Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d301c790-c1f4-4fd7-a939-1a8d2669b5b7/c77cf7a1-0a5f-3bcd-b021-37accf6e6544.roa
File:                     c77cf7a1-0a5f-3bcd-b021-37accf6e6544.roa (raw, json)
Hash identifier:          3W2hDGUDeCVh2X07riO7aHa/BxYd6UuSWDrU191CRw8=
Subject key identifier:   B0:BB:1D:30:E8:FB:25:C9:01:29:75:99:17:89:14:DA:DC:09:CF:16
Certificate issuer:       /CN=d301c790-c1f4-4fd7-a939-1a8d2669b5b7
Certificate serial:       010D0C9F4328584A305038F598073445D5450600
Authority key identifier: 36:15:5C:31:E0:37:DC:51:97:C8:D9:8A:A4:EE:58:5A:78:16:C9:2C
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d301c790-c1f4-4fd7-a939-1a8d2669b5b7.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d301c790-c1f4-4fd7-a939-1a8d2669b5b7/c77cf7a1-0a5f-3bcd-b021-37accf6e6544.roa
Signing time:             Sat 14 Jun 2025 13:01:04 +0000
ROA not before:           Sat 14 Jun 2025 13:01:04 +0000
ROA not after:            Fri 12 Sep 2025 13:01:04 +0000
asID:                     7018
IP address blocks:        170.205.33.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d301c790-c1f4-4fd7-a939-1a8d2669b5b7/d301c790-c1f4-4fd7-a939-1a8d2669b5b7.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d301c790-c1f4-4fd7-a939-1a8d2669b5b7/d301c790-c1f4-4fd7-a939-1a8d2669b5b7.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d301c790-c1f4-4fd7-a939-1a8d2669b5b7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 17 Jun 2025 11:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:30:50:38:f5:98:07:34:45:d5:45:06:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d301c790-c1f4-4fd7-a939-1a8d2669b5b7
        Validity
            Not Before: Jun 14 13:01:04 2025 GMT
            Not After : Sep 12 13:01:04 2025 GMT
        Subject: CN=78fe1cf8-a2c9-471e-9afc-e7ebeec11288
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8e:77:10:c8:44:c6:91:fb:09:3b:81:b5:5b:9f:
                    72:b4:8a:be:dc:16:af:ef:03:f9:84:62:ee:f6:a7:
                    6c:93:f7:0f:e8:a3:ce:d3:c3:c0:c7:85:9e:a3:72:
                    a0:aa:46:3d:f8:11:2c:bd:fd:b0:21:87:90:68:42:
                    84:53:ec:d7:c9:5d:dd:4b:a9:4d:dd:cd:0f:ee:a2:
                    89:22:67:a1:8f:ba:f6:40:56:f6:35:e3:32:a1:66:
                    7b:b1:f1:c0:d6:a2:86:a3:42:c6:9a:f3:03:34:33:
                    a4:d3:b8:f7:88:40:27:a3:cd:3b:bd:00:df:22:8a:
                    6c:7e:21:3d:8d:3b:49:61:92:5a:fe:be:22:7e:1b:
                    f8:67:84:98:9f:0d:ae:f2:ff:74:91:e7:ee:9f:d2:
                    11:5c:ad:79:2c:bd:12:e9:03:f8:61:de:d7:df:59:
                    3c:b7:2e:a2:f4:d1:97:69:b6:86:7e:bb:5a:e4:d2:
                    9a:27:78:ad:53:95:c8:e7:40:f3:31:a7:0f:2d:a9:
                    96:46:ac:d5:72:a9:07:c2:c4:db:19:0b:dc:ba:8c:
                    a4:44:df:02:9b:7b:46:2f:70:ec:06:46:8b:eb:96:
                    3e:60:06:28:85:36:5c:58:4b:9c:d0:16:2c:0f:d2:
                    86:a6:38:54:ab:5e:53:a3:9e:b9:c7:7d:1f:16:83:
                    17:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B0:BB:1D:30:E8:FB:25:C9:01:29:75:99:17:89:14:DA:DC:09:CF:16
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d301c790-c1f4-4fd7-a939-1a8d2669b5b7/c77cf7a1-0a5f-3bcd-b021-37accf6e6544.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d301c790-c1f4-4fd7-a939-1a8d2669b5b7/d301c790-c1f4-4fd7-a939-1a8d2669b5b7.crl

            X509v3 Authority Key Identifier:
                keyid:36:15:5C:31:E0:37:DC:51:97:C8:D9:8A:A4:EE:58:5A:78:16:C9:2C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d301c790-c1f4-4fd7-a939-1a8d2669b5b7.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.205.33.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         8d:21:7d:a9:7e:ac:51:0f:b1:23:ab:79:a4:8a:f7:03:f5:61:
         27:50:24:d2:a7:00:bb:a9:84:c4:88:82:1a:a2:71:4e:53:34:
         ff:05:b6:53:46:9c:b3:8e:8f:63:ff:09:fc:69:7f:0f:2d:2b:
         3f:34:df:be:90:3f:1b:b7:c0:51:dd:d1:75:b9:8f:65:f3:7f:
         67:1b:d1:ea:59:78:c9:ad:d0:00:72:e6:52:64:48:01:e5:3f:
         94:2d:c0:e3:bb:de:5d:5a:e4:6c:f0:f2:9b:84:e6:e2:68:d6:
         6c:b4:3b:47:59:2c:76:46:01:b3:86:07:d9:ea:fe:58:03:48:
         3a:58:9b:25:9d:74:b4:e3:91:94:03:6e:62:ac:a3:76:cc:82:
         17:14:4d:13:57:a2:39:b6:90:9e:22:17:63:05:2f:5b:fa:21:
         bb:aa:48:62:7c:4c:96:48:3c:bf:b4:33:ea:68:34:83:a3:e6:
         78:a9:b7:85:2d:9f:17:bc:16:d1:6b:76:87:ca:ae:a1:43:28:
         b0:2d:33:14:74:03:4c:e5:e3:5e:40:24:28:72:5f:59:85:bc:
         e9:23:6f:8d:e9:d5:03:0f:ea:f5:4b:c0:61:17:8e:06:8e:ff:
         9a:b7:7a:ec:d2:c4:e5:9b:87:b7:8e:05:82:58:4e:06:26:bc:
         1d:c8:81:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 16 00:01:11 2025 by rpki-client