Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/cc9383e4-2c51-4ffd-bfe9-69e9fd6c5b58/88e8ac82-36b4-37a5-b462-616b45ade786.roa
File:                     88e8ac82-36b4-37a5-b462-616b45ade786.roa (raw, json)
Hash identifier:          LWmy4Qu+Qe3Knx7uoakPCjmciqC9+hjzI7KsupN6J5c=
Subject key identifier:   23:7A:40:CF:D0:D6:F1:0F:2E:E1:35:B8:9C:BB:48:1D:13:BB:9F:40
Certificate issuer:       /CN=cc9383e4-2c51-4ffd-bfe9-69e9fd6c5b58
Certificate serial:       010D0C9F4328584B6A61EB106F10CE000EFB28E0
Authority key identifier: 26:D1:9B:B5:02:FD:CB:75:4D:60:A0:BB:6A:8F:47:07:E2:4C:17:3B
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/cc9383e4-2c51-4ffd-bfe9-69e9fd6c5b58.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/cc9383e4-2c51-4ffd-bfe9-69e9fd6c5b58/88e8ac82-36b4-37a5-b462-616b45ade786.roa
Signing time:             Sun 05 Oct 2025 01:00:32 +0000
ROA not before:           Sun 05 Oct 2025 01:00:32 +0000
ROA not after:            Sat 03 Jan 2026 02:00:32 +0000
asID:                     55293
IP address blocks:        216.137.176.0/20 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/cc9383e4-2c51-4ffd-bfe9-69e9fd6c5b58/cc9383e4-2c51-4ffd-bfe9-69e9fd6c5b58.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/cc9383e4-2c51-4ffd-bfe9-69e9fd6c5b58/cc9383e4-2c51-4ffd-bfe9-69e9fd6c5b58.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/cc9383e4-2c51-4ffd-bfe9-69e9fd6c5b58.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 20 Oct 2025 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:6a:61:eb:10:6f:10:ce:00:0e:fb:28:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cc9383e4-2c51-4ffd-bfe9-69e9fd6c5b58
        Validity
            Not Before: Oct  5 01:00:32 2025 GMT
            Not After : Jan  3 02:00:32 2026 GMT
        Subject: CN=1dd3be2f-1325-4b10-976d-47918c079806
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:a2:5d:f8:6e:e3:bf:6b:ca:0c:85:c3:a3:a9:
                    fe:2b:91:41:c4:ed:cb:6e:44:dd:5b:80:f6:4a:f8:
                    16:ab:8a:4c:07:df:24:3d:f3:37:66:23:c7:eb:10:
                    70:59:9b:cb:44:83:f5:45:d4:55:a2:9f:c7:d6:ae:
                    17:a0:bf:4e:11:39:75:d7:ef:a1:af:4d:82:bf:90:
                    48:f7:dd:c6:06:dd:8c:25:d3:d1:8f:b4:90:5c:34:
                    e7:53:fe:98:1b:4c:9f:dc:fb:ea:f1:8a:42:ae:51:
                    54:2d:b2:f1:c7:c1:32:43:86:5a:d8:64:ea:b4:50:
                    a9:e2:3a:16:7b:9d:ca:78:04:b2:3a:27:76:47:d2:
                    1c:cd:b8:31:a5:15:64:c7:fc:5f:fb:fa:53:ec:77:
                    dc:c3:c5:07:e6:cd:4f:ee:84:7f:f6:d8:4e:85:c0:
                    ea:30:b8:50:c7:10:f3:0c:48:0d:ab:c7:cd:64:78:
                    2e:b1:01:58:2a:33:e1:3d:09:e8:f4:85:1a:18:be:
                    83:98:2d:ca:be:57:97:61:be:9a:14:f6:9e:5e:97:
                    d3:f0:b8:7b:58:32:98:dd:b3:c3:65:99:4f:56:8b:
                    11:76:87:68:af:a4:f9:6f:f5:ef:81:96:ba:13:d7:
                    0d:18:12:9c:1c:59:99:82:2f:85:b4:96:53:4a:cb:
                    3b:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                23:7A:40:CF:D0:D6:F1:0F:2E:E1:35:B8:9C:BB:48:1D:13:BB:9F:40
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/cc9383e4-2c51-4ffd-bfe9-69e9fd6c5b58/88e8ac82-36b4-37a5-b462-616b45ade786.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/cc9383e4-2c51-4ffd-bfe9-69e9fd6c5b58/cc9383e4-2c51-4ffd-bfe9-69e9fd6c5b58.crl

            X509v3 Authority Key Identifier:
                keyid:26:D1:9B:B5:02:FD:CB:75:4D:60:A0:BB:6A:8F:47:07:E2:4C:17:3B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/cc9383e4-2c51-4ffd-bfe9-69e9fd6c5b58.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  216.137.176.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         78:82:1d:04:98:bb:8d:5b:bc:df:8c:b3:b2:40:4e:6d:77:47:
         22:04:3a:03:66:e1:33:bd:3d:81:48:75:09:f7:56:ff:19:fb:
         f0:78:da:02:e0:35:d5:b4:a6:35:5a:06:28:e9:a7:38:27:2e:
         1c:8a:09:56:7c:20:86:e7:f7:9a:6e:7d:0b:f6:c5:24:3f:4a:
         9f:cc:73:eb:2c:3a:52:84:97:2e:19:10:60:11:44:ba:ef:67:
         13:56:78:c9:2f:55:7f:f0:f7:a5:4e:df:57:4f:48:5a:06:49:
         df:22:42:97:43:4c:eb:e5:73:c3:62:61:12:ba:f2:ed:87:60:
         08:7a:80:6d:eb:f3:62:c7:d4:7b:34:bf:d3:b5:c1:67:f2:9f:
         5a:49:08:10:50:9b:85:0a:bc:47:79:20:e8:e1:a2:f4:92:45:
         98:d7:61:c1:da:09:25:a9:6b:ee:0a:b4:d8:b4:8b:70:31:64:
         4c:9e:49:ae:14:9e:3d:76:6c:69:c4:37:6d:eb:89:c1:7e:8b:
         ce:8e:ef:88:ef:8e:44:17:30:50:a4:b2:91:ec:19:35:dc:1f:
         ce:0a:e8:0a:34:79:61:89:fb:7f:bf:0b:b6:bd:c5:a5:e2:8a:
         0d:5b:2a:c7:9b:4e:2b:41:5d:9e:1d:fe:60:d8:ac:d4:e8:d8:
         f2:62:84:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 20:31:30 2025 by rpki-client