Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5dce877b-b7a0-44f5-b8c2-1115311c773e/778c411d-d7df-3c97-9219-3ef234ab6f08.roa
File:                     778c411d-d7df-3c97-9219-3ef234ab6f08.roa (raw, json)
Hash identifier:          pK7YlcmolLx4PEeo8jOE1WErk8l10wS2QHVE7x4kfkY=
Subject key identifier:   BA:82:B5:7B:BC:B4:13:0B:0B:B5:FD:32:E0:CE:61:D1:96:DE:60:68
Certificate issuer:       /CN=5dce877b-b7a0-44f5-b8c2-1115311c773e
Certificate serial:       010D0C9F43285849BB0F70B06D635EC7BB76AF50
Authority key identifier: 91:40:49:57:21:04:32:E7:F1:28:40:C4:C1:5B:49:A8:24:DF:F2:2A
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5dce877b-b7a0-44f5-b8c2-1115311c773e.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5dce877b-b7a0-44f5-b8c2-1115311c773e/778c411d-d7df-3c97-9219-3ef234ab6f08.roa
Signing time:             Sat 03 May 2025 13:01:01 +0000
ROA not before:           Sat 03 May 2025 13:01:01 +0000
ROA not after:            Fri 01 Aug 2025 13:01:01 +0000
asID:                     16509
IP address blocks:        207.202.33.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5dce877b-b7a0-44f5-b8c2-1115311c773e/5dce877b-b7a0-44f5-b8c2-1115311c773e.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5dce877b-b7a0-44f5-b8c2-1115311c773e/5dce877b-b7a0-44f5-b8c2-1115311c773e.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5dce877b-b7a0-44f5-b8c2-1115311c773e.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 09 May 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:bb:0f:70:b0:6d:63:5e:c7:bb:76:af:50
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5dce877b-b7a0-44f5-b8c2-1115311c773e
        Validity
            Not Before: May  3 13:01:01 2025 GMT
            Not After : Aug  1 13:01:01 2025 GMT
        Subject: CN=ac457212-53eb-446d-9b71-fd32c28bdbec
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:84:c9:37:bf:79:15:95:18:6a:48:96:01:af:f1:
                    94:5d:19:64:4f:50:50:44:23:90:7e:0b:7b:61:1e:
                    44:8d:6d:7e:72:ae:67:7d:f2:5c:68:ef:ea:a1:e4:
                    eb:2b:9c:41:e1:20:42:94:e4:8d:ec:88:49:2b:53:
                    15:b1:50:90:4d:ed:7f:4e:8c:f3:45:85:ce:c0:28:
                    4a:8a:0c:6a:de:33:78:35:78:eb:d6:0a:a6:4f:3e:
                    24:8e:36:19:46:00:f6:8b:03:e9:7a:07:ef:75:f3:
                    79:7b:00:fe:da:3d:c5:37:b6:d0:db:6a:48:54:f6:
                    0c:c6:12:77:1b:67:2c:3e:c9:92:07:83:bb:1a:e8:
                    93:98:7a:17:73:2d:08:59:db:de:04:9f:c5:7a:ec:
                    db:0e:9a:5c:d8:3f:8c:c4:2b:e7:37:2b:70:f5:1f:
                    14:40:e7:dd:a6:63:d3:85:54:82:6e:7c:05:ff:75:
                    7b:48:75:86:f0:2b:6a:e5:fc:62:bb:f4:87:2b:97:
                    e7:b5:1b:88:71:f7:3b:f8:8c:f1:7b:b0:7f:26:9c:
                    b1:f4:22:b8:b3:91:4e:46:3e:6b:ec:7a:88:05:1a:
                    d1:32:b9:eb:4a:47:87:61:ba:a0:5e:c5:fe:66:ca:
                    3d:69:94:5d:56:6c:50:70:52:ba:f7:12:13:94:a5:
                    22:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BA:82:B5:7B:BC:B4:13:0B:0B:B5:FD:32:E0:CE:61:D1:96:DE:60:68
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5dce877b-b7a0-44f5-b8c2-1115311c773e/778c411d-d7df-3c97-9219-3ef234ab6f08.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5dce877b-b7a0-44f5-b8c2-1115311c773e/5dce877b-b7a0-44f5-b8c2-1115311c773e.crl

            X509v3 Authority Key Identifier:
                keyid:91:40:49:57:21:04:32:E7:F1:28:40:C4:C1:5B:49:A8:24:DF:F2:2A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5dce877b-b7a0-44f5-b8c2-1115311c773e.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  207.202.33.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         70:25:21:8a:aa:ad:ae:45:c5:d6:33:56:3c:38:f0:53:a4:0a:
         64:70:90:7c:95:4c:a7:f9:b8:f8:d6:58:8f:e4:fd:3c:4f:8f:
         86:fb:3c:66:08:b3:63:cf:06:70:89:1c:e1:78:f5:dd:ea:d0:
         30:f9:d7:7e:c7:4f:e7:d8:04:ff:af:5f:c9:a7:3e:f6:76:6a:
         8c:2c:de:a8:a6:14:60:f9:69:93:ce:50:1c:4d:a5:7e:c8:65:
         3d:a8:1d:7b:5f:c4:cc:6a:e1:7d:16:df:04:c5:77:ea:ec:e4:
         93:99:05:46:d9:a3:7a:a2:73:01:9d:96:fe:59:e9:e9:09:79:
         6c:1a:a0:e7:62:82:3f:2f:41:14:d8:fe:fd:1f:c9:ec:e5:23:
         8d:a0:10:86:4b:96:dd:8a:af:0c:c6:34:82:ac:aa:58:5e:b9:
         b8:53:da:f2:f2:a0:d0:8c:1c:bd:8e:c8:58:96:43:ed:bc:66:
         57:b9:37:bb:9a:5d:ea:2e:a4:ec:9b:e3:17:8f:38:1c:ac:46:
         2c:e4:27:76:5e:69:25:15:be:23:5b:dd:d4:d8:71:cf:be:89:
         4e:5c:1a:53:b2:6a:f1:cf:79:8e:9b:d4:e4:6d:91:9b:6c:23:
         3f:99:1d:39:65:d2:75:70:36:87:f9:30:ff:4a:5c:01:ce:82:
         3b:0d:4f:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 7 19:39:04 2025 by rpki-client