Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5abc34ba-5ab4-4f1a-965e-3d6ec04cdbfa/eec7e59a-4606-3c68-bc4e-0c0848b41897.roa
File:                     eec7e59a-4606-3c68-bc4e-0c0848b41897.roa (raw, json)
Hash identifier:          2Oo1bSd3KS9HIQSDlXhmnxvCWvuGVe1zfk+s7yEPwCw=
Subject key identifier:   2A:61:41:C0:18:EC:19:DF:68:63:39:A7:67:24:DD:C1:56:E3:C1:9C
Certificate issuer:       /CN=5abc34ba-5ab4-4f1a-965e-3d6ec04cdbfa
Certificate serial:       010D0C9F4328584B0746BA573E03231C0DF1EA00
Authority key identifier: A8:43:7A:D0:A3:E0:15:CC:9F:23:55:96:F3:C5:01:F0:B6:70:64:7D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5abc34ba-5ab4-4f1a-965e-3d6ec04cdbfa.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5abc34ba-5ab4-4f1a-965e-3d6ec04cdbfa/eec7e59a-4606-3c68-bc4e-0c0848b41897.roa
Signing time:             Sat 30 Aug 2025 13:00:42 +0000
ROA not before:           Sat 30 Aug 2025 13:00:42 +0000
ROA not after:            Fri 28 Nov 2025 14:00:42 +0000
asID:                     210873
IP address blocks:        16.2.33.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5abc34ba-5ab4-4f1a-965e-3d6ec04cdbfa/5abc34ba-5ab4-4f1a-965e-3d6ec04cdbfa.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5abc34ba-5ab4-4f1a-965e-3d6ec04cdbfa/5abc34ba-5ab4-4f1a-965e-3d6ec04cdbfa.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5abc34ba-5ab4-4f1a-965e-3d6ec04cdbfa.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 10 Oct 2025 18:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:07:46:ba:57:3e:03:23:1c:0d:f1:ea:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5abc34ba-5ab4-4f1a-965e-3d6ec04cdbfa
        Validity
            Not Before: Aug 30 13:00:42 2025 GMT
            Not After : Nov 28 14:00:42 2025 GMT
        Subject: CN=bc6d01f2-5ac3-4430-b2c8-f7cc8401eea3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:bf:22:82:89:27:e4:65:41:62:94:a7:0c:a6:
                    ea:9d:7f:b9:5d:d8:78:a5:92:79:b6:fa:fe:e8:f0:
                    a8:8f:31:5d:08:5b:6a:b1:f7:54:c9:4d:12:cc:b3:
                    c4:a5:41:06:86:0e:e3:ff:07:b1:2a:51:e6:76:98:
                    a3:f9:d8:b3:d4:4f:17:7a:74:f9:cb:80:89:d1:0b:
                    9f:fe:aa:2d:44:df:55:10:bf:cb:c6:45:3a:33:e8:
                    02:b0:28:1b:3b:c5:76:81:40:12:ac:0c:e6:59:45:
                    f9:56:62:3f:84:13:60:2d:7a:a1:b7:64:f5:d3:38:
                    83:33:a7:af:9a:78:00:dc:1e:73:5d:f5:f1:64:ed:
                    72:e1:4e:be:3c:f0:bb:22:bd:f6:95:ad:cb:3a:bb:
                    92:ad:de:a0:4b:06:20:28:fc:18:70:86:93:ff:24:
                    5d:1c:46:03:25:3b:58:d8:aa:17:eb:05:1b:0f:dc:
                    00:56:ce:2f:9e:59:19:47:d8:b7:1a:7a:a9:d9:64:
                    54:48:80:f8:6f:da:19:50:39:09:50:80:b7:16:03:
                    79:fc:06:63:43:5e:34:c9:e8:b7:c6:83:ac:dc:0e:
                    ca:30:5e:42:0c:fe:e9:af:9b:03:48:4a:5f:af:88:
                    11:d5:1b:27:1f:d9:e5:8c:4e:4c:0c:1a:6d:73:25:
                    0e:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2A:61:41:C0:18:EC:19:DF:68:63:39:A7:67:24:DD:C1:56:E3:C1:9C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5abc34ba-5ab4-4f1a-965e-3d6ec04cdbfa/eec7e59a-4606-3c68-bc4e-0c0848b41897.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5abc34ba-5ab4-4f1a-965e-3d6ec04cdbfa/5abc34ba-5ab4-4f1a-965e-3d6ec04cdbfa.crl

            X509v3 Authority Key Identifier:
                keyid:A8:43:7A:D0:A3:E0:15:CC:9F:23:55:96:F3:C5:01:F0:B6:70:64:7D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5abc34ba-5ab4-4f1a-965e-3d6ec04cdbfa.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  16.2.33.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2a:a2:b6:72:38:41:4b:e4:6e:2a:5c:bd:cb:50:eb:ed:bd:5c:
         1f:93:c9:ae:eb:8e:0e:81:36:a6:ab:86:1d:ee:11:4a:49:3a:
         da:76:5d:65:ba:ed:41:f0:f3:3a:09:4f:7c:55:75:cb:9a:aa:
         f5:e0:16:35:0f:41:03:20:dd:94:ab:38:02:cc:83:1a:c1:aa:
         fa:c8:7e:b4:c1:4d:21:54:cb:8c:80:62:cd:e2:6c:88:da:9a:
         1e:e8:98:fc:45:fc:82:7a:fa:dd:f3:b4:74:74:50:f0:b9:5c:
         70:94:2f:db:d9:e1:5e:6b:ac:c7:84:61:c7:4d:10:50:f6:07:
         9a:52:58:6c:d2:fe:62:b1:65:86:82:bc:4b:42:d4:96:99:50:
         79:9a:28:17:5e:74:00:8f:02:f3:d9:2b:73:a2:41:63:7e:05:
         fb:05:3a:ce:82:06:32:83:d4:dc:ae:39:c8:81:27:16:fc:0c:
         f4:9c:43:8c:49:de:17:57:0f:57:93:07:8e:2c:da:af:99:b9:
         df:86:39:24:4d:e3:c7:79:20:4f:c7:e5:d0:69:15:5e:e7:31:
         af:cf:b0:b3:bc:14:04:72:33:19:e4:b5:77:00:2a:dd:0e:03:
         d3:6a:de:0d:4d:55:60:a8:79:50:f3:57:d2:47:39:e3:14:1f:
         69:26:55:21
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 9 03:37:29 2025 by rpki-client