Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2b88d4e5-7adf-42ce-bae8-7267f62e2698/2abc3599-3a4c-3a0f-b547-946093bc9bd4.roa
File:                     2abc3599-3a4c-3a0f-b547-946093bc9bd4.roa (raw, json)
Hash identifier:          b7rVRgzYnS4R+PH868Ge5HOnX78vJN/rR6OaXjWqXCc=
Subject key identifier:   9D:73:FD:3F:1A:1B:7B:80:C9:36:88:42:D2:20:86:F6:66:9D:9F:3B
Certificate issuer:       /CN=2b88d4e5-7adf-42ce-bae8-7267f62e2698
Certificate serial:       010D0C9F4328584AE461123320D81A4DCBCDDC40
Authority key identifier: E6:E1:E2:8C:2C:AC:79:DA:B0:DE:34:EB:3C:F2:AE:DB:37:41:33:03
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2b88d4e5-7adf-42ce-bae8-7267f62e2698.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2b88d4e5-7adf-42ce-bae8-7267f62e2698/2abc3599-3a4c-3a0f-b547-946093bc9bd4.roa
Signing time:             Mon 18 Aug 2025 01:00:33 +0000
ROA not before:           Mon 18 Aug 2025 01:00:33 +0000
ROA not after:            Sun 16 Nov 2025 02:00:33 +0000
asID:                     14061
IP address blocks:        147.182.128.0/17 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2b88d4e5-7adf-42ce-bae8-7267f62e2698/2b88d4e5-7adf-42ce-bae8-7267f62e2698.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2b88d4e5-7adf-42ce-bae8-7267f62e2698/2b88d4e5-7adf-42ce-bae8-7267f62e2698.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2b88d4e5-7adf-42ce-bae8-7267f62e2698.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 26 Aug 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:e4:61:12:33:20:d8:1a:4d:cb:cd:dc:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2b88d4e5-7adf-42ce-bae8-7267f62e2698
        Validity
            Not Before: Aug 18 01:00:33 2025 GMT
            Not After : Nov 16 02:00:33 2025 GMT
        Subject: CN=77330313-967b-41cc-ad47-ec9a33a5cdc0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8f:3f:00:fa:ff:88:c9:67:f3:d2:89:6f:09:94:
                    c3:7b:3b:10:64:09:ce:eb:98:6f:56:d6:f9:a3:6f:
                    21:6e:31:68:c3:75:be:9c:2a:26:45:a9:29:27:ae:
                    c3:70:a8:4e:49:81:1f:b4:65:df:36:d9:17:f3:8f:
                    07:42:ef:2e:3c:95:29:f6:a6:94:77:69:fc:dc:ec:
                    31:f9:8e:d1:18:62:3b:79:ce:3f:ab:e6:20:7c:8e:
                    4b:c8:12:f5:6a:f5:54:97:16:46:79:9b:db:fc:51:
                    e1:84:8e:53:7f:89:ee:e3:b6:ea:23:0e:f8:cb:47:
                    b6:fe:bf:ec:24:f4:a0:9b:e3:c0:6d:8a:e5:fe:78:
                    07:97:2d:a1:f5:74:7e:0b:8a:d6:ef:16:e1:da:3f:
                    16:56:5e:e7:36:f9:21:66:00:17:59:d4:c4:54:2d:
                    55:7f:de:75:54:fb:6b:65:a3:59:fa:8e:47:b4:c2:
                    67:4c:62:ab:8b:44:f6:78:cc:f9:3c:7b:f5:1c:40:
                    57:e2:14:15:f9:70:07:30:74:c6:52:38:60:cd:5d:
                    84:cd:c9:7b:af:b6:a5:58:18:18:f6:9c:c2:64:9c:
                    8b:ec:c2:a5:65:8d:b5:72:2b:49:ad:b5:17:c1:74:
                    38:a5:25:2b:f4:46:51:38:51:7d:de:9c:64:ea:4a:
                    92:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9D:73:FD:3F:1A:1B:7B:80:C9:36:88:42:D2:20:86:F6:66:9D:9F:3B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2b88d4e5-7adf-42ce-bae8-7267f62e2698/2abc3599-3a4c-3a0f-b547-946093bc9bd4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2b88d4e5-7adf-42ce-bae8-7267f62e2698/2b88d4e5-7adf-42ce-bae8-7267f62e2698.crl

            X509v3 Authority Key Identifier:
                keyid:E6:E1:E2:8C:2C:AC:79:DA:B0:DE:34:EB:3C:F2:AE:DB:37:41:33:03

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2b88d4e5-7adf-42ce-bae8-7267f62e2698.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  147.182.128.0/17

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         01:be:0f:a1:44:e7:a9:07:7b:8b:24:f5:16:13:50:38:98:f6:
         51:9d:10:bb:38:05:c3:4f:77:92:b1:5f:de:1a:bf:71:10:5d:
         af:f5:0a:72:f4:78:cc:cf:a6:62:f8:5f:53:9a:91:1d:40:da:
         ff:4f:77:03:79:79:0f:16:49:cf:e1:9d:45:f3:cf:2e:9c:8e:
         31:76:82:3d:1d:e5:e1:46:ef:f1:06:dc:84:31:a5:cf:7b:72:
         f7:23:06:df:1e:7c:f9:1e:7a:05:2b:24:b5:81:35:5d:9d:11:
         dd:cb:2f:07:19:b5:ac:56:77:6a:71:2c:ed:12:52:82:37:97:
         5a:23:cb:d8:99:ea:cb:ac:06:b1:95:6c:1f:15:ce:91:c7:3f:
         68:db:85:18:cf:82:c4:63:b0:58:a8:8d:db:61:8d:7f:9a:b0:
         75:d2:2d:12:e8:89:10:3e:8f:86:86:df:96:31:ea:85:d8:f4:
         13:02:46:c8:dc:fe:ed:2a:42:9f:f5:04:97:38:13:a3:0a:50:
         81:7f:16:96:66:cf:72:ae:1a:7e:55:7e:c6:16:95:dc:41:12:
         c2:b6:56:5d:ef:b1:0c:df:6d:c2:f5:fc:a8:53:f8:8b:d5:33:
         52:56:56:22:1c:04:87:95:f9:b5:8e:51:1e:28:0a:df:a1:b8:
         56:85:fa:28
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 17:50:34 2025 by rpki-client