Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/81f7226d-540f-349d-8478-86f3a4d2446c.roa
File:                     81f7226d-540f-349d-8478-86f3a4d2446c.roa (raw, json)
Hash identifier:          NHP2jIjnliOEcvyHpyaSzLC2/beIz/samkLl9cu6mfk=
Subject key identifier:   F3:7B:29:8E:45:B8:94:F7:9B:12:38:34:48:D9:93:66:16:A3:C9:D0
Certificate issuer:       /CN=984181fc-af40-43f8-a4ce-77cad82506f9
Certificate serial:       010D0C9F4328584A6DBB55AB49A4E720AFA68C00
Authority key identifier: 0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/81f7226d-540f-349d-8478-86f3a4d2446c.roa
Signing time:             Sun 06 Jul 2025 13:01:03 +0000
ROA not before:           Sun 06 Jul 2025 13:01:03 +0000
ROA not after:            Sat 04 Oct 2025 13:01:03 +0000
asID:                     206728
IP address blocks:        108.171.33.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 12 Jul 2025 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:6d:bb:55:ab:49:a4:e7:20:af:a6:8c:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=984181fc-af40-43f8-a4ce-77cad82506f9
        Validity
            Not Before: Jul  6 13:01:03 2025 GMT
            Not After : Oct  4 13:01:03 2025 GMT
        Subject: CN=38656278-6e22-491a-bfed-a844984bfde0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:d1:e1:20:26:2d:78:df:fb:84:44:9a:29:64:
                    33:d0:30:fc:55:5c:20:93:7e:e5:08:ca:75:64:80:
                    1d:72:1e:94:0b:18:06:13:66:65:ae:4e:7c:6f:dc:
                    e9:81:71:60:79:e7:64:32:ab:c4:db:b2:b6:2c:ad:
                    af:20:56:87:b2:5f:da:9e:62:5f:e7:df:38:c1:cc:
                    f1:03:9e:7c:bc:83:ab:df:3a:d9:93:46:45:81:04:
                    5e:f5:ea:04:b7:71:0b:1c:e1:54:26:b8:e0:8c:03:
                    cc:89:49:7c:fe:dc:3c:ad:be:e8:02:f9:d1:78:90:
                    f9:1e:2d:30:de:bd:4c:b6:a6:62:74:c7:67:5b:aa:
                    22:d3:76:65:1c:a3:45:36:01:f4:d8:a3:7a:6d:2e:
                    17:03:fd:05:b3:e6:6b:e9:5a:5f:6e:5b:25:9e:95:
                    59:af:26:43:6b:fd:13:ab:5d:49:0d:2a:2f:20:85:
                    cc:ac:81:8e:ea:fe:eb:91:ff:0b:af:d2:ee:0d:e1:
                    31:6e:4c:85:61:d2:f1:c0:e9:f3:44:c8:5c:4c:3b:
                    d8:ea:9b:05:c1:36:45:7c:52:9c:2e:40:86:17:1f:
                    89:38:66:59:97:f4:79:a5:ee:dd:ec:06:50:23:91:
                    81:cf:f3:f4:3f:64:cb:3d:b7:b3:b0:29:db:b2:48:
                    37:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F3:7B:29:8E:45:B8:94:F7:9B:12:38:34:48:D9:93:66:16:A3:C9:D0
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/81f7226d-540f-349d-8478-86f3a4d2446c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl

            X509v3 Authority Key Identifier:
                keyid:0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  108.171.33.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         93:f6:3c:1c:4c:ba:8d:07:95:1e:53:c4:c4:85:a2:fb:e9:7c:
         39:38:f5:13:bb:97:84:7f:dd:8f:96:74:2f:9a:99:9b:a8:57:
         9c:e3:40:82:7c:ee:82:18:bf:e5:97:3a:a5:ab:85:cd:17:40:
         b7:74:74:c7:a0:4b:c5:44:67:c2:64:80:c9:91:0c:86:d6:94:
         79:a2:98:2d:7b:55:b9:d9:1f:92:93:47:ef:be:99:5c:f4:3d:
         a7:79:76:26:c9:c8:32:22:a4:a5:45:0a:0b:eb:ed:9c:57:d1:
         be:b7:46:38:0e:0c:1c:75:99:2f:f9:44:2b:95:2b:03:55:6e:
         3a:18:f6:bf:a0:23:63:b8:c4:c5:ff:98:59:9d:c2:e2:d0:08:
         c4:21:63:18:ca:5d:b5:39:7d:db:10:c0:7f:27:26:48:e1:c3:
         0a:50:34:74:cc:af:56:ea:bb:d4:1c:f8:f6:3a:ef:81:35:15:
         6e:92:2b:33:3b:68:df:78:86:bc:6f:26:05:15:9d:3f:be:72:
         47:58:5d:b9:1a:f4:43:31:da:e4:db:eb:08:bf:ff:65:d3:19:
         1b:59:2e:76:db:62:f2:33:3b:8a:3a:d7:8e:a8:6e:51:10:bf:
         b9:f0:a0:0d:a3:9d:6f:4c:32:07:59:96:44:12:a1:64:72:18:
         48:fe:cb:bd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 10 19:22:58 2025 by rpki-client