Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/83978879-0e89-498f-901b-884a1988c27f/a76e2a99-afef-387e-82e9-daf0c2b55c50.roa
File:                     a76e2a99-afef-387e-82e9-daf0c2b55c50.roa (raw, json)
Hash identifier:          UDh0zrOY+DLju4B65jNZSjDgxrGDfstXDMw1LKPlG9A=
Subject key identifier:   B8:F2:46:53:E0:43:E8:85:AF:0A:B7:2A:04:5F:02:A0:60:D1:B7:61
Certificate issuer:       /CN=83978879-0e89-498f-901b-884a1988c27f
Certificate serial:       010D0C9F4328584AE196719C160CD0AEC5491140
Authority key identifier: F2:13:49:BC:1E:A5:6F:94:E9:9E:63:33:CC:53:1C:C5:F7:00:B9:E2
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/83978879-0e89-498f-901b-884a1988c27f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/83978879-0e89-498f-901b-884a1988c27f/a76e2a99-afef-387e-82e9-daf0c2b55c50.roa
Signing time:             Sun 17 Aug 2025 01:00:32 +0000
ROA not before:           Sun 17 Aug 2025 01:00:32 +0000
ROA not after:            Sat 15 Nov 2025 02:00:32 +0000
asID:                     21615
IP address blocks:        209.33.65.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/83978879-0e89-498f-901b-884a1988c27f/83978879-0e89-498f-901b-884a1988c27f.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/83978879-0e89-498f-901b-884a1988c27f/83978879-0e89-498f-901b-884a1988c27f.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/83978879-0e89-498f-901b-884a1988c27f.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 22 Aug 2025 09:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:e1:96:71:9c:16:0c:d0:ae:c5:49:11:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=83978879-0e89-498f-901b-884a1988c27f
        Validity
            Not Before: Aug 17 01:00:32 2025 GMT
            Not After : Nov 15 02:00:32 2025 GMT
        Subject: CN=0029ff4b-a732-4cd6-a3c7-212e8bd3a59f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8f:bc:90:6d:5a:b9:0c:96:87:5a:37:a4:1c:5f:
                    f5:0f:41:f5:a8:4b:f5:a9:ef:9a:08:16:c9:cb:1c:
                    ba:88:83:05:bb:48:2f:60:56:8c:ac:2f:2e:e1:52:
                    e3:f0:bf:f5:3a:29:f9:cd:b1:35:aa:1e:bc:f8:81:
                    db:45:e6:d7:19:82:19:c2:67:34:86:7f:d6:38:87:
                    a5:e7:aa:13:f2:26:58:47:ba:55:8a:fb:e3:2c:1d:
                    d8:2d:22:98:57:9f:d5:e4:65:f2:b8:2e:5e:fd:0c:
                    67:3c:44:2e:af:4a:c7:2b:7b:56:f4:bc:68:5b:c1:
                    18:18:03:9e:dc:9f:76:69:7f:66:32:81:57:72:27:
                    c3:63:30:0e:bd:8a:a5:90:85:b9:77:97:a8:23:e8:
                    f1:5e:2b:36:11:e3:e0:28:74:53:aa:f5:6e:c0:ed:
                    22:fd:ff:18:f9:c5:a5:4e:3e:48:75:14:3d:e8:8d:
                    b3:70:97:10:5f:9f:9d:62:d0:d0:d4:5e:1f:d9:7a:
                    c0:a3:97:44:dd:7f:49:bb:7c:0c:e1:c4:87:51:1e:
                    4f:c0:35:20:92:52:fc:53:66:9f:54:49:ca:d6:c9:
                    9a:ac:ee:86:77:0c:8d:b3:75:ec:fa:34:fb:c6:4f:
                    d1:a0:50:a9:d9:7b:b4:c3:8b:33:af:af:c4:b4:93:
                    12:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B8:F2:46:53:E0:43:E8:85:AF:0A:B7:2A:04:5F:02:A0:60:D1:B7:61
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/83978879-0e89-498f-901b-884a1988c27f/a76e2a99-afef-387e-82e9-daf0c2b55c50.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/83978879-0e89-498f-901b-884a1988c27f/83978879-0e89-498f-901b-884a1988c27f.crl

            X509v3 Authority Key Identifier:
                keyid:F2:13:49:BC:1E:A5:6F:94:E9:9E:63:33:CC:53:1C:C5:F7:00:B9:E2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/83978879-0e89-498f-901b-884a1988c27f.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  209.33.65.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7b:c3:12:d5:2f:7f:89:e9:ef:0c:ae:90:72:9c:ff:6a:3b:f6:
         70:cf:b3:95:73:64:2d:79:e7:76:62:22:4d:b9:32:10:7d:a0:
         87:83:67:25:96:ab:5f:1f:6b:5f:8e:01:ad:00:a9:83:9a:03:
         24:49:a3:90:d3:39:7e:39:cc:ea:39:6e:f5:79:52:c0:f1:e2:
         7a:6f:da:6b:5c:8a:a3:e3:f8:58:af:df:73:28:2f:e3:3f:2d:
         f6:1e:1c:b3:c0:8e:e0:58:60:eb:d5:00:49:6e:4f:6a:1d:2c:
         b6:09:d3:20:8b:f4:b9:3e:13:36:cc:b7:fd:06:e1:58:20:36:
         96:ad:f2:1d:e4:76:d3:a9:3e:1b:47:31:1a:47:6a:43:b2:03:
         22:d6:75:cc:c7:36:9d:76:f1:db:5a:49:9b:28:3e:71:02:de:
         52:0c:2a:0f:c2:e0:56:67:35:1d:cc:b2:fa:91:68:b1:df:a2:
         52:61:c9:1d:cd:61:74:49:7e:9f:79:a7:96:59:04:52:c4:5f:
         94:84:4a:9c:cf:84:cb:ed:4e:fe:41:77:73:ea:9f:5f:51:13:
         af:60:f8:41:d1:54:06:37:cd:7d:2d:d9:cd:95:0f:a4:40:de:
         81:5f:2a:0f:72:4d:47:55:be:28:4c:16:4b:9b:7b:9f:72:30:
         66:3a:44:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 21 00:51:05 2025 by rpki-client