Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/8231077d-0559-4e7a-9cdf-fe00a512ab5c/e3100e93-af92-3477-b367-b21ea83e7382.roa
File:                     e3100e93-af92-3477-b367-b21ea83e7382.roa (raw, json)
Hash identifier:          wmBtTEMSGYDcKrFS7WoUCygfYvsk5swY6bLNsugcb1A=
Subject key identifier:   83:D1:41:06:85:D1:86:20:20:30:9F:40:9F:8A:64:08:9A:36:44:E3
Certificate issuer:       /CN=8231077d-0559-4e7a-9cdf-fe00a512ab5c
Certificate serial:       010D0C9F4328584A3B7AFEB0A9167A2BC846C080
Authority key identifier: 27:57:42:AE:CA:A8:23:ED:C1:20:5C:9F:F0:23:65:5D:05:65:FB:76
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/8231077d-0559-4e7a-9cdf-fe00a512ab5c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/8231077d-0559-4e7a-9cdf-fe00a512ab5c/e3100e93-af92-3477-b367-b21ea83e7382.roa
Signing time:             Wed 18 Jun 2025 13:01:06 +0000
ROA not before:           Wed 18 Jun 2025 13:01:06 +0000
ROA not after:            Tue 16 Sep 2025 13:01:06 +0000
asID:                     198949
IP address blocks:        199.64.88.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/8231077d-0559-4e7a-9cdf-fe00a512ab5c/8231077d-0559-4e7a-9cdf-fe00a512ab5c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/8231077d-0559-4e7a-9cdf-fe00a512ab5c/8231077d-0559-4e7a-9cdf-fe00a512ab5c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/8231077d-0559-4e7a-9cdf-fe00a512ab5c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 03 Jul 2025 07:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:3b:7a:fe:b0:a9:16:7a:2b:c8:46:c0:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8231077d-0559-4e7a-9cdf-fe00a512ab5c
        Validity
            Not Before: Jun 18 13:01:06 2025 GMT
            Not After : Sep 16 13:01:06 2025 GMT
        Subject: CN=f9823973-0e0c-43b2-997c-a8f37abf5899
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:31:be:ba:7b:a3:e1:83:09:15:6f:25:3c:e9:
                    8a:3d:34:e0:3d:3c:b1:0d:15:42:c1:0f:6f:df:b8:
                    d5:97:0b:2c:f1:3e:3b:a4:9b:12:a5:63:27:14:57:
                    b6:b7:4d:77:6a:9c:83:54:e4:14:c0:1d:4f:40:82:
                    41:f9:eb:7a:12:4f:77:77:94:aa:3e:a1:87:ef:1a:
                    26:8a:7e:75:78:98:15:55:cc:7e:c7:e4:f2:87:34:
                    4d:49:55:33:74:2f:4a:a0:a2:a0:26:7e:04:b7:82:
                    0a:10:eb:8f:f7:c2:1e:a7:c8:a3:85:8a:bf:ab:a3:
                    9a:ce:a6:d0:83:d3:94:9d:8f:85:64:7f:5b:4b:6c:
                    76:53:51:56:b6:d0:ab:ff:ae:4a:51:9b:df:b3:53:
                    f5:6f:74:62:36:cc:97:5c:24:72:8a:d4:f4:6c:9a:
                    ea:45:94:2a:cf:45:c2:e9:4a:ad:b9:cd:82:18:bf:
                    43:6e:f3:8e:65:6d:a7:72:e5:7c:00:31:ae:a1:cf:
                    8b:e0:e0:39:03:da:fa:50:b9:5e:49:e8:51:a5:84:
                    78:4f:ba:50:48:4b:f3:fe:18:2f:20:d8:8e:f9:25:
                    5b:2d:37:ca:f4:ea:d4:2d:54:1a:2e:5d:1b:42:62:
                    7b:d9:92:fc:17:b9:95:0d:c5:22:ca:32:35:fb:93:
                    f2:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                83:D1:41:06:85:D1:86:20:20:30:9F:40:9F:8A:64:08:9A:36:44:E3
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/8231077d-0559-4e7a-9cdf-fe00a512ab5c/e3100e93-af92-3477-b367-b21ea83e7382.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/8231077d-0559-4e7a-9cdf-fe00a512ab5c/8231077d-0559-4e7a-9cdf-fe00a512ab5c.crl

            X509v3 Authority Key Identifier:
                keyid:27:57:42:AE:CA:A8:23:ED:C1:20:5C:9F:F0:23:65:5D:05:65:FB:76

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/8231077d-0559-4e7a-9cdf-fe00a512ab5c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.64.88.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         94:ee:65:ba:3b:8e:d9:88:48:52:cc:f5:bc:6e:78:23:0f:10:
         ca:b1:8f:5c:e8:4c:42:30:bc:74:7a:41:79:06:3f:b8:76:82:
         42:75:2b:5f:a2:5b:ac:e9:5a:fe:5b:8f:d8:21:fd:92:e2:75:
         99:bb:55:c5:77:6b:d5:bc:97:b1:83:14:12:18:08:ed:98:a8:
         98:44:d3:8c:f2:e7:ed:1b:dc:36:63:18:07:6f:89:98:dd:02:
         be:cb:d1:53:4a:ff:88:44:78:c9:fa:cf:27:27:ea:e2:7c:4a:
         75:48:34:c7:1b:ac:60:4a:a2:97:d1:1f:c1:75:29:45:8c:04:
         cb:45:70:6c:0d:22:42:28:02:05:82:61:5a:21:b6:df:3e:12:
         a5:a7:c4:dc:96:0c:aa:2e:e7:89:96:9e:2a:ab:2b:9a:05:84:
         85:66:b5:ef:bc:c4:22:9c:33:b6:54:cb:99:f6:96:c1:d9:dd:
         f5:d7:d3:8f:ab:63:29:85:bb:b4:25:2b:9c:27:86:b2:4a:82:
         69:db:14:f7:94:90:0c:f1:6a:53:6a:e7:5e:89:64:b6:2d:ce:
         08:f5:35:92:71:95:d3:4a:3f:eb:97:b5:16:02:89:ff:20:70:
         9f:6b:47:b1:48:8b:5c:40:4e:f3:29:79:1f:ba:a2:7f:e8:e3:
         22:29:39:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 2 05:25:37 2025 by rpki-client