Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/4554e5fc-5f1a-4c73-9114-892ed5d050b8/33c88fb6-a5a8-3701-b0da-beb09c02cc41.roa
File:                     33c88fb6-a5a8-3701-b0da-beb09c02cc41.roa (raw, json)
Hash identifier:          8XY8fxZst5XdWt0xg/azsdDsfjxm/NwhJ7MHFzePQBc=
Subject key identifier:   3E:05:36:11:67:E5:5F:D0:4E:FE:C4:B8:5B:FD:0C:42:6E:D3:69:BC
Certificate issuer:       /CN=4554e5fc-5f1a-4c73-9114-892ed5d050b8
Certificate serial:       010D0C9F4328584B3D17C794A1FD9D5482832400
Authority key identifier: DF:E4:04:5A:26:83:9B:CC:57:89:D1:B0:17:50:5E:B5:8B:DA:46:6B
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/4554e5fc-5f1a-4c73-9114-892ed5d050b8.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/4554e5fc-5f1a-4c73-9114-892ed5d050b8/33c88fb6-a5a8-3701-b0da-beb09c02cc41.roa
Signing time:             Thu 18 Sep 2025 19:39:55 +0000
ROA not before:           Thu 18 Sep 2025 19:39:55 +0000
ROA not after:            Wed 17 Dec 2025 20:39:55 +0000
asID:                     11377
IP address blocks:        159.26.160.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/4554e5fc-5f1a-4c73-9114-892ed5d050b8/4554e5fc-5f1a-4c73-9114-892ed5d050b8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/4554e5fc-5f1a-4c73-9114-892ed5d050b8/4554e5fc-5f1a-4c73-9114-892ed5d050b8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/4554e5fc-5f1a-4c73-9114-892ed5d050b8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 20 Sep 2025 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:3d:17:c7:94:a1:fd:9d:54:82:83:24:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4554e5fc-5f1a-4c73-9114-892ed5d050b8
        Validity
            Not Before: Sep 18 19:39:55 2025 GMT
            Not After : Dec 17 20:39:55 2025 GMT
        Subject: CN=5b0e52c2-906e-4ff9-a5ec-a985409ae99f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:5b:a5:27:78:ea:e9:a9:0d:7c:9e:99:72:1f:
                    f3:15:83:41:c5:de:4c:60:3e:4d:31:3d:cb:d4:f4:
                    15:dd:9d:a0:93:87:c6:09:53:6a:16:87:c9:fc:47:
                    96:06:37:84:41:9a:b0:90:be:84:be:2a:0f:1e:44:
                    f9:a9:76:03:f9:86:cd:fc:b0:40:67:da:a7:4e:a1:
                    ff:9e:bd:ce:25:19:13:de:18:74:d7:50:66:9a:33:
                    fc:12:81:55:eb:7c:af:38:98:7c:33:25:b0:a8:37:
                    bf:bd:c5:c9:cc:c1:84:66:39:d2:ed:44:d4:6d:cb:
                    6e:5e:95:d5:48:85:ad:3c:e6:51:31:53:10:43:83:
                    0c:ba:b3:f0:f6:3d:4f:88:c0:66:ad:6f:98:94:ff:
                    43:10:c7:88:f5:32:58:25:33:a5:5b:95:c1:42:9b:
                    49:39:7e:e4:4a:06:22:0d:60:09:ef:4e:25:94:d0:
                    6e:d9:a3:8b:14:8e:f0:7b:6f:5b:56:fc:ba:48:ca:
                    36:46:65:8e:53:5c:73:5d:6d:87:ca:4d:eb:45:da:
                    62:23:be:37:1e:c6:d9:3e:4a:76:5c:a1:30:66:69:
                    02:ad:33:f0:b8:c8:ca:88:39:12:17:62:14:76:e3:
                    69:e9:c6:3e:98:7b:91:2a:bf:8b:e5:ac:b5:b1:72:
                    f0:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3E:05:36:11:67:E5:5F:D0:4E:FE:C4:B8:5B:FD:0C:42:6E:D3:69:BC
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/4554e5fc-5f1a-4c73-9114-892ed5d050b8/33c88fb6-a5a8-3701-b0da-beb09c02cc41.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/4554e5fc-5f1a-4c73-9114-892ed5d050b8/4554e5fc-5f1a-4c73-9114-892ed5d050b8.crl

            X509v3 Authority Key Identifier:
                keyid:DF:E4:04:5A:26:83:9B:CC:57:89:D1:B0:17:50:5E:B5:8B:DA:46:6B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/4554e5fc-5f1a-4c73-9114-892ed5d050b8.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  159.26.160.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         45:ab:bb:90:92:47:5a:ae:2c:0f:a7:14:ec:a6:ea:37:e4:e3:
         44:e0:2a:19:f5:c5:76:79:68:65:2b:cc:63:04:a5:e3:e2:97:
         0a:56:91:d1:46:55:1a:61:98:97:30:96:7c:77:46:72:6e:f7:
         8a:d6:c1:e0:b0:fc:34:02:39:c7:e9:03:3c:ed:ac:26:b1:47:
         a2:0a:4f:07:68:46:17:c5:39:05:6d:f1:a0:c0:67:fd:87:6b:
         34:2d:53:e9:b1:4a:6e:9c:f5:09:e7:81:ae:62:9a:4b:1d:ac:
         ea:56:c0:8b:b4:0f:66:9f:50:ba:22:32:36:bf:62:19:a3:8a:
         b3:3e:2a:f2:a4:1d:ed:b3:1f:08:72:8c:73:fa:6b:4a:53:39:
         c6:94:61:4e:03:a1:27:ce:88:13:86:ce:c1:e4:8e:00:8e:90:
         c9:08:2e:a7:1f:4a:53:37:e5:a5:24:a8:d6:87:00:83:8c:f0:
         bd:f6:b4:96:0d:80:fb:18:d9:a2:e9:77:f0:b1:84:aa:eb:3e:
         89:82:af:a1:84:fa:05:f1:f1:7c:c8:69:e1:d6:6d:55:48:c7:
         3d:e3:a5:39:f9:bf:6b:27:1c:da:51:23:42:d1:0d:bb:28:25:
         9d:14:b5:84:f0:98:ec:52:c4:71:27:db:03:68:5d:1a:ed:ea:
         8d:3f:38:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 19 16:04:48 2025 by rpki-client