Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/528385d7-74c5-424c-a337-95b993622fcc/37e379c2-123b-325c-ac07-0f1c59aac703.roa
File:                     37e379c2-123b-325c-ac07-0f1c59aac703.roa (raw, json)
Hash identifier:          vza3vfpzbVn6UnFbwluTF7Oj2h0EwWIowlgEn+IRMjI=
Subject key identifier:   2D:40:23:05:0C:8E:B4:4A:9F:06:57:2C:4C:47:7F:45:4C:27:C8:8A
Certificate issuer:       /CN=528385d7-74c5-424c-a337-95b993622fcc
Certificate serial:       010D0C9F4328584A74B5D657D23E7AE9D5373894
Authority key identifier: B7:65:4B:42:01:41:71:E9:72:CE:6D:28:96:A4:93:25:D5:58:6E:CA
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/528385d7-74c5-424c-a337-95b993622fcc.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/528385d7-74c5-424c-a337-95b993622fcc/37e379c2-123b-325c-ac07-0f1c59aac703.roa
Signing time:             Wed 09 Jul 2025 01:00:49 +0000
ROA not before:           Wed 09 Jul 2025 01:00:49 +0000
ROA not after:            Tue 07 Oct 2025 01:00:49 +0000
asID:                     16509
IP address blocks:        162.216.126.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/528385d7-74c5-424c-a337-95b993622fcc/528385d7-74c5-424c-a337-95b993622fcc.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/528385d7-74c5-424c-a337-95b993622fcc/528385d7-74c5-424c-a337-95b993622fcc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/528385d7-74c5-424c-a337-95b993622fcc.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 12 Jul 2025 18:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:74:b5:d6:57:d2:3e:7a:e9:d5:37:38:94
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=528385d7-74c5-424c-a337-95b993622fcc
        Validity
            Not Before: Jul  9 01:00:49 2025 GMT
            Not After : Oct  7 01:00:49 2025 GMT
        Subject: CN=f0eeb89d-0b43-47af-8dbf-ed77e418e72f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:88:6d:24:2c:2f:1c:92:91:3a:35:3d:ae:d7:60:
                    99:bc:21:f1:bf:8b:2b:8f:4e:25:19:1a:c4:38:f5:
                    2e:3c:9a:65:81:e5:24:56:e9:04:06:8a:39:c7:98:
                    61:1a:bb:56:81:d7:e6:cb:76:b7:59:b7:8b:f6:34:
                    b3:63:ea:bf:7d:80:25:ad:6f:5c:a0:fe:f5:97:3a:
                    58:b9:ae:a7:8d:4a:9a:4b:2d:3b:5a:1e:b1:54:a1:
                    55:ee:d6:b0:b7:2a:21:ef:0c:9a:ef:92:40:81:a4:
                    92:06:df:3d:9c:82:c0:cd:e2:0c:cd:0e:46:25:b1:
                    29:e9:70:71:4e:2c:96:dc:bf:f1:38:18:4c:10:da:
                    ac:43:4f:15:9e:66:7a:bb:52:54:b2:58:52:31:75:
                    fb:7c:37:e3:33:2b:19:80:3b:5b:45:9b:74:6f:f1:
                    78:fd:4b:1b:41:ce:2e:d9:76:70:fe:be:78:fc:32:
                    60:cc:0a:7e:36:c2:59:63:85:b3:af:46:91:7a:80:
                    0b:8b:4d:f7:0a:a3:08:ac:9b:f5:55:38:b6:4c:1d:
                    39:a7:41:96:61:60:2a:bb:4a:aa:87:45:d1:c9:10:
                    79:f1:38:ce:0d:35:40:f0:71:d0:98:27:e1:69:1e:
                    5a:8a:7b:71:8d:77:21:8e:b2:b7:17:0a:74:50:6e:
                    d5:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2D:40:23:05:0C:8E:B4:4A:9F:06:57:2C:4C:47:7F:45:4C:27:C8:8A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/528385d7-74c5-424c-a337-95b993622fcc/37e379c2-123b-325c-ac07-0f1c59aac703.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/528385d7-74c5-424c-a337-95b993622fcc/528385d7-74c5-424c-a337-95b993622fcc.crl

            X509v3 Authority Key Identifier:
                keyid:B7:65:4B:42:01:41:71:E9:72:CE:6D:28:96:A4:93:25:D5:58:6E:CA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/528385d7-74c5-424c-a337-95b993622fcc.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  162.216.126.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0d:5c:e7:dc:90:aa:f2:89:e1:0a:95:d3:4e:66:ac:f3:db:e9:
         70:07:47:53:57:17:93:ae:d1:76:99:30:1c:1a:5d:53:87:8f:
         32:d0:f9:64:a1:5b:a5:b3:a8:d8:61:47:c7:96:fe:82:a8:82:
         43:33:e4:d4:31:a5:94:8c:96:52:3a:fe:f4:0f:44:38:e4:af:
         50:6b:17:c9:76:08:28:fc:27:8d:df:46:ea:8d:ee:37:c9:30:
         b5:76:57:86:2c:3a:41:48:b6:2e:74:60:95:b4:4e:bb:3e:07:
         e4:2b:33:ff:b4:e9:85:2e:6d:5a:fd:bd:d4:cd:d9:f4:00:20:
         74:ff:a3:5f:9d:79:0d:6d:24:b7:7d:09:63:cb:33:72:28:a6:
         5a:32:70:ee:6b:0c:20:d1:90:71:b6:e4:ac:ac:ab:1e:1d:ae:
         91:7c:a5:8b:9d:31:25:5b:fe:47:97:84:e1:17:3e:9b:22:bb:
         86:42:50:69:64:fd:2c:47:fa:18:7b:66:6a:7d:54:3b:6c:3f:
         70:fc:5d:69:33:72:de:ec:64:b3:02:ff:3f:67:29:c3:f7:74:
         8a:da:78:8a:ad:30:67:0d:4f:ca:ad:b5:24:35:5c:41:f5:b2:
         aa:54:38:1a:2d:78:fb:a7:23:ce:e8:5a:7b:f0:08:91:d6:bf:
         ca:4f:dc:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 11 05:22:48 2025 by rpki-client