Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/5a3fe3a9-d9f7-4b8e-a037-877363c53113/935f237f-3e08-33d2-af1f-4b1efe61d4f3.roa
File:                     935f237f-3e08-33d2-af1f-4b1efe61d4f3.roa (raw, json)
Hash identifier:          nD2C85hn9+R8CY76h98gJkhGEwoHxofukXy3by6O8+w=
Subject key identifier:   62:45:FF:BC:50:DE:A7:10:50:CF:B9:6C:4B:D2:16:20:E5:E7:95:3B
Certificate issuer:       /CN=5a3fe3a9-d9f7-4b8e-a037-877363c53113
Certificate serial:       010D0C9F4328584AB4EB7A2A9161EF836E27E2C0
Authority key identifier: A8:C1:4B:3D:D1:52:6C:35:99:64:83:60:2D:FC:F0:4C:0A:BC:EC:DE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/5a3fe3a9-d9f7-4b8e-a037-877363c53113.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/5a3fe3a9-d9f7-4b8e-a037-877363c53113/935f237f-3e08-33d2-af1f-4b1efe61d4f3.roa
Signing time:             Fri 01 Aug 2025 01:00:31 +0000
ROA not before:           Fri 01 Aug 2025 01:00:31 +0000
ROA not after:            Thu 30 Oct 2025 01:00:31 +0000
asID:                     22504
IP address blocks:        162.118.33.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/5a3fe3a9-d9f7-4b8e-a037-877363c53113/5a3fe3a9-d9f7-4b8e-a037-877363c53113.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/5a3fe3a9-d9f7-4b8e-a037-877363c53113/5a3fe3a9-d9f7-4b8e-a037-877363c53113.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/5a3fe3a9-d9f7-4b8e-a037-877363c53113.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 08 Aug 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:b4:eb:7a:2a:91:61:ef:83:6e:27:e2:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5a3fe3a9-d9f7-4b8e-a037-877363c53113
        Validity
            Not Before: Aug  1 01:00:31 2025 GMT
            Not After : Oct 30 01:00:31 2025 GMT
        Subject: CN=2066ec8f-e821-4cee-82e0-51278cd7200a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:62:e4:03:81:29:23:62:bb:24:c6:0e:dc:c7:
                    d2:83:52:7f:e1:7e:17:0d:5d:33:38:53:76:31:0c:
                    08:65:ef:41:2a:4c:64:ac:27:90:ad:c4:af:68:17:
                    78:36:ac:ce:74:90:5e:a4:24:af:7b:f4:73:ec:f5:
                    6f:c4:59:36:20:a1:82:cd:9e:3c:5c:78:2e:07:6c:
                    19:4f:e2:5a:46:f6:27:68:54:68:05:ea:67:98:8c:
                    08:93:5f:44:29:3e:e9:56:96:a1:44:5d:af:88:05:
                    c5:0c:ae:36:c7:0c:0d:38:d3:c6:fc:4c:7d:78:e2:
                    14:af:65:d7:a9:6b:c8:a4:d9:23:5b:2f:08:e3:d4:
                    82:ab:63:98:cd:0c:b6:b3:89:17:a7:6a:32:b1:88:
                    bc:01:97:92:65:f7:6f:0a:d6:f1:56:3d:30:c5:cb:
                    b4:ad:fc:23:a7:64:97:b4:5b:2a:bb:b1:3c:0e:27:
                    dd:6d:c3:d5:53:75:f1:fc:a7:9a:66:b1:f6:00:43:
                    e6:20:8c:ec:08:81:de:48:4a:13:fb:26:dd:61:01:
                    b2:02:51:7d:11:ca:e5:a8:f7:be:39:15:70:2a:cf:
                    0d:9e:43:16:39:60:d9:3f:93:34:d3:cd:bd:ed:f7:
                    9f:0c:3c:cf:28:9d:93:52:2d:c2:ae:e2:59:59:32:
                    d3:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                62:45:FF:BC:50:DE:A7:10:50:CF:B9:6C:4B:D2:16:20:E5:E7:95:3B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/5a3fe3a9-d9f7-4b8e-a037-877363c53113/935f237f-3e08-33d2-af1f-4b1efe61d4f3.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/5a3fe3a9-d9f7-4b8e-a037-877363c53113/5a3fe3a9-d9f7-4b8e-a037-877363c53113.crl

            X509v3 Authority Key Identifier:
                keyid:A8:C1:4B:3D:D1:52:6C:35:99:64:83:60:2D:FC:F0:4C:0A:BC:EC:DE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/5a3fe3a9-d9f7-4b8e-a037-877363c53113.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  162.118.33.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         97:94:0f:ec:e9:1c:96:a8:a3:fe:08:6b:97:9f:1e:40:45:09:
         17:e2:07:2d:a5:bc:94:a2:0b:7a:d5:94:15:1f:81:e4:22:86:
         db:d9:b2:03:cc:35:95:9f:80:55:65:66:46:f0:a2:31:72:ec:
         9e:a4:2e:c5:57:e6:9c:d3:3d:25:74:e7:08:ec:75:9f:41:58:
         55:55:9a:2a:7b:8f:25:1a:d6:81:fc:43:23:51:0f:49:05:88:
         4f:6a:da:6d:df:a1:9c:23:14:30:32:7a:33:de:b2:4a:9d:36:
         c4:55:c4:bb:be:7d:5b:ba:47:a4:51:76:28:29:03:96:e3:11:
         03:a5:fb:2e:12:d0:9d:72:28:b0:1a:4f:0c:a1:92:3d:cf:3d:
         36:86:85:dd:56:0d:ec:7f:71:53:26:4a:01:f6:25:6b:1e:65:
         81:d5:da:e9:46:f3:68:ba:f2:f8:c6:47:cd:7b:37:b2:52:1b:
         6c:4e:e5:d1:75:ad:48:5d:86:bc:15:18:05:e2:ad:3e:88:f0:
         0b:24:94:6f:31:e1:83:2e:bc:c5:83:6e:6e:10:48:09:63:ef:
         cf:b9:90:cd:98:0d:f7:27:44:30:b3:e2:cd:7e:a3:79:5e:ba:
         4b:be:81:c2:e8:f7:77:bb:98:fe:a9:3d:b9:a6:1d:72:c0:82:
         a1:3f:2e:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 7 03:29:55 2025 by rpki-client