Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/9dcab617-7807-367e-9401-361064e28966.roa
File:                     9dcab617-7807-367e-9401-361064e28966.roa (raw, json)
Hash identifier:          q++xAj6mppLVHgwHLGuNVG5u9QWAOLT8bUTjrgIlMM4=
Subject key identifier:   CB:F2:2E:01:BB:33:59:73:25:C1:1C:86:58:FA:5F:75:28:02:5F:2B
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F4328584AD23BE39C78451ABB78E807C0
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/9dcab617-7807-367e-9401-361064e28966.roa
Signing time:             Mon 11 Aug 2025 13:00:40 +0000
ROA not before:           Mon 11 Aug 2025 13:00:40 +0000
ROA not after:            Sun 09 Nov 2025 14:00:40 +0000
asID:                     701
IP address blocks:        100.33.0.0/16 maxlen: 16
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 25 Aug 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:d2:3b:e3:9c:78:45:1a:bb:78:e8:07:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: Aug 11 13:00:40 2025 GMT
            Not After : Nov  9 14:00:40 2025 GMT
        Subject: CN=43287639-3b96-4554-8500-5351bacfff7a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:9a:41:e2:72:9b:67:f4:e8:2a:ba:ca:35:22:
                    e2:8e:39:b1:44:49:26:b8:e1:a7:23:3e:99:00:32:
                    58:95:2f:92:c4:60:bf:8e:b8:95:b4:37:20:7e:79:
                    9d:bc:16:2b:f0:17:8d:71:24:a2:b2:f5:2a:9f:bd:
                    25:c4:01:5e:54:58:6c:76:98:59:03:fa:e3:0c:d5:
                    f2:a2:e0:4c:a2:ac:84:66:7e:6d:83:58:ca:59:62:
                    06:fe:40:20:07:cd:22:20:81:69:a1:f4:51:a2:4c:
                    ee:46:91:5f:20:a5:90:1a:37:d3:3d:b8:b8:46:c8:
                    5c:69:51:6b:3f:78:cc:0c:c0:95:9c:29:29:d2:82:
                    1b:eb:f8:3c:01:06:13:b3:81:18:8a:d1:54:43:26:
                    5e:89:5f:2a:eb:0f:b4:3c:4e:5e:da:f1:97:82:7e:
                    9b:db:35:ee:2e:50:e6:c5:6f:84:ac:a2:09:f9:40:
                    8e:70:20:26:26:c7:c0:8f:2f:9a:b6:bf:6e:62:b9:
                    04:3e:a1:87:00:66:ff:60:0d:dc:ed:93:c3:f7:37:
                    ca:1d:5a:98:17:8c:e1:43:82:22:b0:04:8b:71:57:
                    cb:24:68:2d:e7:64:c0:be:df:83:1f:9b:1e:f6:5d:
                    60:ee:11:9c:a1:7c:5a:aa:14:27:0b:7b:e6:03:25:
                    a8:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CB:F2:2E:01:BB:33:59:73:25:C1:1C:86:58:FA:5F:75:28:02:5F:2B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/9dcab617-7807-367e-9401-361064e28966.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  100.33.0.0/16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         52:9c:24:52:e7:eb:f6:cd:38:c3:2d:79:f8:94:77:d8:f5:8e:
         f5:59:59:a3:e9:0f:61:cd:df:7f:c7:1d:a5:a7:ea:90:ba:d9:
         53:d0:1c:20:ec:61:48:30:b4:8a:50:35:0d:16:23:8f:c4:08:
         81:b4:2f:68:b8:8d:2a:c6:9d:6f:95:86:4a:de:09:55:e2:ca:
         e4:2d:4f:e9:1d:1e:a1:20:98:67:2b:e4:7f:f1:0b:c4:d2:51:
         1c:83:7a:c4:1c:93:8b:e4:cb:59:7f:39:ae:88:61:da:fe:6f:
         47:9f:67:ae:b3:57:2a:bd:ee:c1:a6:02:31:55:43:76:05:fa:
         9a:8a:00:53:70:bf:13:37:ab:8e:63:dd:78:d0:8b:b0:3d:01:
         05:87:bc:f7:7f:28:c5:32:5f:df:eb:8e:59:32:6a:d1:12:a5:
         bf:79:f3:1a:4c:c7:00:ee:48:01:85:79:20:5c:2a:0c:f5:49:
         22:e0:77:e2:b6:7a:98:97:87:0d:8e:1d:89:d7:40:1e:5c:57:
         9e:81:a8:83:09:47:dc:23:4b:bf:e2:6f:0c:8b:1f:6c:31:09:
         f0:8f:a5:47:75:df:e9:3e:82:09:17:d8:a0:00:f1:7b:2d:45:
         c1:37:3d:b8:86:22:a6:27:a7:8a:16:7f:92:4b:d3:30:19:78:
         df:15:60:e1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 19:12:49 2025 by rpki-client