Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/02b3833f-6959-4156-9c8a-38b922dae37f/0880392d-8659-331b-9e4c-06fba04a9420.roa
File:                     0880392d-8659-331b-9e4c-06fba04a9420.roa (raw, json)
Hash identifier:          BP/74dI2svRuWCwjeNYPWqXGeDYyWXPBMNXCXXABDKg=
Subject key identifier:   55:73:41:DE:75:1A:86:C9:4C:58:74:70:32:6A:69:8D:FE:AF:78:08
Certificate issuer:       /CN=02b3833f-6959-4156-9c8a-38b922dae37f
Certificate serial:       010D0C9F4328584A96368E87D7163378BD8182E0
Authority key identifier: 17:33:AA:F9:DF:8C:81:F1:C6:83:62:4F:E0:DC:F5:67:F6:0D:41:9E
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/02b3833f-6959-4156-9c8a-38b922dae37f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/02b3833f-6959-4156-9c8a-38b922dae37f/0880392d-8659-331b-9e4c-06fba04a9420.roa
Signing time:             Mon 21 Jul 2025 01:00:50 +0000
ROA not before:           Mon 21 Jul 2025 01:00:50 +0000
ROA not after:            Sun 19 Oct 2025 01:00:50 +0000
asID:                     8075
IP address blocks:        216.118.163.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/02b3833f-6959-4156-9c8a-38b922dae37f/02b3833f-6959-4156-9c8a-38b922dae37f.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/02b3833f-6959-4156-9c8a-38b922dae37f/02b3833f-6959-4156-9c8a-38b922dae37f.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/02b3833f-6959-4156-9c8a-38b922dae37f.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 06 Aug 2025 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:96:36:8e:87:d7:16:33:78:bd:81:82:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=02b3833f-6959-4156-9c8a-38b922dae37f
        Validity
            Not Before: Jul 21 01:00:50 2025 GMT
            Not After : Oct 19 01:00:50 2025 GMT
        Subject: CN=bc3c9cc6-c120-487c-accd-db6362d41774
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:58:bb:94:85:13:eb:4c:6d:55:4d:44:f5:a6:
                    a4:57:49:dd:7e:04:17:12:07:a7:9c:94:ad:47:07:
                    6a:24:98:cf:66:58:a1:d0:5c:38:12:07:8b:6e:84:
                    04:4a:18:57:ce:04:b3:2e:f5:e4:f4:83:be:45:4f:
                    69:ee:69:7c:56:b0:57:50:83:57:0d:d6:3e:2f:3c:
                    b6:c9:d7:6c:74:f3:39:41:02:10:8c:d2:fb:36:ee:
                    e8:11:7e:65:86:78:81:56:a0:9d:13:dc:b7:c6:3e:
                    15:ad:09:4b:c8:55:a1:e3:58:1a:18:f8:e2:69:4a:
                    23:ad:e6:bc:55:f4:11:b1:9d:1b:84:a6:9f:a2:4d:
                    7c:25:77:32:0d:88:48:f7:68:47:1d:d6:49:44:5d:
                    3b:4e:bb:48:2a:8e:3c:96:2b:67:ff:75:e1:36:68:
                    72:74:b8:4b:3d:8c:35:da:ca:3a:a0:d1:5c:28:66:
                    12:f1:4b:af:5c:ff:50:d6:01:75:97:8f:7b:4d:92:
                    98:53:7e:8c:10:ee:d1:59:74:1d:bf:86:51:67:a8:
                    1a:0a:9f:71:64:2a:90:72:a3:e3:e9:a3:52:6a:5c:
                    59:f7:93:34:2c:dc:9c:f9:5c:64:da:fb:43:5a:b6:
                    74:3e:9f:d9:e2:26:54:bf:68:e8:b4:77:18:c9:2c:
                    3a:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                55:73:41:DE:75:1A:86:C9:4C:58:74:70:32:6A:69:8D:FE:AF:78:08
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/02b3833f-6959-4156-9c8a-38b922dae37f/0880392d-8659-331b-9e4c-06fba04a9420.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/02b3833f-6959-4156-9c8a-38b922dae37f/02b3833f-6959-4156-9c8a-38b922dae37f.crl

            X509v3 Authority Key Identifier:
                keyid:17:33:AA:F9:DF:8C:81:F1:C6:83:62:4F:E0:DC:F5:67:F6:0D:41:9E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/02b3833f-6959-4156-9c8a-38b922dae37f.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  216.118.163.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         28:53:12:e2:71:12:45:e2:fa:a9:f1:29:fa:75:5d:3a:bb:32:
         77:bc:ca:f9:fd:81:0a:93:b0:3a:f4:49:29:c3:2e:64:19:bf:
         8e:bc:88:35:57:26:8b:84:06:b9:91:2c:f2:7c:22:44:cd:b1:
         34:ba:be:9c:7e:a5:ab:98:b5:95:15:c3:83:d8:5a:1e:52:71:
         91:ae:52:5b:70:04:ca:45:d3:e8:2e:e2:eb:41:a9:7e:26:85:
         5e:8f:16:22:98:9f:85:da:c5:e9:52:f5:91:a4:80:18:9d:ea:
         4c:a1:f6:62:73:73:56:92:6b:5f:c2:77:0a:36:23:ee:4d:a1:
         7e:35:b1:9b:a0:af:1a:4c:77:3a:12:43:68:a3:52:73:fa:93:
         24:77:dd:d0:27:4a:fe:e3:26:a6:cc:30:e5:d1:76:bf:a1:82:
         09:5e:40:97:27:dc:77:09:a0:24:86:41:85:58:a7:12:63:8a:
         02:f3:13:0e:5c:21:a8:19:30:32:2b:33:d2:41:b6:39:86:79:
         4a:70:38:f4:17:d8:8e:f2:70:b5:83:c0:6a:18:67:3b:2e:87:
         10:96:2b:c8:6c:6c:f2:dd:31:48:77:6b:d5:fc:07:76:2e:e5:
         e2:b9:8e:73:4a:6b:d3:d3:54:13:cf:52:28:ad:f7:a6:5a:90:
         51:b2:9d:4d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 16:09:14 2025 by rpki-client