Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4edd6357-2935-4b92-8130-68071d4eaf01/49bbe62e-dbe4-39c1-a737-53299cd7ce97.roa
File:                     49bbe62e-dbe4-39c1-a737-53299cd7ce97.roa (raw, json)
Hash identifier:          lC7obaGGsGD0Z+kHPWCw5ukkxjxCzFlQpiPJ8BRPkT8=
Subject key identifier:   19:2F:D9:15:06:49:59:7E:9E:E9:7A:91:F8:14:5F:C3:26:76:9F:7F
Certificate issuer:       /CN=4edd6357-2935-4b92-8130-68071d4eaf01
Certificate serial:       010D0C9F4328584B8BE21135F024997279702380
Authority key identifier: 0C:50:4D:48:49:67:68:5C:71:1A:A1:6A:4F:32:0F:F5:18:64:07:0D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4edd6357-2935-4b92-8130-68071d4eaf01.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4edd6357-2935-4b92-8130-68071d4eaf01/49bbe62e-dbe4-39c1-a737-53299cd7ce97.roa
Signing time:             Fri 17 Oct 2025 01:00:30 +0000
ROA not before:           Fri 17 Oct 2025 01:00:30 +0000
ROA not after:            Thu 15 Jan 2026 02:00:30 +0000
asID:                     4181
IP address blocks:        208.73.88.0/21 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4edd6357-2935-4b92-8130-68071d4eaf01/4edd6357-2935-4b92-8130-68071d4eaf01.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4edd6357-2935-4b92-8130-68071d4eaf01/4edd6357-2935-4b92-8130-68071d4eaf01.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4edd6357-2935-4b92-8130-68071d4eaf01.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:8b:e2:11:35:f0:24:99:72:79:70:23:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4edd6357-2935-4b92-8130-68071d4eaf01
        Validity
            Not Before: Oct 17 01:00:30 2025 GMT
            Not After : Jan 15 02:00:30 2026 GMT
        Subject: CN=3c8d952f-9071-49f0-b688-5d0264e620a7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:85:99:67:8e:4b:cb:30:ff:a7:f1:da:80:5c:8a:
                    79:0b:0c:89:2b:6e:21:db:94:c7:59:66:b9:d2:b1:
                    be:9c:30:33:14:a1:dc:bf:32:0c:d5:a0:a5:8d:f8:
                    5b:bc:ec:6a:ff:e5:ed:49:3a:15:6d:43:fc:2c:88:
                    be:15:34:e4:c2:73:4b:27:ae:b0:ca:f9:45:7b:b0:
                    eb:31:84:d0:84:c7:5a:d8:64:b8:a5:09:56:46:de:
                    26:5a:1d:30:17:31:8e:8a:58:e4:39:87:8c:6a:0d:
                    db:a1:c6:b2:87:53:7e:14:6f:7b:7f:4c:15:aa:90:
                    61:77:88:84:0c:60:19:cd:cc:ab:c7:78:ea:ab:6b:
                    24:72:6a:9f:ba:ac:6d:c0:ef:2e:94:77:1e:27:5d:
                    e7:a4:2f:c5:f7:e0:cd:42:7e:59:2e:64:3d:3d:b8:
                    1a:6e:4f:c6:45:15:4f:83:90:80:6a:a1:4e:12:dc:
                    ed:eb:3a:7d:2a:4c:9a:79:9f:6e:dd:b7:6a:7c:3b:
                    56:7b:6a:5b:f7:3b:50:37:18:2a:41:05:26:5d:5d:
                    51:af:5d:40:9b:c9:0e:1d:b0:2f:83:86:c4:12:34:
                    94:0e:dd:bf:29:5c:66:d1:5f:0c:82:86:15:ce:74:
                    3e:db:7a:0e:b6:09:86:f0:b5:83:96:52:f1:5d:96:
                    8f:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                19:2F:D9:15:06:49:59:7E:9E:E9:7A:91:F8:14:5F:C3:26:76:9F:7F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4edd6357-2935-4b92-8130-68071d4eaf01/49bbe62e-dbe4-39c1-a737-53299cd7ce97.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4edd6357-2935-4b92-8130-68071d4eaf01/4edd6357-2935-4b92-8130-68071d4eaf01.crl

            X509v3 Authority Key Identifier:
                keyid:0C:50:4D:48:49:67:68:5C:71:1A:A1:6A:4F:32:0F:F5:18:64:07:0D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4edd6357-2935-4b92-8130-68071d4eaf01.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  208.73.88.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         9c:e1:a5:b6:31:7e:23:6e:b3:67:bf:4f:1c:44:cc:a3:34:8f:
         60:6e:7c:b6:59:5b:89:d9:a6:3a:51:17:df:aa:89:e0:b9:6d:
         a3:42:6f:51:67:9b:11:0a:10:2c:22:c3:d4:1f:c8:69:0c:50:
         fe:fd:6e:a4:07:f0:30:ee:3b:6f:9a:b8:b6:3c:52:2b:f7:e3:
         8b:e5:bc:d5:1c:2a:7f:2d:f0:5b:75:0e:02:04:a0:b4:5c:21:
         c0:25:d5:af:7e:83:0a:55:df:7e:78:2e:5c:cc:db:6b:39:8f:
         76:db:34:e9:7c:a5:26:8a:f4:58:9f:c9:32:3e:2b:12:65:4a:
         29:a5:77:ac:a5:19:ad:c8:29:3a:93:6e:43:af:2c:65:c4:5f:
         30:9c:18:e2:13:af:11:1c:83:c0:12:f8:64:b2:30:3d:68:6c:
         37:37:eb:9f:de:e2:29:46:3e:f1:1d:03:b0:cd:86:b1:42:d0:
         b6:a1:96:5d:2a:ef:71:1e:02:06:f6:fb:3e:e1:23:67:8b:9f:
         e1:a1:44:c4:10:1e:4b:a0:3a:91:b3:d4:68:ed:59:e3:04:2b:
         4c:7b:e4:84:60:6b:b1:a8:f7:e5:48:41:18:90:18:ee:9f:a4:
         26:61:f3:c9:0e:49:27:de:a1:d2:7f:46:75:49:b5:49:fc:9c:
         42:dd:a2:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 08:49:55 2025 by rpki-client