Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d301c790-c1f4-4fd7-a939-1a8d2669b5b7/c77cf7a1-0a5f-3bcd-b021-37accf6e6544.roa
File:                     c77cf7a1-0a5f-3bcd-b021-37accf6e6544.roa (raw, json)
Hash identifier:          61pdjJ9Ql7r34WtKBvR1wzZjrnkSGwIJO2nFMA42xq0=
Subject key identifier:   43:F0:2C:34:0E:19:E2:F2:0D:D7:17:AD:5F:73:6B:AF:10:4D:D3:B5
Certificate issuer:       /CN=d301c790-c1f4-4fd7-a939-1a8d2669b5b7
Certificate serial:       010D0C9F4328584B110C060858498252CBD0E660
Authority key identifier: 36:15:5C:31:E0:37:DC:51:97:C8:D9:8A:A4:EE:58:5A:78:16:C9:2C
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d301c790-c1f4-4fd7-a939-1a8d2669b5b7.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d301c790-c1f4-4fd7-a939-1a8d2669b5b7/c77cf7a1-0a5f-3bcd-b021-37accf6e6544.roa
Signing time:             Wed 03 Sep 2025 01:00:33 +0000
ROA not before:           Wed 03 Sep 2025 01:00:33 +0000
ROA not after:            Tue 02 Dec 2025 02:00:33 +0000
asID:                     7018
IP address blocks:        170.205.33.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d301c790-c1f4-4fd7-a939-1a8d2669b5b7/d301c790-c1f4-4fd7-a939-1a8d2669b5b7.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d301c790-c1f4-4fd7-a939-1a8d2669b5b7/d301c790-c1f4-4fd7-a939-1a8d2669b5b7.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d301c790-c1f4-4fd7-a939-1a8d2669b5b7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 06 Sep 2025 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:11:0c:06:08:58:49:82:52:cb:d0:e6:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d301c790-c1f4-4fd7-a939-1a8d2669b5b7
        Validity
            Not Before: Sep  3 01:00:33 2025 GMT
            Not After : Dec  2 02:00:33 2025 GMT
        Subject: CN=4fdd53a4-ecd8-400c-b5c5-13c53aaf7f56
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:f3:e9:ae:5b:fb:17:6d:72:bf:5a:af:d9:06:
                    e1:ce:b9:72:06:81:25:3f:08:5d:1d:31:9e:0d:da:
                    81:7c:80:53:11:54:33:41:e5:6f:56:81:4e:2d:72:
                    5b:34:3c:1f:2c:b4:01:57:e3:d7:12:70:7d:be:4b:
                    e0:05:6c:3b:20:0e:2f:cf:ca:a6:e1:00:3f:4b:12:
                    5d:07:38:1b:3f:4f:7d:90:66:38:d9:46:9e:5d:ad:
                    f9:8c:b8:4f:56:c3:d2:83:58:f4:6d:7d:8e:33:ff:
                    75:10:ae:45:92:83:08:cc:f6:95:ce:5a:5d:59:08:
                    af:7f:9f:c2:ff:bc:60:70:02:46:54:d9:9e:1a:b7:
                    66:7f:60:52:93:8d:aa:ad:3c:ae:77:2e:4e:fc:05:
                    c9:ea:86:41:99:4a:ca:96:1f:4e:1e:e7:c6:08:3d:
                    b3:87:80:13:62:24:75:14:0c:49:0e:a5:19:77:03:
                    72:ae:d1:b5:78:80:8d:11:84:59:a0:0a:b6:8d:f5:
                    fe:fa:7a:55:11:ae:2d:82:5e:46:6f:d7:bf:36:c1:
                    f6:63:f6:9b:ed:bc:c6:bb:4d:cd:6b:ed:c0:93:5b:
                    2a:46:e7:fe:5d:74:99:cd:c5:f5:94:50:cd:bc:9f:
                    e7:7c:4d:fe:8c:1a:ae:96:0c:0e:d9:00:1a:55:e5:
                    75:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                43:F0:2C:34:0E:19:E2:F2:0D:D7:17:AD:5F:73:6B:AF:10:4D:D3:B5
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d301c790-c1f4-4fd7-a939-1a8d2669b5b7/c77cf7a1-0a5f-3bcd-b021-37accf6e6544.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d301c790-c1f4-4fd7-a939-1a8d2669b5b7/d301c790-c1f4-4fd7-a939-1a8d2669b5b7.crl

            X509v3 Authority Key Identifier:
                keyid:36:15:5C:31:E0:37:DC:51:97:C8:D9:8A:A4:EE:58:5A:78:16:C9:2C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d301c790-c1f4-4fd7-a939-1a8d2669b5b7.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.205.33.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3f:48:2c:e4:96:e7:05:ca:c7:79:38:51:ad:07:6c:bf:db:4d:
         06:20:77:91:24:b9:4a:0d:c2:10:ef:c4:7d:46:4c:25:9f:d7:
         69:14:9a:c6:53:41:0c:b8:ad:11:fc:53:ac:29:ad:d3:c2:9a:
         b8:fe:af:9c:9c:d5:52:31:90:05:62:8e:ec:2a:10:a2:1e:6c:
         46:56:9c:e1:bd:34:f0:4f:92:8e:ed:d7:1e:d5:91:e1:17:a4:
         24:20:2b:bb:40:63:f8:a0:18:65:16:a8:bb:9b:10:28:69:39:
         07:fd:d9:68:b0:24:0a:50:87:d3:ae:74:a8:8e:28:07:a8:d5:
         30:2b:89:8a:31:aa:d4:44:62:ba:c0:6e:27:47:b0:ef:3a:6c:
         d1:ba:73:d5:38:3c:78:15:dd:90:07:bb:52:b9:31:d8:ee:e2:
         50:8e:33:3e:65:ef:7c:51:40:58:50:9a:19:02:66:46:ef:bb:
         64:64:84:fd:fb:70:9d:5d:95:89:2f:9e:4c:5a:ae:0a:c0:48:
         f0:2a:1b:5d:cf:99:cd:3c:bf:e3:ca:fe:35:b9:64:1f:f7:94:
         2e:4c:07:d6:49:63:6d:3e:0e:1e:d6:3f:03:93:56:57:62:3c:
         e9:08:7c:f8:68:6a:c3:49:dc:17:45:9b:44:50:84:e3:73:b8:
         44:8a:78:d0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 5 09:55:57 2025 by rpki-client