Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d5ebadbb-b63c-4e95-8e76-fd22cc861311/88fbe284-82b8-3e50-9540-cbc896e974e0.roa
File:                     88fbe284-82b8-3e50-9540-cbc896e974e0.roa (raw, json)
Hash identifier:          d+rQvUdaCzuasuOEiJemVinc9pVUhte1z6XgMTK3tpM=
Subject key identifier:   CF:13:F5:D4:3E:8A:CA:14:C5:6B:F7:54:98:AB:CA:64:B2:4B:2D:5C
Certificate issuer:       /CN=d5ebadbb-b63c-4e95-8e76-fd22cc861311
Certificate serial:       010D0C9F4328584A4C3B14A82B0BC269ED964280
Authority key identifier: 0A:5D:E7:3A:9A:58:CA:C5:9D:F6:05:BC:E3:F2:1E:CC:23:F8:D7:94
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d5ebadbb-b63c-4e95-8e76-fd22cc861311.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d5ebadbb-b63c-4e95-8e76-fd22cc861311/88fbe284-82b8-3e50-9540-cbc896e974e0.roa
Signing time:             Tue 24 Jun 2025 13:01:03 +0000
ROA not before:           Tue 24 Jun 2025 13:01:03 +0000
ROA not after:            Mon 22 Sep 2025 13:01:03 +0000
asID:                     25697
IP address blocks:        209.94.60.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d5ebadbb-b63c-4e95-8e76-fd22cc861311/d5ebadbb-b63c-4e95-8e76-fd22cc861311.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d5ebadbb-b63c-4e95-8e76-fd22cc861311/d5ebadbb-b63c-4e95-8e76-fd22cc861311.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d5ebadbb-b63c-4e95-8e76-fd22cc861311.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 01 Jul 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:4c:3b:14:a8:2b:0b:c2:69:ed:96:42:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d5ebadbb-b63c-4e95-8e76-fd22cc861311
        Validity
            Not Before: Jun 24 13:01:03 2025 GMT
            Not After : Sep 22 13:01:03 2025 GMT
        Subject: CN=66eb4e07-b582-4054-a9f8-962c080ed15c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:89:7c:70:1a:07:e7:69:50:25:c0:a0:dc:ab:4f:
                    43:cf:60:25:6e:74:cf:62:18:fb:d7:1f:51:41:53:
                    ba:a7:50:b5:9b:1b:fe:9a:87:31:98:c2:91:c5:5c:
                    84:bc:38:e7:a0:fd:83:62:07:46:f4:d7:f5:16:a1:
                    44:be:f4:12:08:59:2b:3f:82:91:ff:45:e0:4f:38:
                    59:c5:df:a5:3c:dd:a3:32:1f:9c:a9:22:ba:de:ea:
                    1e:fe:a9:9d:f8:d4:90:b1:cb:84:86:98:aa:c3:e8:
                    25:d4:07:93:c5:91:2d:19:bc:67:bc:fb:0f:4f:7c:
                    c3:95:68:0f:25:b7:33:02:30:e3:78:ce:1c:ad:60:
                    5c:30:b0:93:2c:e2:40:f4:79:17:64:6d:60:27:c1:
                    20:07:d0:93:d6:d9:4b:45:f6:6b:1f:b0:ce:f6:f9:
                    44:e7:16:35:14:43:fc:f1:18:1f:50:17:e3:cc:40:
                    58:fb:58:55:4b:c1:30:bb:d0:75:63:97:5b:96:ef:
                    95:c6:39:82:e0:41:02:f8:19:72:b2:a2:2c:71:c2:
                    a9:f4:07:b4:83:02:9a:71:9d:0f:48:37:ab:a6:b4:
                    a1:0a:06:7e:69:ed:9b:1e:15:a5:94:54:69:a6:17:
                    b8:bd:ab:85:bc:08:1c:2f:0a:91:ce:c9:2c:a2:a6:
                    6b:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CF:13:F5:D4:3E:8A:CA:14:C5:6B:F7:54:98:AB:CA:64:B2:4B:2D:5C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d5ebadbb-b63c-4e95-8e76-fd22cc861311/88fbe284-82b8-3e50-9540-cbc896e974e0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d5ebadbb-b63c-4e95-8e76-fd22cc861311/d5ebadbb-b63c-4e95-8e76-fd22cc861311.crl

            X509v3 Authority Key Identifier:
                keyid:0A:5D:E7:3A:9A:58:CA:C5:9D:F6:05:BC:E3:F2:1E:CC:23:F8:D7:94

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d5ebadbb-b63c-4e95-8e76-fd22cc861311.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  209.94.60.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         50:c5:f4:c7:60:02:68:2d:3d:86:85:0a:e5:55:85:35:6b:37:
         13:98:55:37:04:0c:ac:8b:43:14:60:73:8b:dd:7f:28:81:4c:
         78:63:2a:64:12:bb:53:57:bb:e6:e5:a9:82:51:65:95:48:f0:
         e2:b2:da:1d:48:b7:ff:cc:08:ca:da:d1:03:f8:38:55:a1:8f:
         bf:06:00:42:45:aa:6f:59:f0:e6:51:de:3b:35:bf:d5:e4:19:
         03:3a:a1:8f:c6:a9:d7:7f:46:ee:c3:42:a1:94:41:9c:92:0b:
         51:f4:ea:45:68:b3:6e:b7:27:9b:e6:1a:dd:eb:b2:79:aa:32:
         14:82:2f:d7:94:41:90:a3:f6:8c:51:af:d8:e9:c3:cb:5b:38:
         e3:e3:b2:0e:5e:8f:79:18:2e:f6:74:66:7c:b4:b9:35:42:ae:
         90:19:d4:7b:4f:70:d6:da:bf:2c:5c:02:b7:e2:32:4b:27:58:
         2d:3a:a2:49:b3:e5:44:2d:95:e2:d2:14:61:e6:76:e4:f3:4c:
         79:96:67:64:c6:13:77:12:a1:8d:69:9c:5e:94:d4:8f:0f:ed:
         f2:d7:8b:e1:7b:dc:a6:e3:e9:ce:c8:c3:54:4c:0e:8e:96:84:
         45:2e:7d:a6:4d:42:c2:20:20:36:8b:b0:b3:84:83:ae:4b:18:
         b2:91:df:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 30 02:34:24 2025 by rpki-client