Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/a5013bd8-fc34-4ad4-8dc8-516bdd8bc765/68c3e179-83ba-37b3-a535-05d541d0cf2b.roa
File:                     68c3e179-83ba-37b3-a535-05d541d0cf2b.roa (raw, json)
Hash identifier:          HeyWMnjTd9ShxCSKukd8GvtDiWhe980QGFHhlhlndfY=
Subject key identifier:   73:EC:BE:03:A4:71:64:C9:E5:B0:52:87:6E:2F:57:F0:C4:7E:A9:88
Certificate issuer:       /CN=a5013bd8-fc34-4ad4-8dc8-516bdd8bc765
Certificate serial:       010D0C9F4328584A9E961C724BD2400AB01F8380
Authority key identifier: 3C:D1:9E:69:77:A5:96:FF:7A:1C:C6:7B:50:98:68:49:55:CF:4B:A9
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/a5013bd8-fc34-4ad4-8dc8-516bdd8bc765.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/a5013bd8-fc34-4ad4-8dc8-516bdd8bc765/68c3e179-83ba-37b3-a535-05d541d0cf2b.roa
Signing time:             Thu 24 Jul 2025 01:00:50 +0000
ROA not before:           Thu 24 Jul 2025 01:00:50 +0000
ROA not after:            Wed 22 Oct 2025 01:00:50 +0000
asID:                     33739
IP address blocks:        204.16.33.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/a5013bd8-fc34-4ad4-8dc8-516bdd8bc765/a5013bd8-fc34-4ad4-8dc8-516bdd8bc765.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/a5013bd8-fc34-4ad4-8dc8-516bdd8bc765/a5013bd8-fc34-4ad4-8dc8-516bdd8bc765.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/a5013bd8-fc34-4ad4-8dc8-516bdd8bc765.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 07 Aug 2025 15:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:9e:96:1c:72:4b:d2:40:0a:b0:1f:83:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a5013bd8-fc34-4ad4-8dc8-516bdd8bc765
        Validity
            Not Before: Jul 24 01:00:50 2025 GMT
            Not After : Oct 22 01:00:50 2025 GMT
        Subject: CN=a13c83ab-cff6-4383-96cf-fc139bcff005
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:28:f0:10:3a:15:7f:5b:26:ba:84:15:88:ef:
                    4d:b1:3e:09:e4:1c:53:c3:b8:e5:4d:84:c7:8f:07:
                    0b:79:43:2e:9c:9e:9e:2f:2e:44:e5:5e:69:68:a0:
                    bf:e4:0c:8f:13:e3:5b:d6:47:0a:87:71:7c:bb:4d:
                    1d:50:19:64:aa:b3:a9:72:5f:1b:16:0e:2b:83:09:
                    3f:24:28:cb:96:b9:ef:0c:16:5e:57:db:a2:a3:61:
                    82:fd:4a:0e:0f:91:c8:8a:42:bd:a3:d2:4d:d7:c2:
                    9c:fc:fe:e9:94:09:0c:e2:b5:09:2c:c6:1c:e9:5d:
                    53:14:5b:77:83:c4:64:1f:2e:68:a6:0e:f2:10:0f:
                    9c:b9:e3:be:a8:dc:30:7b:a3:47:f9:ed:f2:b5:90:
                    5e:48:1e:64:29:3f:5f:fd:1c:4e:8d:8b:ba:a9:01:
                    33:03:de:ac:20:37:6c:77:51:19:54:f7:48:4d:ba:
                    f8:fe:6e:a2:42:3b:53:16:f6:1a:78:91:20:d8:b9:
                    91:40:c8:f9:af:e2:f5:57:8b:f5:4e:f1:6c:00:01:
                    e0:b3:1d:12:02:36:23:fa:e3:48:1d:bd:a7:d6:b0:
                    51:a9:dd:10:df:4a:85:bb:1c:4c:a8:92:65:cd:f1:
                    d9:af:ac:d9:95:e3:20:58:59:b4:0f:72:b3:e7:f5:
                    82:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                73:EC:BE:03:A4:71:64:C9:E5:B0:52:87:6E:2F:57:F0:C4:7E:A9:88
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/a5013bd8-fc34-4ad4-8dc8-516bdd8bc765/68c3e179-83ba-37b3-a535-05d541d0cf2b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/a5013bd8-fc34-4ad4-8dc8-516bdd8bc765/a5013bd8-fc34-4ad4-8dc8-516bdd8bc765.crl

            X509v3 Authority Key Identifier:
                keyid:3C:D1:9E:69:77:A5:96:FF:7A:1C:C6:7B:50:98:68:49:55:CF:4B:A9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/a5013bd8-fc34-4ad4-8dc8-516bdd8bc765.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  204.16.33.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         56:da:26:a8:84:11:8e:7f:8b:17:dd:74:6a:f5:ba:2d:c0:96:
         1a:ac:9c:c7:c4:de:df:9f:52:52:4f:dc:20:01:7e:23:a2:b5:
         0c:20:c7:ed:8d:f0:6b:36:10:84:d9:c1:17:d9:77:44:8f:99:
         55:2e:3c:6d:4e:4c:fa:14:53:93:37:1a:0d:e2:24:22:b1:6e:
         8a:81:4b:b1:5d:7c:a3:50:02:3c:38:e7:07:2e:9a:aa:3f:62:
         25:72:d1:1a:d1:bb:71:9a:1e:e3:b6:d5:01:a3:6a:03:6b:b7:
         cd:40:40:71:ff:bc:52:b0:12:e9:ed:98:18:dd:a3:de:fe:e0:
         a7:24:da:79:31:f8:5f:f3:37:c6:0d:a8:e6:5b:07:27:58:45:
         60:6b:26:1a:0c:1a:83:a1:8a:9b:e9:b5:8b:cf:90:88:c7:dd:
         d0:fa:f6:bd:ad:32:e2:66:70:18:c2:89:92:d3:eb:bb:b6:6f:
         70:4b:c7:5c:6b:35:a9:b7:61:f3:b3:7e:2e:e3:c8:be:7e:28:
         3f:1f:dd:69:1a:bf:f0:98:c1:ba:f6:cf:85:03:00:66:4e:f9:
         32:bb:0f:b3:46:a9:c5:c1:b9:f6:a3:a6:5f:82:c7:7c:33:06:
         cb:d2:8e:fb:54:b3:d3:f6:e5:a1:86:d9:93:72:20:8e:24:32:
         30:ff:e9:9a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 6 05:53:52 2025 by rpki-client