Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/927d18e8-718f-412b-a0b2-a97decff6f3f/e171695c-a516-3cab-bccd-964772c69782.roa
File:                     e171695c-a516-3cab-bccd-964772c69782.roa (raw, json)
Hash identifier:          0CxBGT/dGRSZ0FYjkodgPVZDyE9/3r2YJDTNNP5Y0bw=
Subject key identifier:   E4:C3:2F:B0:A9:DA:D0:F2:A9:0F:AB:3A:DC:31:B3:DB:28:A4:A3:22
Certificate issuer:       /CN=927d18e8-718f-412b-a0b2-a97decff6f3f
Certificate serial:       010D0C9F4328584EA78F4879F8E644E319517600
Authority key identifier: 65:DD:C3:69:D5:D8:1B:0F:95:D5:AB:AD:7B:F5:30:38:B1:C0:60:04
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/927d18e8-718f-412b-a0b2-a97decff6f3f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/927d18e8-718f-412b-a0b2-a97decff6f3f/e171695c-a516-3cab-bccd-964772c69782.roa
Signing time:             Wed 29 Jul 2026 01:00:12 +0000
ROA not before:           Wed 29 Jul 2026 01:00:12 +0000
ROA not after:            Tue 27 Oct 2026 01:00:12 +0000
asID:                     10753
IP address blocks:        162.33.166.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/927d18e8-718f-412b-a0b2-a97decff6f3f/927d18e8-718f-412b-a0b2-a97decff6f3f.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/927d18e8-718f-412b-a0b2-a97decff6f3f/927d18e8-718f-412b-a0b2-a97decff6f3f.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/927d18e8-718f-412b-a0b2-a97decff6f3f.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 06 Sep 2026 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:a7:8f:48:79:f8:e6:44:e3:19:51:76:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=927d18e8-718f-412b-a0b2-a97decff6f3f
        Validity
            Not Before: Jul 29 01:00:12 2026 GMT
            Not After : Oct 27 01:00:12 2026 GMT
        Subject: CN=3a56d4fc-2e14-4eb9-8e59-5f50e2706493
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:16:d4:aa:bb:a5:aa:24:27:0d:cb:49:32:d7:
                    dc:8d:1b:30:ce:29:8b:26:11:0f:78:64:62:99:7d:
                    10:4e:ed:05:59:ef:53:c3:26:94:fc:95:5d:8b:f8:
                    3d:4c:8b:27:b4:02:97:0e:fb:4e:91:25:4a:f0:96:
                    00:e7:69:f8:13:30:c5:60:b4:cb:f6:65:da:8b:be:
                    e2:9a:29:27:a8:35:55:ba:be:ca:91:8f:42:7c:51:
                    9d:0b:86:b9:71:6f:12:a6:1c:79:0e:26:f0:f1:b4:
                    53:f8:c2:34:5e:42:ad:ea:ff:b7:6f:c9:75:f2:06:
                    56:c1:ef:9c:27:31:b2:3c:a9:01:d9:6f:cc:1d:3e:
                    0f:fa:be:90:1e:0f:bc:d2:95:ce:9e:f9:6e:90:9e:
                    b0:78:df:c4:6a:3b:6c:5e:26:9a:d7:aa:02:ec:79:
                    f9:63:88:8b:81:38:ff:da:78:da:c7:97:a0:e2:66:
                    bd:04:82:39:1a:6b:62:fe:98:3c:af:4b:21:85:c7:
                    e7:71:6d:4d:71:49:a4:20:dc:9f:cd:17:d7:7b:07:
                    b8:55:db:58:ac:23:fc:3b:15:67:7f:db:f1:a0:05:
                    12:d9:9c:19:7f:99:0f:e7:b2:93:28:c9:15:38:4e:
                    86:f5:9b:02:72:13:33:58:44:ab:e5:07:0c:ef:f4:
                    e9:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E4:C3:2F:B0:A9:DA:D0:F2:A9:0F:AB:3A:DC:31:B3:DB:28:A4:A3:22
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/927d18e8-718f-412b-a0b2-a97decff6f3f/e171695c-a516-3cab-bccd-964772c69782.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/927d18e8-718f-412b-a0b2-a97decff6f3f/927d18e8-718f-412b-a0b2-a97decff6f3f.crl

            X509v3 Authority Key Identifier:
                keyid:65:DD:C3:69:D5:D8:1B:0F:95:D5:AB:AD:7B:F5:30:38:B1:C0:60:04

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/927d18e8-718f-412b-a0b2-a97decff6f3f.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  162.33.166.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         61:b9:74:20:7d:a4:5a:f3:be:d3:0d:d4:55:8f:bf:5e:97:0f:
         67:ca:af:9e:f3:80:45:29:02:d0:11:94:af:e9:ab:09:be:5e:
         39:a4:5e:5c:9c:0d:e8:97:4d:1b:de:4b:97:c4:87:44:ca:21:
         28:af:94:f7:ad:47:7e:60:fd:eb:3c:e5:69:60:9c:8c:f7:cb:
         b7:06:63:05:3c:9a:bf:a4:85:6d:0f:51:be:45:0b:01:e1:c7:
         a6:24:ac:51:d1:87:3c:3e:c0:3c:ee:77:35:e5:a5:e8:c7:3b:
         b7:2b:d0:3c:d9:11:43:39:95:c3:03:9b:4a:c9:58:70:c6:c9:
         eb:60:c6:4b:27:4b:bd:91:5e:a3:43:79:9d:8d:5c:64:3b:d9:
         04:e4:68:f8:62:ed:5e:d9:da:3a:5e:98:3a:ff:6b:73:21:9c:
         03:6f:41:f1:73:52:df:2a:f2:7f:fc:b2:9c:84:93:72:f7:7f:
         55:b5:be:2b:bf:48:a1:c3:e3:cf:1c:6f:c6:06:78:9f:f1:2a:
         99:7a:86:93:7c:b1:c7:66:79:48:ed:23:86:47:6b:3b:db:7b:
         e3:df:0a:d7:41:3a:41:87:b9:39:18:ec:5a:e7:a5:90:7e:96:
         95:dd:ce:0e:be:db:c2:f6:1d:30:c2:e3:8e:33:2c:d8:1a:dc:
         be:d6:da:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 5 02:45:28 2026 by rpki-client