Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/5220b09e-5f88-34fd-bc48-e14744d30f5c.roa
File:                     5220b09e-5f88-34fd-bc48-e14744d30f5c.roa (raw, json)
Hash identifier:          0WoUDX8si6pyKInoNoVnHfdLDD4OxGB7E4Y/iq22TJ8=
Subject key identifier:   EF:2A:3A:1F:5B:F5:AD:87:1C:6C:3C:AC:2C:E4:8E:C4:EB:43:65:B8
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F4328584AECC3D7F4EB01B190760B7680
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/5220b09e-5f88-34fd-bc48-e14744d30f5c.roa
Signing time:             Thu 21 Aug 2025 01:00:33 +0000
ROA not before:           Thu 21 Aug 2025 01:00:33 +0000
ROA not after:            Wed 19 Nov 2025 02:00:33 +0000
asID:                     33287
IP address blocks:        69.139.88.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 26 Aug 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:ec:c3:d7:f4:eb:01:b1:90:76:0b:76:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Aug 21 01:00:33 2025 GMT
            Not After : Nov 19 02:00:33 2025 GMT
        Subject: CN=c2272f25-1bce-49c5-822f-f3acfffb2426
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dc:f6:b3:8a:49:5f:20:2b:a2:fb:2f:3c:6d:ba:
                    47:38:d7:ad:a5:d4:36:d3:6d:cb:ba:78:6d:f4:25:
                    02:59:db:4b:09:b8:7a:7e:bd:a5:f7:c3:c0:96:f1:
                    93:12:7a:07:af:0b:f0:0c:43:34:d3:c5:e1:25:cc:
                    bd:d4:98:c2:ca:ee:56:e2:eb:67:60:f4:44:6b:79:
                    40:d4:ec:bf:06:eb:2d:67:e8:10:97:9f:b1:35:45:
                    00:bf:24:27:8c:81:01:3b:d3:56:85:3a:9c:d2:dd:
                    c5:a7:5f:d4:c8:54:aa:4f:23:31:2b:5d:f8:b5:a9:
                    fc:4f:0d:47:d5:b0:20:3c:e4:23:40:be:03:5e:d4:
                    5e:9e:f2:fb:b5:a7:7b:8b:56:c6:09:f4:e9:fc:21:
                    b7:1b:30:14:59:4d:1b:61:77:77:99:e8:d6:0a:bb:
                    82:41:7b:6f:2d:d3:54:50:16:58:16:45:38:d9:c4:
                    0b:ba:8d:bc:21:ec:83:f4:df:ea:fa:d2:d4:c4:ca:
                    c4:db:53:37:11:a5:5a:7d:4c:af:7b:ec:98:0a:ca:
                    b0:53:ae:ae:61:70:fd:d7:15:84:83:e7:e7:5e:72:
                    a5:87:e1:9a:79:f5:7c:aa:18:3c:f6:7b:97:ae:b6:
                    33:af:f3:81:e0:3a:84:54:58:ae:e0:96:15:8d:b0:
                    4d:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EF:2A:3A:1F:5B:F5:AD:87:1C:6C:3C:AC:2C:E4:8E:C4:EB:43:65:B8
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/5220b09e-5f88-34fd-bc48-e14744d30f5c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  69.139.88.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         cb:3e:3e:31:fb:80:fe:00:f0:d2:bc:00:be:45:96:92:6b:89:
         9c:0c:46:14:07:9b:62:cd:69:59:81:d8:ff:2f:8c:d6:af:64:
         27:48:a9:bf:44:33:d7:dd:d6:90:31:d8:a0:f9:94:ed:3e:6b:
         9a:27:a0:f3:74:d1:85:cc:18:48:08:e1:70:c4:f1:2e:81:4b:
         f9:e2:0e:a7:22:10:42:d2:78:43:3c:d6:5f:28:62:10:b0:64:
         2c:33:ae:60:c6:e1:fa:eb:fd:42:33:34:47:c4:32:cf:67:3b:
         cf:cb:e9:85:b6:63:16:4b:3c:54:b0:3a:1d:37:58:c2:40:4b:
         98:bc:32:3b:5d:01:a0:20:d7:2e:59:b1:83:35:27:8a:8f:68:
         d4:14:c4:f5:f9:50:ef:06:94:79:68:3d:af:f4:ee:85:c5:31:
         83:7c:8a:51:47:8d:33:4f:d3:f2:7d:07:6b:80:14:39:8a:ca:
         60:0c:ea:6b:a4:42:cf:7b:d1:76:a7:4b:68:7d:b0:68:4c:e0:
         87:a4:62:a2:e7:e9:a2:23:cf:61:07:96:0d:9c:45:5d:3c:89:
         91:23:0e:8a:64:4f:28:3f:d3:d0:bf:8e:ac:44:e3:07:e1:3b:
         ed:0d:04:d2:56:26:9c:bf:48:92:91:ed:a8:c1:01:3f:53:dc:
         a1:89:69:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 24 01:11:10 2025 by rpki-client