Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/88842878-1050-4df7-822b-ea8ec25db83d/d5e6fb4e-ff80-3867-a502-ebaa6e05079d.roa
File:                     d5e6fb4e-ff80-3867-a502-ebaa6e05079d.roa (raw, json)
Hash identifier:          1ojM6SWD/NbhAJd7X8L3JeT5QT27Y3sCFIgBU0CZEN8=
Subject key identifier:   6B:A7:89:F7:D1:AA:F3:73:71:69:A3:C6:A2:BA:A3:6B:4A:14:F1:E0
Certificate issuer:       /CN=88842878-1050-4df7-822b-ea8ec25db83d
Certificate serial:       010D0C9F4328584A23C00650FF3C603361EC4840
Authority key identifier: 0A:F4:2F:69:20:F1:AA:D7:6D:67:3C:86:9A:04:C8:80:1E:AD:7D:99
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/88842878-1050-4df7-822b-ea8ec25db83d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/88842878-1050-4df7-822b-ea8ec25db83d/d5e6fb4e-ff80-3867-a502-ebaa6e05079d.roa
Signing time:             Tue 10 Jun 2025 01:00:50 +0000
ROA not before:           Tue 10 Jun 2025 01:00:50 +0000
ROA not after:            Mon 08 Sep 2025 01:00:50 +0000
asID:                     2495
IP address blocks:        198.248.172.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/88842878-1050-4df7-822b-ea8ec25db83d/88842878-1050-4df7-822b-ea8ec25db83d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/88842878-1050-4df7-822b-ea8ec25db83d/88842878-1050-4df7-822b-ea8ec25db83d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/88842878-1050-4df7-822b-ea8ec25db83d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 03 Jul 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:23:c0:06:50:ff:3c:60:33:61:ec:48:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=88842878-1050-4df7-822b-ea8ec25db83d
        Validity
            Not Before: Jun 10 01:00:50 2025 GMT
            Not After : Sep  8 01:00:50 2025 GMT
        Subject: CN=1cee2395-fb6a-46a1-bc69-1559c085133d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8d:aa:b8:6e:07:fb:c4:15:76:fc:0d:cc:b2:85:
                    7b:5a:66:05:6b:19:f3:22:c8:24:3d:fe:8d:ea:0b:
                    c7:30:85:31:7f:bb:cb:7b:d4:09:fd:64:dc:b8:6d:
                    62:82:00:a9:fa:b5:4c:73:16:0e:32:17:3a:40:2d:
                    9a:fc:12:d4:52:bb:be:cd:01:29:2b:5e:c0:ba:19:
                    bb:f4:39:25:e6:8c:32:6c:e9:d8:75:1c:66:2f:fa:
                    71:0d:e1:d6:1a:fb:f9:a5:bf:62:01:09:e8:fd:e6:
                    b8:2c:ba:60:a8:d2:fe:63:4e:b7:bd:52:6a:76:f2:
                    94:0b:c4:38:9b:e6:73:04:c3:b9:7b:d4:46:33:af:
                    36:84:dc:7f:42:76:49:66:70:f8:3a:fe:15:c3:4e:
                    22:4b:3f:7a:ca:d1:56:da:eb:2d:e6:00:df:b9:1e:
                    f8:3a:89:d5:36:4d:e0:34:69:5b:e2:a3:0d:99:50:
                    e6:eb:ac:d3:98:1c:b3:61:4e:e6:9d:49:84:58:6e:
                    a3:f6:4d:31:2f:97:a5:79:98:d1:22:60:b3:0b:a2:
                    eb:f1:08:d8:87:e6:e2:d3:5c:26:5d:82:fe:31:68:
                    91:26:59:49:9a:1c:90:48:a4:37:1f:86:37:ec:fb:
                    90:91:d1:d8:7e:b7:b6:a3:09:23:cd:77:7e:17:6d:
                    6c:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6B:A7:89:F7:D1:AA:F3:73:71:69:A3:C6:A2:BA:A3:6B:4A:14:F1:E0
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/88842878-1050-4df7-822b-ea8ec25db83d/d5e6fb4e-ff80-3867-a502-ebaa6e05079d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/88842878-1050-4df7-822b-ea8ec25db83d/88842878-1050-4df7-822b-ea8ec25db83d.crl

            X509v3 Authority Key Identifier:
                keyid:0A:F4:2F:69:20:F1:AA:D7:6D:67:3C:86:9A:04:C8:80:1E:AD:7D:99

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/88842878-1050-4df7-822b-ea8ec25db83d.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  198.248.172.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a7:f3:8c:95:d0:5c:56:70:21:39:c3:59:b0:a8:5e:d7:a2:fc:
         b9:27:c8:f0:a4:f1:ad:f6:2b:0f:3f:cc:2f:54:63:78:50:b8:
         72:82:87:9d:52:e2:65:77:64:51:e6:97:16:e1:24:9c:60:e0:
         5d:34:3d:31:c3:f1:b4:9c:54:da:6a:41:b8:ca:4f:78:83:39:
         89:40:f3:ba:71:5d:63:4f:29:98:69:f3:06:02:3e:3d:2c:06:
         e2:4f:1d:35:5c:a7:b3:ec:dd:29:bd:bd:74:ea:9f:e6:57:d0:
         37:98:0c:8f:9c:87:57:f1:ab:25:f4:ca:7d:f9:fb:d1:9d:e4:
         d5:da:38:fc:82:56:9a:c5:b8:85:2e:9c:1d:fa:11:8c:cc:f8:
         a4:48:38:fe:16:3b:ac:49:5b:92:92:03:d9:4c:3e:bf:ec:14:
         ac:10:85:11:cc:99:3c:50:58:2a:62:12:8d:20:21:15:4b:04:
         51:fd:20:7a:8f:40:d2:0a:17:27:c3:ea:4a:7b:42:2e:f9:8d:
         c1:d3:82:bf:96:6a:0d:b5:ec:1b:74:d9:84:b8:ba:76:87:e8:
         52:b7:11:04:36:48:b0:cd:57:97:7b:df:41:8c:62:c1:89:16:
         ef:8e:06:05:64:77:b7:04:17:a4:cd:09:1f:3f:bc:b5:56:54:
         3b:87:6b:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 30 23:50:12 2025 by rpki-client