2b:b1:18:ac:9c:8f:9e:58:d3:98:56:
                    a5:e0:69:65:41:84:66:df:41:78:5a:29:bd:81:2f:
                    7f:8f:dd:bc:41:c2:52:90:b0:05:8e:db:e7:ab:60:
                    19:24:c6:98:4d:b8:a9:f9:93:76:fd:82:a4:6c:c6:
                    46:c7:f0:4e:72:f6:e8:9e:86:b6:a3:b5:06:8e:4b:
                    57:f7:6b:1d:d2:80:b2:b8:28:e0:a6:3f:d3:46:03:
                    4b:93:0a:c9:2f:95:cf:6c:96:95:8a:23:15:af:24:
                    17:20:79:70:35:ae:4d:af:70:3e:d3:60:08:46:82:
                    76:f5:4d:c4:8b:d1:4f:92:34:a6:8c:21:40:60:9f:
                    b2:18:62:c7:02:bf:00:9d:a4:eb:ec:70:19:b6:3b:
                    18:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C9:24:1B:E8:A3:28:F4:43:23:99:A5:0B:4B:81:5B:7E:F8:D1:A9:95
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/927d18e8-718f-412b-a0b2-a97decff6f3f/bd8d42a6-65b5-3543-9f7a-3219e1a3608c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/927d18e8-718f-412b-a0b2-a97decff6f3f/927d18e8-718f-412b-a0b2-a97decff6f3f.crl

            X509v3 Authority Key Identifier:
                keyid:65:DD:C3:69:D5:D8:1B:0F:95:D5:AB:AD:7B:F5:30:38:B1:C0:60:04

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/927d18e8-718f-412b-a0b2-a97decff6f3f.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  162.33.167.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7d:60:4a:4f:5e:b5:4c:67:c6:9e:f8:09:72:35:28:b3:53:33:
         b4:b2:33:99:97:73:1d:fe:c2:26:6c:ea:7b:d4:5b:a3:36:5e:
         2b:fa:76:83:6c:59:70:39:b9:8d:cf:65:1c:9c:37:01:c0:c9:
         0b:6b:6b:9c:30:dd:6d:b1:22:3d:39:0d:e4:d9:b6:45:01:a7:
         6f:10:14:63:fd:80:38:27:00:ab:45:cd:d3:d7:77:c1:db:fd:
         ab:ab:11:75:1c:08:03:8f:59:4d:f3:56:07:a5:71:3e:a9:95:
         c2:e1:c9:1a:99:8e:19:37:a0:ae:35:04:9e:0d:57:e2:ce:1e:
         79:5f:06:3e:a2:95:59:4e:9b:37:cc:86:4d:ac:de:e1:a0:90:
         a7:a9:85:76:93:2e:de:55:f6:e7:46:6c:a3:e6:f5:26:be:8f:
         93:4d:77:02:01:b6:48:08:43:9a:56:c5:9d:20:01:4c:de:b6:
         a9:ff:fc:b3:4f:68:c7:2f:e8:96:26:52:11:30:6a:5d:51:a7:
         be:78:ca:0b:4b:1f:da:01:71:43:e9:62:02:d8:4a:56:90:78:
         87:33:2e:b4:c7:ef:2a:97:83:e0:39:d8:37:41:30:23:b5:b2:
         48:07:36:05:9f:d8:03:84:8e:6f:54:c4:9b:82:d9:8c:58:ae:
         27:9b:a6:e0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 26 12:17:44 2026 by rpki-client