Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/e3ca0a1e-59ff-42f0-b29b-31bf799f40ee/88e68d52-7beb-3da2-9dcf-f259957a2388.roa
File:                     88e68d52-7beb-3da2-9dcf-f259957a2388.roa (raw, json)
Hash identifier:          TmECYzvIgSmR12bAb8RBYZzMr8hL2HjLqQC+8eHhpgc=
Subject key identifier:   FE:F6:E6:66:E6:67:8F:9B:4D:42:53:A9:C9:88:1E:BA:1B:1E:BC:CD
Certificate issuer:       /CN=e3ca0a1e-59ff-42f0-b29b-31bf799f40ee
Certificate serial:       010D0C9F4328584B80B76577822D66315FBA2780
Authority key identifier: E0:88:C6:A5:A8:2F:41:D2:39:6E:B3:63:F3:94:25:C6:BE:81:07:92
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/e3ca0a1e-59ff-42f0-b29b-31bf799f40ee.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/e3ca0a1e-59ff-42f0-b29b-31bf799f40ee/88e68d52-7beb-3da2-9dcf-f259957a2388.roa
Signing time:             Mon 13 Oct 2025 01:00:29 +0000
ROA not before:           Mon 13 Oct 2025 01:00:29 +0000
ROA not after:            Sun 11 Jan 2026 02:00:29 +0000
asID:                     26292
IP address blocks:        45.73.128.0/20 maxlen: 24
                          64.30.64.0/19 maxlen: 24
                          199.180.212.0/22 maxlen: 24
                          216.49.144.0/20 maxlen: 24
                          216.195.0.0/19 maxlen: 24
                          2604:8100::/32 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/e3ca0a1e-59ff-42f0-b29b-31bf799f40ee/e3ca0a1e-59ff-42f0-b29b-31bf799f40ee.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/e3ca0a1e-59ff-42f0-b29b-31bf799f40ee/e3ca0a1e-59ff-42f0-b29b-31bf799f40ee.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/e3ca0a1e-59ff-42f0-b29b-31bf799f40ee.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 23 Oct 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:80:b7:65:77:82:2d:66:31:5f:ba:27:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e3ca0a1e-59ff-42f0-b29b-31bf799f40ee
        Validity
            Not Before: Oct 13 01:00:29 2025 GMT
            Not After : Jan 11 02:00:29 2026 GMT
        Subject: CN=be75c09f-58ec-4245-bec9-da69fec30298
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:85:6a:7a:7e:4b:7b:d8:bb:f9:b7:49:cc:65:33:
                    a3:e3:6a:73:49:a4:5a:5b:00:ae:c5:94:af:91:55:
                    ba:68:96:b3:f7:db:35:77:9c:85:24:74:f3:20:23:
                    0c:f1:2b:34:14:a2:42:24:27:fe:63:30:0d:06:57:
                    c8:03:99:e5:71:24:65:76:be:bc:53:52:77:67:85:
                    79:be:71:38:f3:e1:7a:b0:cd:92:e5:a3:80:6b:87:
                    3b:cd:3e:d6:fe:bc:cc:3d:a4:bb:1c:ef:fe:36:bc:
                    b2:74:59:ac:f5:26:b4:68:08:08:4f:cb:95:b4:cd:
                    2e:ea:88:19:52:5e:ec:0f:02:f2:4b:77:3e:ae:d6:
                    f5:30:85:01:e1:d9:8b:98:da:70:3b:a7:89:be:46:
                    69:8f:7a:2d:67:3c:8b:f4:7d:ae:4f:87:13:93:72:
                    84:81:07:82:c3:02:fe:14:b8:ff:bd:67:f6:c5:04:
                    90:32:12:e6:c5:b1:eb:dd:12:99:fb:84:3e:1d:3e:
                    c9:8b:bd:3e:39:c4:6f:b3:4e:b3:27:b8:2d:bd:93:
                    ad:ab:22:03:09:44:5f:bc:db:4b:6e:65:07:83:db:
                    82:87:de:76:e0:7b:78:a3:86:a8:74:22:12:53:2b:
                    12:ef:a7:82:ef:d7:37:fe:16:07:c9:62:e6:eb:54:
                    d2:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FE:F6:E6:66:E6:67:8F:9B:4D:42:53:A9:C9:88:1E:BA:1B:1E:BC:CD
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/e3ca0a1e-59ff-42f0-b29b-31bf799f40ee/88e68d52-7beb-3da2-9dcf-f259957a2388.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/e3ca0a1e-59ff-42f0-b29b-31bf799f40ee/e3ca0a1e-59ff-42f0-b29b-31bf799f40ee.crl

            X509v3 Authority Key Identifier:
                keyid:E0:88:C6:A5:A8:2F:41:D2:39:6E:B3:63:F3:94:25:C6:BE:81:07:92

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/e3ca0a1e-59ff-42f0-b29b-31bf799f40ee.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.73.128.0/20
                  64.30.64.0/19
                  199.180.212.0/22
                  216.49.144.0/20
                  216.195.0.0/19
                IPv6:
                  2604:8100::/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         57:48:09:56:e3:0c:4c:a4:0c:6a:8d:1c:f1:dc:8a:93:47:3a:
         99:d4:7f:6d:39:b4:cb:24:b1:85:0f:59:92:df:f8:7a:f7:12:
         f3:ec:68:c3:47:c2:04:8e:f6:7c:77:dd:03:8c:c5:1a:9e:76:
         47:b9:c3:30:e3:f2:2c:4d:58:4b:7e:88:e4:37:3f:67:56:53:
         03:91:13:cb:6f:d1:cc:47:5a:ea:61:3a:f5:07:d4:be:37:4a:
         bd:cf:3e:fb:2c:b5:34:a2:14:59:e2:19:4d:9c:c8:fe:7f:2c:
         a6:9d:1a:1f:ff:4c:9b:fe:36:7d:91:d3:e1:ed:57:9c:4e:79:
         8a:e5:43:ea:26:d4:e5:55:ad:05:34:91:a3:a8:1d:11:d2:fc:
         e9:c6:33:35:0b:2a:61:90:c6:60:58:a0:63:39:54:c3:7e:ee:
         0a:a2:e1:bc:9c:1a:2b:64:a1:3d:66:c3:b0:b2:37:78:38:b1:
         79:73:84:0e:43:77:45:0a:ef:75:5d:13:8c:e6:58:9c:4e:68:
         d6:87:fd:c5:99:3e:89:a4:cb:09:ef:3a:9a:d6:2a:3a:de:a8:
         e2:74:c9:0a:d7:b1:7d:99:52:f5:15:23:51:20:26:a4:5d:37:
         a4:d8:db:3d:90:5b:02:52:13:24:3a:1f:b7:4a:f0:80:7c:7a:
         4d:97:c5:13
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 18:53:37 2025 by rpki-client