Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/99f49497-e145-4e4e-895c-2a7825ca6508/f3357a76-a2e7-37a8-a963-683c8666e44b.roa
File:                     f3357a76-a2e7-37a8-a963-683c8666e44b.roa (raw, json)
Hash identifier:          IXgm1e8P65am5Brm1LSrcE/wSW9HHWSkYghZi9FFVGw=
Subject key identifier:   CE:4D:6A:81:27:00:0B:EE:8E:1D:1B:06:C6:4A:88:52:7F:37:56:3C
Certificate issuer:       /CN=99f49497-e145-4e4e-895c-2a7825ca6508
Certificate serial:       010D0C9F4328584B37AE83FE5C12168ABEC1FAF0
Authority key identifier: 2E:21:56:94:21:EA:A7:3F:43:08:43:7F:A4:6B:37:3C:50:4F:97:D4
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/99f49497-e145-4e4e-895c-2a7825ca6508.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/99f49497-e145-4e4e-895c-2a7825ca6508/f3357a76-a2e7-37a8-a963-683c8666e44b.roa
Signing time:             Tue 16 Sep 2025 21:08:47 +0000
ROA not before:           Tue 16 Sep 2025 21:08:47 +0000
ROA not after:            Mon 15 Dec 2025 22:08:47 +0000
asID:                     400703
IP address blocks:        162.33.190.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/99f49497-e145-4e4e-895c-2a7825ca6508/99f49497-e145-4e4e-895c-2a7825ca6508.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/99f49497-e145-4e4e-895c-2a7825ca6508/99f49497-e145-4e4e-895c-2a7825ca6508.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/99f49497-e145-4e4e-895c-2a7825ca6508.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 15 Oct 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:37:ae:83:fe:5c:12:16:8a:be:c1:fa:f0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=99f49497-e145-4e4e-895c-2a7825ca6508
        Validity
            Not Before: Sep 16 21:08:47 2025 GMT
            Not After : Dec 15 22:08:47 2025 GMT
        Subject: CN=eaf7f676-f6cf-4629-9c6a-75b2424ca642
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:f5:32:03:ef:d3:c6:ab:7f:74:1a:eb:be:37:
                    ca:4f:6c:35:a9:e0:5b:a3:30:2a:2c:d5:53:9c:a9:
                    21:f7:b4:de:7b:97:84:08:08:4c:1e:2b:93:cb:b4:
                    57:71:1c:50:23:e5:58:0f:25:88:87:b1:7f:20:e7:
                    9f:21:e1:f2:fa:5a:0c:7b:2b:a5:62:34:97:5c:f6:
                    ca:bb:30:df:02:b9:b8:87:5e:16:02:ac:dc:fb:7c:
                    ca:40:1a:74:43:93:dd:15:2d:4a:03:76:97:d4:06:
                    35:93:bb:83:d7:37:97:a7:18:9f:6a:ee:d7:87:15:
                    6c:82:20:46:dc:59:62:ca:4b:d8:d9:29:ec:71:33:
                    de:6d:40:48:83:77:e2:77:40:37:9f:5e:70:f8:35:
                    4c:c8:62:d4:e7:33:bc:89:8d:f5:c8:45:2a:fd:95:
                    12:89:2e:b5:a9:e8:68:c6:a7:7f:c7:12:52:8a:00:
                    ea:f4:75:9f:80:30:c1:81:0e:53:c6:18:e8:2c:d8:
                    d4:01:be:3c:f1:cf:2a:50:57:8c:22:65:c0:01:81:
                    9f:99:ec:e9:74:da:e1:fc:51:33:9d:c1:de:97:4f:
                    77:23:a1:3b:38:45:44:b1:d6:9b:7c:41:61:b2:bd:
                    d8:82:d4:8b:b2:af:04:ba:f8:62:93:ad:96:43:99:
                    f7:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CE:4D:6A:81:27:00:0B:EE:8E:1D:1B:06:C6:4A:88:52:7F:37:56:3C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/99f49497-e145-4e4e-895c-2a7825ca6508/f3357a76-a2e7-37a8-a963-683c8666e44b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/99f49497-e145-4e4e-895c-2a7825ca6508/99f49497-e145-4e4e-895c-2a7825ca6508.crl

            X509v3 Authority Key Identifier:
                keyid:2E:21:56:94:21:EA:A7:3F:43:08:43:7F:A4:6B:37:3C:50:4F:97:D4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/99f49497-e145-4e4e-895c-2a7825ca6508.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  162.33.190.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         55:e6:da:df:59:9d:27:0e:81:80:f0:eb:9a:ab:72:c4:a7:f8:
         b6:1d:91:75:cd:7d:88:33:dd:09:2c:1b:57:17:38:f7:82:63:
         8a:c9:80:86:f5:4e:2f:24:af:f9:bb:f2:0f:83:a6:9d:2a:8a:
         da:52:93:93:12:48:d3:e0:db:19:14:c3:c4:59:ac:b6:0a:70:
         ac:d1:d7:1b:cc:cb:fb:12:a0:4e:2c:61:cf:79:16:89:09:49:
         2a:bd:ee:56:e0:bd:eb:3b:e1:f2:ad:0e:98:b3:8c:a7:ff:de:
         22:f8:7a:9c:c5:4c:60:3d:63:f1:5e:59:31:76:84:25:de:46:
         2d:3c:8e:91:61:22:6f:21:ed:a1:64:28:79:5c:1b:91:0c:a7:
         3f:b5:e0:84:50:ba:00:59:5e:5b:fe:8c:58:5c:96:75:d4:7f:
         ce:13:2d:23:89:66:c2:20:5a:1f:11:27:74:6a:d9:4d:62:b9:
         42:d5:28:e6:b5:7d:2e:c2:9f:c0:0a:0b:9d:fa:32:2b:82:6f:
         43:78:48:01:64:45:af:0e:9a:ef:90:32:2b:e2:df:80:8e:5f:
         44:63:ca:56:4b:3c:0c:76:48:cf:b9:ee:6e:8d:58:79:c4:8a:
         8f:d4:89:75:3a:f0:0b:b5:8b:d8:79:3b:6d:4e:60:47:46:f7:
         fe:f4:be:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 14 00:38:53 2025 by rpki-client