Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f29a16-e7b1-40c8-87bc-34e2c5624862/28fe65a7-9d78-3034-a420-f6f04b7db492.roa
File:                     28fe65a7-9d78-3034-a420-f6f04b7db492.roa (raw, json)
Hash identifier:          wG6SJscN4c3btJ471efiLzTFVZkf9KAQb8+WV+wKvqM=
Subject key identifier:   A0:3A:DA:18:DB:06:AA:2C:98:8A:19:ED:DB:BF:BB:17:D2:33:6E:5F
Certificate issuer:       /CN=d9f29a16-e7b1-40c8-87bc-34e2c5624862
Certificate serial:       010D0C9F4328584AC17B8E6AE99067DBA83D4B80
Authority key identifier: DB:FA:83:FE:6D:96:CD:CC:6C:DE:3A:15:B4:20:98:9D:63:D7:B6:33
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f29a16-e7b1-40c8-87bc-34e2c5624862.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f29a16-e7b1-40c8-87bc-34e2c5624862/28fe65a7-9d78-3034-a420-f6f04b7db492.roa
Signing time:             Tue 05 Aug 2025 13:00:41 +0000
ROA not before:           Tue 05 Aug 2025 13:00:41 +0000
ROA not after:            Mon 03 Nov 2025 14:00:41 +0000
asID:                     15169
IP address blocks:        162.33.230.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f29a16-e7b1-40c8-87bc-34e2c5624862/d9f29a16-e7b1-40c8-87bc-34e2c5624862.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f29a16-e7b1-40c8-87bc-34e2c5624862/d9f29a16-e7b1-40c8-87bc-34e2c5624862.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f29a16-e7b1-40c8-87bc-34e2c5624862.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 08 Aug 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:c1:7b:8e:6a:e9:90:67:db:a8:3d:4b:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d9f29a16-e7b1-40c8-87bc-34e2c5624862
        Validity
            Not Before: Aug  5 13:00:41 2025 GMT
            Not After : Nov  3 14:00:41 2025 GMT
        Subject: CN=e276ee74-7e0c-4015-b76a-00237a977f02
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:84:c7:c5:37:a0:8a:11:97:24:21:40:b1:97:e7:
                    ea:a0:30:b4:3f:42:08:b6:3a:e1:38:65:6e:ef:ba:
                    11:c6:5b:43:6c:a4:2a:25:ee:63:3e:be:27:c3:02:
                    3b:18:1c:65:09:88:a0:e2:7e:df:c7:93:0b:0a:ba:
                    42:bb:b9:4b:b6:93:18:de:49:93:6b:b1:3d:a7:17:
                    5d:84:fa:64:74:2b:d8:45:38:39:11:c5:72:fa:01:
                    ef:a8:35:fd:6a:ab:ca:ec:44:2a:f8:87:7b:d6:55:
                    28:ff:26:c1:a2:16:fe:64:31:17:98:e2:24:61:ce:
                    d4:bd:7b:06:93:64:be:f6:d0:c3:8f:90:ee:49:3c:
                    1c:f5:ea:07:4b:53:45:cf:a7:c8:fa:f8:5b:11:87:
                    85:4a:9e:3b:8d:f5:13:cb:ff:f4:eb:1e:9d:2a:53:
                    37:57:cd:5b:99:7c:c2:ad:3d:43:70:b2:d9:28:4a:
                    d4:f2:5f:3f:e8:f3:15:0d:d0:fc:ea:e2:59:4c:c0:
                    1f:3a:4a:f2:56:f2:52:d8:58:de:40:35:aa:31:3e:
                    d2:64:6d:c9:fc:c8:fa:62:2c:2d:84:ff:75:7e:b0:
                    b8:e8:96:11:ad:93:4b:49:14:f9:e1:e2:57:87:8b:
                    da:ed:98:0d:a7:82:af:1c:81:46:30:35:7e:47:db:
                    75:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A0:3A:DA:18:DB:06:AA:2C:98:8A:19:ED:DB:BF:BB:17:D2:33:6E:5F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f29a16-e7b1-40c8-87bc-34e2c5624862/28fe65a7-9d78-3034-a420-f6f04b7db492.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f29a16-e7b1-40c8-87bc-34e2c5624862/d9f29a16-e7b1-40c8-87bc-34e2c5624862.crl

            X509v3 Authority Key Identifier:
                keyid:DB:FA:83:FE:6D:96:CD:CC:6C:DE:3A:15:B4:20:98:9D:63:D7:B6:33

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f29a16-e7b1-40c8-87bc-34e2c5624862.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  162.33.230.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4b:b9:93:66:8c:68:af:88:65:53:4d:ba:99:d7:da:e5:d9:b9:
         4c:20:4a:0a:c7:8e:29:9b:92:48:cd:e4:a7:cd:06:fb:e3:07:
         5c:83:7b:67:d0:55:1d:04:9e:95:1a:8d:cd:d8:df:6b:ab:02:
         82:b8:7a:66:57:b8:e9:f2:4c:51:9c:13:e2:c0:49:d4:6e:fd:
         2e:20:0e:6f:ab:35:a2:7f:cc:47:47:79:c9:48:e6:02:cd:2d:
         09:b2:3a:d2:6b:ff:1e:fa:13:48:23:b8:e7:6d:fe:a1:e8:70:
         c7:68:8c:e9:ca:96:18:7c:16:6b:62:86:51:18:57:ec:69:b3:
         13:8a:f8:06:9d:9b:0e:fc:c7:2c:6a:8b:12:79:74:e7:ab:69:
         40:eb:d1:2d:0c:30:96:09:cf:a9:59:46:3d:4c:10:6b:b6:7e:
         4e:5f:48:25:67:5e:89:5e:97:b4:20:33:2f:97:e6:d6:6b:d9:
         67:4c:43:ef:9a:e1:45:e3:ae:92:b8:8c:1a:05:0a:a5:96:1f:
         06:2e:1f:82:6d:4a:ac:ea:75:90:31:40:16:6a:e3:94:a4:be:
         46:bf:7f:7a:0c:fe:a7:60:54:dd:e1:ad:0d:55:20:2b:7b:0e:
         58:d7:89:0f:5c:d6:d0:51:1d:12:36:90:78:ce:bf:09:31:d9:
         2b:3d:a8:15
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 6 18:44:54 2025 by rpki-client