Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fbb903a2-4c83-4bfa-9572-36fbafb84a23/8bc22993-6bac-381b-b9a2-eb39df41ffc0.roa
File:                     8bc22993-6bac-381b-b9a2-eb39df41ffc0.roa (raw, json)
Hash identifier:          OnuPt07tF3U0CN+WbBWxtFsDseom0Ti/iy/BFbqbAAg=
Subject key identifier:   38:D9:15:71:57:B1:57:87:53:6D:BF:82:1D:07:4A:D8:0E:47:0C:75
Certificate issuer:       /CN=fbb903a2-4c83-4bfa-9572-36fbafb84a23
Certificate serial:       010D0C9F4328584AB675E0D5AA172B4E2E6EB400
Authority key identifier: CE:EB:2A:7E:8A:E7:AC:3D:5A:73:26:E7:7B:49:A4:44:96:84:91:8A
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fbb903a2-4c83-4bfa-9572-36fbafb84a23.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fbb903a2-4c83-4bfa-9572-36fbafb84a23/8bc22993-6bac-381b-b9a2-eb39df41ffc0.roa
Signing time:             Fri 01 Aug 2025 14:15:24 +0000
ROA not before:           Fri 01 Aug 2025 14:15:24 +0000
ROA not after:            Thu 30 Oct 2025 14:15:24 +0000
asID:                     6079
IP address blocks:        192.159.33.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fbb903a2-4c83-4bfa-9572-36fbafb84a23/fbb903a2-4c83-4bfa-9572-36fbafb84a23.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fbb903a2-4c83-4bfa-9572-36fbafb84a23/fbb903a2-4c83-4bfa-9572-36fbafb84a23.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fbb903a2-4c83-4bfa-9572-36fbafb84a23.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 07 Aug 2025 07:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:b6:75:e0:d5:aa:17:2b:4e:2e:6e:b4:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fbb903a2-4c83-4bfa-9572-36fbafb84a23
        Validity
            Not Before: Aug  1 14:15:24 2025 GMT
            Not After : Oct 30 14:15:24 2025 GMT
        Subject: CN=b529e6fc-5649-4077-ae17-35416606e917
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:87:15:16:5b:84:d1:37:f7:e0:7c:5b:72:d0:65:
                    cc:93:90:91:d4:57:7b:a5:02:db:86:af:0d:86:b7:
                    27:86:28:27:f3:29:d0:0f:c3:e6:58:a2:8b:0c:67:
                    e9:63:e7:a2:61:25:f1:53:bc:a4:47:2d:bf:c6:d5:
                    4a:6a:64:99:27:65:a3:8a:83:59:83:31:29:b0:d2:
                    21:92:22:06:1a:0f:c1:39:34:68:0b:00:81:ef:0c:
                    e4:7d:53:a7:b0:a7:93:93:82:9e:7b:b4:d9:63:90:
                    49:29:3c:62:0b:9d:24:1b:de:c6:ab:52:1d:67:ab:
                    b9:40:ee:c9:54:a7:df:84:bf:5d:8e:2a:79:37:57:
                    4f:ee:b9:32:3e:02:f2:60:1b:59:44:0f:34:ff:3c:
                    a1:93:13:be:27:35:62:e1:3f:46:27:c9:81:b7:b6:
                    e0:2c:2b:62:b5:61:9d:d8:79:11:d6:6a:19:21:94:
                    66:c0:11:5b:54:2e:33:77:7f:39:49:e2:44:f9:9e:
                    41:c7:75:cb:e8:b0:17:8b:96:0d:9e:3d:7a:42:65:
                    cc:4e:4f:10:e0:28:90:03:0a:bc:b9:f6:68:8b:8d:
                    15:95:6d:a3:27:86:22:db:af:b6:48:73:94:1d:94:
                    db:db:f2:97:2f:58:fb:6b:11:00:80:1d:4e:14:e8:
                    da:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                38:D9:15:71:57:B1:57:87:53:6D:BF:82:1D:07:4A:D8:0E:47:0C:75
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fbb903a2-4c83-4bfa-9572-36fbafb84a23/8bc22993-6bac-381b-b9a2-eb39df41ffc0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fbb903a2-4c83-4bfa-9572-36fbafb84a23/fbb903a2-4c83-4bfa-9572-36fbafb84a23.crl

            X509v3 Authority Key Identifier:
                keyid:CE:EB:2A:7E:8A:E7:AC:3D:5A:73:26:E7:7B:49:A4:44:96:84:91:8A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fbb903a2-4c83-4bfa-9572-36fbafb84a23.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.159.33.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6c:99:f0:65:f6:cb:78:45:1b:7c:0b:f5:00:bd:33:a9:f8:cb:
         0a:87:34:29:dc:9f:7b:5e:db:8a:54:f2:06:5b:fe:f6:cc:5d:
         22:9e:cc:36:6f:f1:cf:63:ab:db:1e:56:13:5d:7e:6a:0c:17:
         80:26:0d:f4:51:0a:36:aa:f7:d1:b1:fb:bb:00:35:69:aa:4b:
         90:35:e3:83:42:77:be:c8:60:78:85:6c:8e:a9:20:e6:ed:b3:
         9d:80:d0:85:46:f5:76:64:ee:26:80:f2:cf:fd:5b:ec:01:2e:
         34:d9:06:f2:6d:eb:2b:9d:99:1b:98:f9:4d:75:6e:80:e7:f8:
         67:17:79:6b:9c:ae:6c:cc:11:5d:ad:49:57:98:a2:25:ce:d9:
         58:8b:6b:00:ec:13:ba:a4:38:c0:f8:6b:53:65:68:4b:94:e9:
         a4:94:72:7d:64:5b:2b:99:ec:14:28:5c:d6:f3:fe:3e:4f:5f:
         55:7d:11:8e:86:24:2a:9e:0c:ab:0e:2f:79:c1:ee:5e:70:64:
         bd:bc:e8:a5:fa:e0:78:1e:44:9c:6c:f6:ea:7b:74:59:dd:4b:
         ae:b6:f4:0f:43:0d:b1:9a:1b:db:e0:08:59:6a:5d:87:51:cd:
         5a:a3:df:71:fe:22:06:4d:07:01:c5:29:a4:09:55:f7:f5:9f:
         22:2c:c8:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 6 07:54:38 2025 by rpki-client