Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/927d18e8-718f-412b-a0b2-a97decff6f3f/e2590524-e2eb-3878-b134-21480208702a.roa
File:                     e2590524-e2eb-3878-b134-21480208702a.roa (raw, json)
Hash identifier:          KXpf/TzW7JReApu1lw5qnqMzgnq7oHWWW/P4ZF34yEw=
Subject key identifier:   CB:2C:C5:DE:D7:B6:FE:AC:06:F9:5F:97:87:7D:27:1E:69:72:A2:C5
Certificate issuer:       /CN=927d18e8-718f-412b-a0b2-a97decff6f3f
Certificate serial:       010D0C9F4328584EA78FBFFB6CC159E21C94F480
Authority key identifier: 65:DD:C3:69:D5:D8:1B:0F:95:D5:AB:AD:7B:F5:30:38:B1:C0:60:04
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/927d18e8-718f-412b-a0b2-a97decff6f3f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/927d18e8-718f-412b-a0b2-a97decff6f3f/e2590524-e2eb-3878-b134-21480208702a.roa
Signing time:             Wed 29 Jul 2026 01:00:12 +0000
ROA not before:           Wed 29 Jul 2026 01:00:12 +0000
ROA not after:            Tue 27 Oct 2026 01:00:12 +0000
asID:                     399839
IP address blocks:        162.33.165.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/927d18e8-718f-412b-a0b2-a97decff6f3f/927d18e8-718f-412b-a0b2-a97decff6f3f.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/927d18e8-718f-412b-a0b2-a97decff6f3f/927d18e8-718f-412b-a0b2-a97decff6f3f.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/927d18e8-718f-412b-a0b2-a97decff6f3f.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 30 Jul 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:a7:8f:bf:fb:6c:c1:59:e2:1c:94:f4:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=927d18e8-718f-412b-a0b2-a97decff6f3f
        Validity
            Not Before: Jul 29 01:00:12 2026 GMT
            Not After : Oct 27 01:00:12 2026 GMT
        Subject: CN=a9eddfa1-da0e-4d5f-849d-f3a36e18c3f4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:ce:f7:63:ff:a7:c3:87:55:1c:29:f4:85:f9:
                    90:58:54:84:68:79:ed:ad:95:c0:5b:7e:3f:7e:ac:
                    35:85:9a:88:e3:ea:16:47:4f:be:2f:9c:95:8f:a4:
                    ce:67:58:8b:b3:83:e2:c9:ce:4b:2d:26:c9:d7:b1:
                    01:56:5d:bb:3f:0c:0a:86:66:98:b3:bf:f2:f4:2a:
                    8b:ec:f7:53:af:81:8a:d4:ee:29:01:cf:a7:1e:b8:
                    46:38:dc:74:98:d1:58:92:a4:6a:43:cc:0c:3d:d1:
                    61:4e:c7:bb:f1:6e:f4:41:76:20:97:5f:39:b4:20:
                    3a:36:9f:47:5a:1a:ea:58:47:c3:64:c3:32:96:5f:
                    80:42:d0:24:6d:d2:a9:1f:3b:70:c8:c3:b7:0a:2c:
                    e6:c8:ee:ad:4b:08:b6:4f:09:0f:f9:32:f6:9f:19:
                    64:4d:de:1c:20:ce:2b:da:24:af:22:81:7f:fc:a1:
                    34:8b:48:fe:24:b5:e4:6c:8e:41:3b:8c:8f:95:6a:
                    85:fb:24:bf:6d:b8:d2:fe:85:11:44:cc:f1:32:4c:
                    76:c5:e4:50:d8:e8:19:ad:de:17:80:06:17:24:c6:
                    fe:aa:25:f8:38:46:97:3b:a6:61:01:ee:3e:74:5e:
                    9c:ad:be:e7:cc:7a:5e:20:46:b5:76:fd:14:8f:72:
                    66:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CB:2C:C5:DE:D7:B6:FE:AC:06:F9:5F:97:87:7D:27:1E:69:72:A2:C5
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/927d18e8-718f-412b-a0b2-a97decff6f3f/e2590524-e2eb-3878-b134-21480208702a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/927d18e8-718f-412b-a0b2-a97decff6f3f/927d18e8-718f-412b-a0b2-a97decff6f3f.crl

            X509v3 Authority Key Identifier:
                keyid:65:DD:C3:69:D5:D8:1B:0F:95:D5:AB:AD:7B:F5:30:38:B1:C0:60:04

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/927d18e8-718f-412b-a0b2-a97decff6f3f.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  162.33.165.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         43:da:7c:4d:9f:45:c2:99:28:95:c3:a0:1e:57:90:49:cd:69:
         86:1b:ec:c0:74:63:d2:80:8e:76:c0:92:9a:fd:09:58:f2:36:
         0a:13:79:42:fc:4f:e2:4c:13:34:7e:87:6d:d1:0f:33:1c:f1:
         13:ad:02:6a:89:30:20:80:15:6e:d8:dd:36:0a:f1:86:97:b0:
         cf:3a:ca:a7:8d:07:a9:ae:2a:64:ce:99:4e:a7:7f:64:d1:b7:
         83:03:0c:2f:a5:4a:7e:d9:37:f8:23:b8:61:70:cd:3d:22:47:
         31:c2:fc:29:32:1c:39:20:ad:c0:b5:e1:2e:1a:1d:29:6c:89:
         86:27:e1:94:59:68:31:4a:f6:5f:6c:12:e9:ca:22:b3:07:dc:
         41:4f:0e:a0:29:19:50:4c:44:9c:85:81:73:25:6f:fa:c9:2b:
         70:4c:47:3e:99:6b:49:d7:15:ce:7e:86:f8:4d:b5:d7:f9:87:
         b2:f8:de:25:6c:e3:ec:9c:6d:27:71:2b:fc:48:ab:7b:95:d4:
         ce:3c:d6:21:72:7a:56:e4:b8:05:67:b4:8d:09:e1:de:95:cd:
         a0:a2:ea:d2:20:6f:e4:ea:4e:50:df:00:00:f0:40:c9:74:f4:
         f8:67:67:09:5d:70:1d:bb:6c:5e:c9:32:58:7b:ce:61:a8:6e:
         7e:5a:54:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 09:32:51 2026 by rpki-client