Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/cc9383e4-2c51-4ffd-bfe9-69e9fd6c5b58/88479a7a-2aaa-3469-bf73-a6b9d5c2d2e8.roa
File:                     88479a7a-2aaa-3469-bf73-a6b9d5c2d2e8.roa (raw, json)
Hash identifier:          bleVufh3wIY854pIkQEdTOKGvLN76ce9lBmpjO4FUiA=
Subject key identifier:   07:A2:A9:66:CB:E2:02:97:8B:61:CE:BC:B5:5A:86:77:B7:89:F2:96
Certificate issuer:       /CN=cc9383e4-2c51-4ffd-bfe9-69e9fd6c5b58
Certificate serial:       010D0C9F4328584B6A61E7132795DDAD54CA3380
Authority key identifier: 26:D1:9B:B5:02:FD:CB:75:4D:60:A0:BB:6A:8F:47:07:E2:4C:17:3B
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/cc9383e4-2c51-4ffd-bfe9-69e9fd6c5b58.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/cc9383e4-2c51-4ffd-bfe9-69e9fd6c5b58/88479a7a-2aaa-3469-bf73-a6b9d5c2d2e8.roa
Signing time:             Sun 05 Oct 2025 01:00:32 +0000
ROA not before:           Sun 05 Oct 2025 01:00:32 +0000
ROA not after:            Sat 03 Jan 2026 02:00:32 +0000
asID:                     55293
IP address blocks:        64.4.160.0/22 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/cc9383e4-2c51-4ffd-bfe9-69e9fd6c5b58/cc9383e4-2c51-4ffd-bfe9-69e9fd6c5b58.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/cc9383e4-2c51-4ffd-bfe9-69e9fd6c5b58/cc9383e4-2c51-4ffd-bfe9-69e9fd6c5b58.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/cc9383e4-2c51-4ffd-bfe9-69e9fd6c5b58.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:6a:61:e7:13:27:95:dd:ad:54:ca:33:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cc9383e4-2c51-4ffd-bfe9-69e9fd6c5b58
        Validity
            Not Before: Oct  5 01:00:32 2025 GMT
            Not After : Jan  3 02:00:32 2026 GMT
        Subject: CN=0c8c6ad2-f1e5-4ad0-862a-8adc288c69ce
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:28:41:ef:f2:81:9f:7b:d7:71:7b:36:5e:be:
                    87:13:c6:58:6f:fd:26:c0:6c:52:f7:85:ef:32:a0:
                    b7:5f:f6:e7:d0:e6:41:2c:c8:98:ce:2e:fd:09:db:
                    12:0d:29:cc:87:e8:f9:dc:5b:58:91:49:cd:f4:2f:
                    8d:ce:b6:61:c8:c8:50:bb:f0:8b:1b:3a:8c:46:97:
                    5a:ef:28:c5:27:f7:e4:6f:88:51:04:4f:44:c9:c2:
                    99:b8:e8:0a:bc:97:55:bf:e9:80:0d:5f:fd:8a:8e:
                    52:ae:f5:5e:87:cf:1b:1b:c4:ff:85:33:47:1d:ff:
                    1d:43:ae:9d:0f:fd:8d:d9:4a:33:49:da:19:ed:6d:
                    bb:6a:62:f3:e4:73:fc:77:52:f3:06:56:51:bf:dd:
                    5a:14:80:81:d2:d8:de:25:29:7f:13:aa:85:b7:59:
                    f8:b7:dd:df:f1:6a:f0:df:29:8f:40:dd:52:3d:c9:
                    68:85:ed:10:b1:10:f0:54:7b:a3:51:66:77:a2:1a:
                    0e:bf:1b:1a:92:ee:c4:6d:b4:ea:b7:c5:7f:56:25:
                    25:d1:e4:f6:15:dc:99:70:0d:82:83:52:85:dd:5c:
                    d7:8e:5f:9f:c7:5a:0c:f5:c7:7a:00:5a:69:e5:e2:
                    20:74:db:aa:b3:10:eb:d3:3c:80:69:92:65:cc:2a:
                    cd:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                07:A2:A9:66:CB:E2:02:97:8B:61:CE:BC:B5:5A:86:77:B7:89:F2:96
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/cc9383e4-2c51-4ffd-bfe9-69e9fd6c5b58/88479a7a-2aaa-3469-bf73-a6b9d5c2d2e8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/cc9383e4-2c51-4ffd-bfe9-69e9fd6c5b58/cc9383e4-2c51-4ffd-bfe9-69e9fd6c5b58.crl

            X509v3 Authority Key Identifier:
                keyid:26:D1:9B:B5:02:FD:CB:75:4D:60:A0:BB:6A:8F:47:07:E2:4C:17:3B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/cc9383e4-2c51-4ffd-bfe9-69e9fd6c5b58.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  64.4.160.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         8e:48:4a:83:59:f4:e3:80:92:4e:57:b3:7b:89:70:e1:08:6a:
         09:46:f1:8a:ba:09:d9:f0:5c:10:9b:ba:4e:cb:fa:40:7f:8f:
         b7:de:2e:0c:7d:b0:96:81:78:68:a4:7b:bd:ce:77:49:82:a4:
         1b:0e:59:37:5b:1b:49:7b:30:a9:42:4a:81:db:fd:80:b5:0c:
         e3:34:54:d8:8a:d7:b0:bc:1c:b4:b9:84:e2:c0:5d:a3:41:1a:
         8b:84:27:45:35:30:95:7e:cf:ba:8c:17:33:bc:14:f7:61:d0:
         4c:51:14:fa:e1:d0:18:2b:f4:0c:10:49:e9:36:69:40:7c:f3:
         18:b8:29:c2:e5:2a:7b:fc:80:58:79:a3:c8:11:61:75:93:93:
         88:cc:be:47:1e:6b:fc:26:88:e8:4c:18:5c:4f:1c:6b:2c:c9:
         17:13:2a:c4:b4:f5:70:10:64:cb:1c:a5:04:57:15:6e:35:d0:
         62:61:c1:5f:d1:ac:75:61:de:74:b2:63:13:8b:96:40:b9:f3:
         71:0f:bb:7a:9b:4b:e2:d3:9a:2d:7a:93:8f:10:6a:12:58:47:
         49:7e:b8:3e:cb:bd:5a:31:c7:52:8f:e7:1d:d1:18:64:8f:88:
         ce:9b:e0:5e:66:23:04:b1:c4:01:92:13:5b:0d:80:c3:c0:2f:
         93:ee:32:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 03:41:22 2025 by rpki-client