Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8ad8ab3e-495b-49e2-b49d-ded00f2330d2/33981a11-ee98-3be8-afd7-464452a032db.roa
File:                     33981a11-ee98-3be8-afd7-464452a032db.roa (raw, json)
Hash identifier:          YfjBtlI8rq3tWiTGE7RGY8kzrF0dR62UGy27scgVMnY=
Subject key identifier:   98:BD:35:70:67:1B:93:6F:3D:10:2A:9F:C3:26:BC:FB:71:68:C8:C7
Certificate issuer:       /CN=8ad8ab3e-495b-49e2-b49d-ded00f2330d2
Certificate serial:       010D0C9F4328584ADD666BF04501DD47E6C764C0
Authority key identifier: C5:D0:BE:D8:B3:F1:16:6C:88:91:1B:20:07:FC:85:AE:76:B9:1E:29
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8ad8ab3e-495b-49e2-b49d-ded00f2330d2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8ad8ab3e-495b-49e2-b49d-ded00f2330d2/33981a11-ee98-3be8-afd7-464452a032db.roa
Signing time:             Fri 15 Aug 2025 13:00:41 +0000
ROA not before:           Fri 15 Aug 2025 13:00:41 +0000
ROA not after:            Thu 13 Nov 2025 14:00:41 +0000
asID:                     5050
IP address blocks:        147.73.1.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8ad8ab3e-495b-49e2-b49d-ded00f2330d2/8ad8ab3e-495b-49e2-b49d-ded00f2330d2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8ad8ab3e-495b-49e2-b49d-ded00f2330d2/8ad8ab3e-495b-49e2-b49d-ded00f2330d2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8ad8ab3e-495b-49e2-b49d-ded00f2330d2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 25 Aug 2025 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:dd:66:6b:f0:45:01:dd:47:e6:c7:64:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8ad8ab3e-495b-49e2-b49d-ded00f2330d2
        Validity
            Not Before: Aug 15 13:00:41 2025 GMT
            Not After : Nov 13 14:00:41 2025 GMT
        Subject: CN=66e8dbe8-1187-4721-9748-35085784a35d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:12:46:2a:4f:33:a6:79:1a:7b:c0:81:76:c8:
                    82:4b:ef:03:85:cd:1b:e3:fa:e6:4f:71:fe:ac:e2:
                    bd:69:a1:ee:d4:ce:0a:af:16:72:0c:8a:7a:fd:86:
                    6a:a8:96:5d:c6:68:1a:39:f1:cd:a3:29:66:c1:05:
                    5e:9c:da:b7:d1:5d:c8:73:d2:9b:e9:23:86:f8:a1:
                    98:d2:5c:48:ff:55:55:d5:7f:19:21:0a:62:f4:2e:
                    7c:09:89:12:d2:5d:e3:f6:b7:d0:89:5e:69:02:6c:
                    04:9f:47:51:3c:c0:c9:ba:4d:a4:43:1e:bf:61:b4:
                    7b:9f:bb:06:a0:6a:2d:32:e0:0b:87:da:ec:10:0c:
                    5b:1b:9b:b4:7e:65:a1:9e:55:7d:53:0f:44:f5:3b:
                    73:9b:50:da:aa:38:c7:a3:68:87:56:ef:7e:e4:c8:
                    67:6f:82:af:45:62:9b:a9:71:a6:02:76:bd:25:d9:
                    b6:17:a2:82:db:cd:5c:70:75:95:87:9d:8b:46:eb:
                    ee:cc:7c:e3:84:f1:ab:2c:18:7f:26:2a:10:b7:27:
                    48:49:df:2a:c8:e6:ac:83:9a:a1:ba:cf:c5:b8:24:
                    c5:a3:ed:bb:03:a8:77:5b:e1:1a:4e:d1:ec:42:e2:
                    2d:6d:fd:b0:2d:ba:b0:c7:e3:8a:27:58:bd:e1:f5:
                    af:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                98:BD:35:70:67:1B:93:6F:3D:10:2A:9F:C3:26:BC:FB:71:68:C8:C7
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8ad8ab3e-495b-49e2-b49d-ded00f2330d2/33981a11-ee98-3be8-afd7-464452a032db.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8ad8ab3e-495b-49e2-b49d-ded00f2330d2/8ad8ab3e-495b-49e2-b49d-ded00f2330d2.crl

            X509v3 Authority Key Identifier:
                keyid:C5:D0:BE:D8:B3:F1:16:6C:88:91:1B:20:07:FC:85:AE:76:B9:1E:29

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8ad8ab3e-495b-49e2-b49d-ded00f2330d2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  147.73.1.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2d:70:71:15:b9:10:2f:72:99:1c:85:a6:20:da:21:14:81:04:
         a4:2d:0f:6c:44:91:e6:ed:cd:9b:b3:65:25:35:ee:5f:ac:dc:
         18:51:11:f9:89:af:8b:23:14:31:10:25:5e:bc:e8:c8:1e:21:
         73:7f:da:96:c6:02:f8:19:7e:f1:9c:47:8b:69:51:51:30:7e:
         05:41:6e:09:d4:b4:33:41:09:fc:b1:98:98:a8:82:c2:37:65:
         2e:e1:a7:01:88:58:d7:c1:4d:f1:cd:3b:2c:c7:22:01:62:fe:
         94:95:41:eb:1b:4e:72:61:57:87:a2:1e:2e:d3:04:f2:c3:e2:
         fe:7a:6b:e8:d6:77:51:b0:91:06:a9:66:ec:b0:33:79:64:aa:
         91:1b:aa:e0:45:f7:03:c6:3f:32:85:38:d4:b6:4b:ea:0e:dd:
         2e:52:bf:07:b2:41:24:cf:90:8e:0d:93:ff:34:79:e5:3f:09:
         bd:34:70:bc:7a:9c:1d:e7:7c:10:95:67:6c:b2:49:20:af:06:
         e4:49:c2:a0:75:38:9e:df:95:8c:2d:85:d3:e7:99:42:d8:39:
         90:9b:a5:b5:ce:6c:83:fc:79:16:c0:83:1f:a7:f0:98:ef:cd:
         ce:99:dc:80:81:93:4e:52:cc:e8:18:9d:41:4d:c9:7b:7a:30:
         ee:81:ae:fc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 24 04:21:36 2025 by rpki-client