Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/927d18e8-718f-412b-a0b2-a97decff6f3f/bd8d42a6-65b5-3543-9f7a-3219e1a3608c.roa
File:                     bd8d42a6-65b5-3543-9f7a-3219e1a3608c.roa (raw, json)
Hash identifier:          l7garD3ZY+vFto+bWpZjOpYoMuPUFY/sfW7Ihyfwgrw=
Subject key identifier:   BF:D5:BC:02:79:AF:95:F2:93:3A:3A:D0:E4:CB:8B:D2:9E:C2:E2:70
Certificate issuer:       /CN=927d18e8-718f-412b-a0b2-a97decff6f3f
Certificate serial:       010D0C9F4328584957F41294572AE11055A3D100
Authority key identifier: 65:DD:C3:69:D5:D8:1B:0F:95:D5:AB:AD:7B:F5:30:38:B1:C0:60:04
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/927d18e8-718f-412b-a0b2-a97decff6f3f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/927d18e8-718f-412b-a0b2-a97decff6f3f/bd8d42a6-65b5-3543-9f7a-3219e1a3608c.roa
Signing time:             Sat 29 Mar 2025 01:00:39 +0000
ROA not before:           Sat 29 Mar 2025 01:00:39 +0000
ROA not after:            Fri 27 Jun 2025 01:00:39 +0000
asID:                     203963
IP address blocks:        162.33.167.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/927d18e8-718f-412b-a0b2-a97decff6f3f/927d18e8-718f-412b-a0b2-a97decff6f3f.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/927d18e8-718f-412b-a0b2-a97decff6f3f/927d18e8-718f-412b-a0b2-a97decff6f3f.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/927d18e8-718f-412b-a0b2-a97decff6f3f.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 17 Apr 2025 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:57:f4:12:94:57:2a:e1:10:55:a3:d1:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=927d18e8-718f-412b-a0b2-a97decff6f3f
        Validity
            Not Before: Mar 29 01:00:39 2025 GMT
            Not After : Jun 27 01:00:39 2025 GMT
        Subject: CN=2905a937-6018-4e25-9ed4-5d5adab76ffc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:2e:3a:2d:9b:15:ea:d0:9a:e4:a7:c6:ba:00:
                    22:30:83:ef:ee:6c:37:22:39:21:f7:d3:ff:bc:a4:
                    08:bb:76:f0:95:3e:c0:a8:f2:45:69:d8:c8:4a:5e:
                    db:c8:16:f5:22:26:a7:57:22:80:64:a9:10:48:cf:
                    65:93:c4:6b:ac:cf:8d:07:80:da:a4:3e:54:41:01:
                    1c:3c:63:48:0f:cb:d1:58:ba:87:c3:94:d1:c8:1a:
                    40:a6:7f:a0:74:ec:78:ba:9d:38:73:8f:81:27:dd:
                    11:7e:84:82:3d:94:03:ee:9a:0f:6a:60:12:4e:14:
                    08:29:bd:7f:85:dc:b1:49:c0:43:a9:b7:63:5e:e9:
                    cf:31:c2:d9:67:5e:cb:32:b6:c9:29:a6:b7:03:95:
                    39:6c:5d:5d:72:cf:da:41:a2:bd:aa:cd:7e:95:6b:
                    d5:35:95:28:73:d1:e5:28:0c:01:43:1b:2e:22:c4:
                    1d:02:2f:a5:bb:35:23:89:fe:52:35:de:b9:e1:33:
                    12:cc:59:6a:9a:fa:ca:a7:05:79:3e:c0:58:aa:78:
                    84:11:91:10:5a:62:31:62:f5:1a:d2:03:6d:e6:ed:
                    42:06:d6:e6:34:55:4c:7a:72:06:60:cb:da:eb:e4:
                    ba:24:0e:ce:01:f6:79:03:d6:2a:40:c5:c8:87:ca:
                    40:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BF:D5:BC:02:79:AF:95:F2:93:3A:3A:D0:E4:CB:8B:D2:9E:C2:E2:70
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/927d18e8-718f-412b-a0b2-a97decff6f3f/bd8d42a6-65b5-3543-9f7a-3219e1a3608c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/927d18e8-718f-412b-a0b2-a97decff6f3f/927d18e8-718f-412b-a0b2-a97decff6f3f.crl

            X509v3 Authority Key Identifier:
                keyid:65:DD:C3:69:D5:D8:1B:0F:95:D5:AB:AD:7B:F5:30:38:B1:C0:60:04

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/927d18e8-718f-412b-a0b2-a97decff6f3f.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  162.33.167.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         23:27:48:40:38:92:1f:a7:9a:4a:b9:07:1b:40:65:67:06:08:
         b7:7a:1f:a6:08:a4:88:23:9d:25:fe:23:73:1b:c7:da:73:16:
         07:52:c3:cb:32:a1:6b:64:26:f8:a2:51:be:84:0b:4e:51:dc:
         54:84:4a:94:50:ac:50:65:be:b8:4b:a0:d9:d8:4c:31:d3:6f:
         dc:39:b9:6c:fb:dd:b7:85:e4:a4:ab:1b:6e:1f:39:c7:b0:cb:
         48:e0:80:4b:2e:ce:7c:d8:bb:95:49:24:8f:20:90:c8:fa:98:
         5d:2d:89:61:5d:ba:bd:64:41:57:6a:df:4e:4e:b2:70:f5:d7:
         07:75:83:22:13:01:92:dd:03:a3:38:8b:c1:70:8f:1a:f5:28:
         b5:d7:01:3f:4a:57:a7:9d:3f:1d:44:58:cc:c8:4c:e1:8f:3e:
         3b:76:6f:b2:42:81:1e:78:ca:22:dd:b1:2c:0c:52:28:5a:2e:
         78:a3:67:96:6f:b7:8d:e4:df:8d:5f:09:5a:47:a3:cd:74:e2:
         6e:15:4d:61:d0:d6:e4:d5:24:4e:f6:ef:e1:1d:40:3c:e6:27:
         f6:ed:99:95:3d:d9:ee:e8:c7:01:82:cd:d9:a9:73:93:d8:54:
         05:93:26:a1:92:5d:93:44:10:b0:11:6f:ae:12:76:64:d5:87:
         71:cd:19:17
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 16 04:46:12 2025 by rpki-client