Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5dce877b-b7a0-44f5-b8c2-1115311c773e/7ee7228b-bbfa-3084-82dc-bdb8695a3e98.roa
File:                     7ee7228b-bbfa-3084-82dc-bdb8695a3e98.roa (raw, json)
Hash identifier:          5UZrsEJ+Y9HIQt3Lv7rVroPLcljLm8fVIa1w2D8bYQM=
Subject key identifier:   E2:93:81:C3:B8:D3:2E:2D:5B:51:AA:12:A0:42:41:4B:95:93:FC:93
Certificate issuer:       /CN=5dce877b-b7a0-44f5-b8c2-1115311c773e
Certificate serial:       010D0C9F4328584A9A6630C06A010F0D6F3F8A00
Authority key identifier: 91:40:49:57:21:04:32:E7:F1:28:40:C4:C1:5B:49:A8:24:DF:F2:2A
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5dce877b-b7a0-44f5-b8c2-1115311c773e.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5dce877b-b7a0-44f5-b8c2-1115311c773e/7ee7228b-bbfa-3084-82dc-bdb8695a3e98.roa
Signing time:             Tue 22 Jul 2025 13:01:03 +0000
ROA not before:           Tue 22 Jul 2025 13:01:03 +0000
ROA not after:            Mon 20 Oct 2025 13:01:03 +0000
asID:                     14618
IP address blocks:        207.202.33.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5dce877b-b7a0-44f5-b8c2-1115311c773e/5dce877b-b7a0-44f5-b8c2-1115311c773e.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5dce877b-b7a0-44f5-b8c2-1115311c773e/5dce877b-b7a0-44f5-b8c2-1115311c773e.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5dce877b-b7a0-44f5-b8c2-1115311c773e.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 07 Aug 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:9a:66:30:c0:6a:01:0f:0d:6f:3f:8a:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5dce877b-b7a0-44f5-b8c2-1115311c773e
        Validity
            Not Before: Jul 22 13:01:03 2025 GMT
            Not After : Oct 20 13:01:03 2025 GMT
        Subject: CN=aad5698d-9121-403b-bb58-c3ca76ac8834
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:83:71:42:47:c4:5a:49:85:ab:db:76:8a:61:ea:
                    d7:36:b1:2c:71:05:e3:2a:a7:9d:b5:c0:78:b8:63:
                    8e:da:85:eb:03:10:e6:0b:5c:11:14:2e:23:ee:7f:
                    e1:ca:84:0f:56:08:70:da:25:30:ce:a5:1c:18:66:
                    b1:fa:fb:25:dc:26:d2:a8:97:0d:21:4e:8a:c3:98:
                    e2:2c:df:9c:0a:69:70:e7:de:65:16:70:24:04:7f:
                    dc:81:31:ea:aa:5f:c1:5b:47:16:33:ee:bc:f7:35:
                    36:1e:e9:3d:76:7f:fc:54:57:a7:92:e7:67:2e:c8:
                    2d:f6:ec:3c:59:b3:46:7d:e3:3f:04:95:8b:b8:c0:
                    35:04:38:b9:e2:06:54:82:d0:f9:b7:71:1e:d5:58:
                    8a:42:c5:53:d3:8f:b3:3f:02:3d:4c:f1:e2:f6:63:
                    4c:29:0b:d5:75:be:35:10:10:b6:f8:94:63:f5:e3:
                    c6:12:63:39:a5:c4:e0:2b:43:2a:9b:3f:cd:f7:2b:
                    3a:17:26:dc:23:2e:91:0c:4c:29:e4:5e:3c:69:b6:
                    16:1f:fb:ec:4e:32:04:04:73:9f:12:28:7d:aa:ce:
                    99:dd:d0:7d:9a:8e:cb:b2:73:4c:04:56:5f:fc:87:
                    39:4c:15:d9:b4:bf:4a:0f:21:76:ab:b7:01:40:81:
                    53:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E2:93:81:C3:B8:D3:2E:2D:5B:51:AA:12:A0:42:41:4B:95:93:FC:93
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5dce877b-b7a0-44f5-b8c2-1115311c773e/7ee7228b-bbfa-3084-82dc-bdb8695a3e98.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5dce877b-b7a0-44f5-b8c2-1115311c773e/5dce877b-b7a0-44f5-b8c2-1115311c773e.crl

            X509v3 Authority Key Identifier:
                keyid:91:40:49:57:21:04:32:E7:F1:28:40:C4:C1:5B:49:A8:24:DF:F2:2A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5dce877b-b7a0-44f5-b8c2-1115311c773e.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  207.202.33.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         95:3a:bd:f8:f0:ad:74:e6:f5:a0:75:f2:00:b8:99:73:59:f3:
         73:cf:8f:33:f1:5a:26:92:a4:75:47:9f:f1:83:02:5d:2e:de:
         db:82:0f:b2:6e:79:22:19:09:fc:b3:23:21:6d:17:5d:45:85:
         e9:20:b2:23:32:ad:49:c2:40:8a:76:56:5f:cf:f0:a8:27:c8:
         fd:34:61:97:9f:19:b7:dd:5b:0a:28:1e:c9:4e:23:67:8f:cc:
         f2:dd:0b:e6:2e:61:14:32:4c:5e:68:4a:68:fc:a1:73:d8:bc:
         ef:b0:ea:3d:99:8a:25:2e:9d:92:c5:17:eb:b3:3c:eb:66:e9:
         3f:6b:1d:a9:2e:91:56:b1:2c:73:3f:1e:d8:99:f6:c4:b1:03:
         27:ee:be:b7:a8:29:56:ae:b6:ac:cb:bf:44:5b:c3:c3:8d:8b:
         96:77:97:fe:4b:a1:c4:55:f6:e5:1a:c4:ba:79:5a:d9:e1:5e:
         59:03:b5:97:29:27:62:9a:6c:ab:89:f9:7a:a2:5b:23:fa:5c:
         7a:18:53:14:e6:7c:d2:00:de:60:bc:5a:ba:6a:26:bc:91:75:
         3d:7e:91:1a:0a:c6:ad:5b:5c:e4:9c:07:d1:0e:db:dd:a6:e5:
         47:03:99:5b:19:60:bc:8d:e6:a4:54:b6:70:9d:90:47:4c:41:
         df:a3:37:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 6 12:36:11 2025 by rpki-client