Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/28b0e2e4-5f2a-4ecd-ad6b-97416951f017/088c14c0-87f9-31b9-9bc1-18e2325bcf39.roa
File:                     088c14c0-87f9-31b9-9bc1-18e2325bcf39.roa (raw, json)
Hash identifier:          WoTCrGKeVG7CZl31LQgnokzBpyiPDeTwhgkaeAf1Iks=
Subject key identifier:   EA:BC:D1:3A:AF:CA:68:51:BF:EE:4E:EB:79:FD:98:17:05:3D:77:88
Certificate issuer:       /CN=28b0e2e4-5f2a-4ecd-ad6b-97416951f017
Certificate serial:       010D0C9F4328584A43DB0958AD41ABA3E1723740
Authority key identifier: 78:E0:85:36:78:70:3F:C9:6B:CE:79:FC:9F:32:58:F4:FF:32:02:55
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/28b0e2e4-5f2a-4ecd-ad6b-97416951f017.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/28b0e2e4-5f2a-4ecd-ad6b-97416951f017/088c14c0-87f9-31b9-9bc1-18e2325bcf39.roa
Signing time:             Sat 21 Jun 2025 13:01:03 +0000
ROA not before:           Sat 21 Jun 2025 13:01:03 +0000
ROA not after:            Fri 19 Sep 2025 13:01:03 +0000
asID:                     393249
IP address blocks:        137.82.0.0/16 maxlen: 16
                          142.103.0.0/16 maxlen: 16
                          192.5.96.0/24 maxlen: 24
                          192.73.5.0/24 maxlen: 24
                          198.162.32.0/19 maxlen: 19
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/28b0e2e4-5f2a-4ecd-ad6b-97416951f017/28b0e2e4-5f2a-4ecd-ad6b-97416951f017.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/28b0e2e4-5f2a-4ecd-ad6b-97416951f017/28b0e2e4-5f2a-4ecd-ad6b-97416951f017.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/28b0e2e4-5f2a-4ecd-ad6b-97416951f017.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 01 Jul 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:43:db:09:58:ad:41:ab:a3:e1:72:37:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=28b0e2e4-5f2a-4ecd-ad6b-97416951f017
        Validity
            Not Before: Jun 21 13:01:03 2025 GMT
            Not After : Sep 19 13:01:03 2025 GMT
        Subject: CN=4df5a684-111d-4635-b00a-cc1561cb29f2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:64:30:61:3d:e5:e3:58:1d:a5:16:58:ab:be:
                    46:e4:85:ef:b1:e3:8d:df:02:ca:d1:4a:4f:f9:48:
                    9c:bc:50:45:4d:28:40:e3:90:99:e9:1d:f9:86:e3:
                    94:f9:8a:cc:bd:ca:16:4e:f4:2c:39:6e:91:b1:a9:
                    f7:0a:25:d1:50:49:70:a7:63:e9:5c:b9:f8:f6:44:
                    f0:88:96:ee:8d:72:52:51:1f:0a:c4:3f:fc:d9:4f:
                    5a:2a:24:f2:49:10:3e:70:55:27:e6:38:ff:e3:52:
                    5b:a4:b2:9a:09:f9:f0:30:a2:f4:11:7c:11:4f:af:
                    ca:23:0c:4e:ea:77:41:de:cf:a8:8e:aa:20:b3:fb:
                    56:db:25:44:9e:50:ef:ff:87:6c:59:3e:30:76:c1:
                    d8:65:7a:db:c4:ea:bb:48:6c:88:57:b7:ea:86:1d:
                    5e:de:ab:3e:22:b8:d4:da:34:0a:08:f1:6f:af:a7:
                    b4:72:ee:87:c0:1f:b8:ba:e2:f8:34:cb:27:2f:3a:
                    e8:25:6b:f7:b7:f9:e6:e4:3f:67:e1:86:f1:29:7e:
                    d5:f1:5c:13:3e:5b:91:e3:b0:dc:3d:55:af:46:03:
                    13:19:e2:ca:bd:56:b4:26:2f:e2:00:c8:9d:b4:ef:
                    9c:70:d8:d6:e9:7c:84:81:bd:de:ff:9b:e2:e4:55:
                    76:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EA:BC:D1:3A:AF:CA:68:51:BF:EE:4E:EB:79:FD:98:17:05:3D:77:88
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/28b0e2e4-5f2a-4ecd-ad6b-97416951f017/088c14c0-87f9-31b9-9bc1-18e2325bcf39.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/28b0e2e4-5f2a-4ecd-ad6b-97416951f017/28b0e2e4-5f2a-4ecd-ad6b-97416951f017.crl

            X509v3 Authority Key Identifier:
                keyid:78:E0:85:36:78:70:3F:C9:6B:CE:79:FC:9F:32:58:F4:FF:32:02:55

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/28b0e2e4-5f2a-4ecd-ad6b-97416951f017.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  137.82.0.0/16
                  142.103.0.0/16
                  192.5.96.0/24
                  192.73.5.0/24
                  198.162.32.0/19

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3c:38:b4:6b:15:4a:90:4b:32:17:c6:eb:be:fc:c7:e1:4f:2b:
         d3:16:23:d5:21:96:6d:79:7e:09:f2:a1:de:2b:2b:b2:2c:24:
         f2:6e:2b:a2:9f:6f:8d:8f:af:ec:6a:cf:f3:d4:c0:0a:27:2b:
         9c:a3:e8:ac:4e:76:cb:e3:54:a5:33:34:bc:04:24:c7:d1:99:
         2f:bd:e8:d0:45:5c:94:e4:a4:02:b8:33:4b:78:e9:f4:52:dd:
         25:10:ea:57:09:0e:dd:25:0b:61:66:70:e8:08:c7:a6:81:f7:
         46:68:26:7e:a0:ae:40:16:e3:f0:46:e3:46:21:3a:48:d6:16:
         3e:b6:ce:d7:27:1a:48:c2:ed:93:17:ba:53:7b:a7:c8:e6:b9:
         72:93:74:e5:59:23:6c:e2:71:bd:a1:36:44:85:f8:3e:94:c7:
         c4:c6:4d:74:f6:b0:1d:e4:b8:6d:ea:cc:aa:52:06:f9:9c:e7:
         67:8b:96:48:53:36:2f:0a:3d:69:64:40:13:0a:45:d6:b7:0d:
         ae:55:63:dd:4c:4e:21:86:93:02:4d:e7:12:ee:35:a2:d7:48:
         02:c8:46:ee:f7:8c:cb:6b:03:44:ea:3d:04:73:48:25:dc:86:
         f9:be:b3:6c:dd:43:15:df:b8:a3:74:80:d1:0f:db:09:ae:df:
         6b:78:02:42
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 30 11:56:24 2025 by rpki-client