Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f0faccb4-40a9-4168-aa3d-59d190eb5a04/33a15d20-681d-3fde-98e7-9009e686b584.roa
File:                     33a15d20-681d-3fde-98e7-9009e686b584.roa (raw, json)
Hash identifier:          KaUWy9Q/AlLHu4e49PMi8zEoXinlg83447QH50CFYnc=
Subject key identifier:   20:D8:8E:5C:D9:59:2E:A8:76:A8:9D:02:A3:DD:74:0D:B5:E7:D0:0E
Certificate issuer:       /CN=f0faccb4-40a9-4168-aa3d-59d190eb5a04
Certificate serial:       010D0C9F4328584AF0F13059CEE0EFB6DF877E80
Authority key identifier: AD:90:14:CD:64:56:65:C0:E1:77:35:72:B6:DA:98:7D:39:55:24:96
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f0faccb4-40a9-4168-aa3d-59d190eb5a04.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f0faccb4-40a9-4168-aa3d-59d190eb5a04/33a15d20-681d-3fde-98e7-9009e686b584.roa
Signing time:             Fri 22 Aug 2025 13:00:41 +0000
ROA not before:           Fri 22 Aug 2025 13:00:41 +0000
ROA not after:            Thu 20 Nov 2025 14:00:41 +0000
asID:                     14618
IP address blocks:        198.160.151.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f0faccb4-40a9-4168-aa3d-59d190eb5a04/f0faccb4-40a9-4168-aa3d-59d190eb5a04.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f0faccb4-40a9-4168-aa3d-59d190eb5a04/f0faccb4-40a9-4168-aa3d-59d190eb5a04.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f0faccb4-40a9-4168-aa3d-59d190eb5a04.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 24 Aug 2025 09:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:f0:f1:30:59:ce:e0:ef:b6:df:87:7e:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f0faccb4-40a9-4168-aa3d-59d190eb5a04
        Validity
            Not Before: Aug 22 13:00:41 2025 GMT
            Not After : Nov 20 14:00:41 2025 GMT
        Subject: CN=fb25b54a-0c71-4c3f-9857-462badd3413a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:ec:1a:91:c2:78:f6:19:41:8b:0b:9f:dd:05:
                    9f:07:26:53:ba:d1:5a:31:2f:06:98:e0:55:9d:35:
                    dc:af:34:ff:e8:d8:26:05:22:16:e4:a8:77:1a:95:
                    cc:dc:01:7c:03:1d:31:f1:c0:ad:3e:66:36:f5:f9:
                    d3:cd:47:62:e8:b3:10:92:f5:f5:49:22:88:11:88:
                    3c:e0:12:39:ed:68:3b:da:f3:8c:64:a4:3f:41:6c:
                    13:7c:3f:aa:4a:f5:4a:e8:75:18:13:a7:cc:4a:00:
                    42:bc:06:23:86:58:c6:96:d1:2b:36:34:d6:63:85:
                    22:c8:b2:24:24:97:40:30:52:a4:ca:88:2a:31:9f:
                    b9:9e:3f:3e:6e:01:dc:5a:a5:ca:9c:17:d3:57:2e:
                    8d:7b:6c:4d:58:76:85:4f:e1:fe:48:9c:48:a2:a6:
                    8d:14:25:8c:9f:8a:63:f2:42:62:bf:2f:86:b6:99:
                    77:2b:59:0e:d5:2f:c7:52:1d:d2:56:29:f6:65:12:
                    1a:45:f1:cb:bf:2f:7e:da:49:2b:ef:33:20:62:26:
                    99:15:51:fa:4e:b7:bb:4c:38:20:5b:97:dc:b5:9b:
                    3a:36:24:4d:73:4c:14:93:22:e7:ee:dc:2e:72:f3:
                    d4:58:11:b5:07:d1:d0:e2:c3:60:cf:8f:ac:0a:2e:
                    70:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                20:D8:8E:5C:D9:59:2E:A8:76:A8:9D:02:A3:DD:74:0D:B5:E7:D0:0E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f0faccb4-40a9-4168-aa3d-59d190eb5a04/33a15d20-681d-3fde-98e7-9009e686b584.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f0faccb4-40a9-4168-aa3d-59d190eb5a04/f0faccb4-40a9-4168-aa3d-59d190eb5a04.crl

            X509v3 Authority Key Identifier:
                keyid:AD:90:14:CD:64:56:65:C0:E1:77:35:72:B6:DA:98:7D:39:55:24:96

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f0faccb4-40a9-4168-aa3d-59d190eb5a04.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  198.160.151.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         72:12:8c:9d:a0:0b:66:da:b0:d0:52:8d:07:fc:1d:2d:f7:45:
         ca:0b:71:66:56:f0:3a:f6:37:d1:5e:97:11:40:62:03:4e:d5:
         76:6d:7b:4e:cd:38:09:1d:06:78:0c:19:9e:56:3e:38:85:81:
         90:8e:7f:de:d1:af:be:77:23:d7:cb:e0:a3:f6:72:74:0c:a3:
         5a:72:a2:0f:a9:cf:a7:87:98:a5:9d:ec:35:2a:2e:28:da:7c:
         f5:72:9b:89:24:59:19:bd:82:0b:fe:06:3b:be:f5:2e:dd:ba:
         1f:99:9e:1d:20:9c:55:c8:8d:ec:67:ce:1b:3a:f9:ec:68:87:
         7b:d2:ce:14:36:b4:fd:47:1e:9b:6e:41:9c:fd:02:80:13:b5:
         2e:db:c5:ff:b5:1a:50:1d:8a:89:51:b6:32:68:cd:3f:87:e3:
         2a:17:85:ea:c5:e7:1d:87:0e:53:7c:31:80:61:8a:26:74:3b:
         4d:7c:4c:8c:53:67:c2:7c:b5:84:90:7a:4c:dc:99:41:53:37:
         cb:77:62:97:41:7d:95:5b:70:40:ac:ab:15:71:05:fb:39:97:
         82:cd:0d:53:72:53:1d:09:20:be:f5:6f:bb:5f:8d:26:40:01:
         9b:ea:72:aa:ae:9a:a2:53:55:9a:e1:78:cc:af:73:d3:1c:e3:
         e9:88:09:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 10:13:31 2025 by rpki-client