Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8252d812-07cd-4870-b413-e08fb8355928/790fc848-d2b2-3618-af2e-754c682b4f44.roa
File:                     790fc848-d2b2-3618-af2e-754c682b4f44.roa (raw, json)
Hash identifier:          sZ/XjW9GB/GEqBisF5IF3+AByGGYChU7TZAMLrdxg9M=
Subject key identifier:   16:65:08:13:75:57:5D:45:A7:79:A0:3F:30:DB:83:ED:EB:E5:86:A3
Certificate issuer:       /CN=8252d812-07cd-4870-b413-e08fb8355928
Certificate serial:       010D0C9F4328584B4081A19074D822850DEAFC20
Authority key identifier: 22:F6:B7:89:81:53:28:BF:20:D6:FF:E0:86:EC:A6:DC:6E:1E:F6:DC
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8252d812-07cd-4870-b413-e08fb8355928.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8252d812-07cd-4870-b413-e08fb8355928/790fc848-d2b2-3618-af2e-754c682b4f44.roa
Signing time:             Sat 20 Sep 2025 01:00:32 +0000
ROA not before:           Sat 20 Sep 2025 01:00:32 +0000
ROA not after:            Fri 19 Dec 2025 02:00:32 +0000
asID:                     8075
IP address blocks:        170.88.82.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8252d812-07cd-4870-b413-e08fb8355928/8252d812-07cd-4870-b413-e08fb8355928.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8252d812-07cd-4870-b413-e08fb8355928/8252d812-07cd-4870-b413-e08fb8355928.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8252d812-07cd-4870-b413-e08fb8355928.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:40:81:a1:90:74:d8:22:85:0d:ea:fc:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8252d812-07cd-4870-b413-e08fb8355928
        Validity
            Not Before: Sep 20 01:00:32 2025 GMT
            Not After : Dec 19 02:00:32 2025 GMT
        Subject: CN=d1595e41-0154-4ae2-9462-0a9174fa75d5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:d4:96:20:3a:dc:42:91:7d:93:0e:94:af:a3:
                    87:09:a4:0e:5a:c2:bf:77:32:54:17:15:92:05:db:
                    b2:e6:ef:b2:7f:2c:c9:b4:b5:a2:d3:b4:9f:5b:77:
                    8a:d2:e4:66:ac:9f:a6:03:d8:a6:6e:04:fe:78:37:
                    6d:cd:b3:61:c6:15:b5:b3:06:0d:73:ef:62:a0:ba:
                    80:cb:ad:56:6c:9e:4c:00:2b:b2:56:90:50:8d:b3:
                    18:c8:1d:f0:0b:44:69:b9:48:e1:cc:fa:4c:f4:6f:
                    7f:12:48:9d:3d:ef:ec:97:cf:3c:e7:a7:98:89:0e:
                    68:dc:38:77:f6:2d:56:f0:36:e2:34:d8:9c:4d:5b:
                    2e:b3:b7:59:a6:d1:e6:a7:98:44:91:c8:71:6f:c8:
                    dd:eb:95:ad:d9:42:64:68:fd:44:77:a5:f5:c3:fa:
                    7f:5b:9e:15:20:21:be:c2:7b:c6:24:57:18:97:95:
                    f6:9b:bb:f2:0b:da:79:71:97:59:2a:a1:2f:25:aa:
                    a8:4b:70:43:e7:e2:05:b6:98:89:61:31:86:64:c6:
                    4d:48:33:ff:60:27:35:db:76:ea:e4:04:1c:17:be:
                    29:a5:89:e6:9c:4e:08:43:40:bf:33:9f:38:3b:88:
                    46:b1:31:c6:34:41:4c:10:1c:59:22:0e:20:b4:d3:
                    c4:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                16:65:08:13:75:57:5D:45:A7:79:A0:3F:30:DB:83:ED:EB:E5:86:A3
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8252d812-07cd-4870-b413-e08fb8355928/790fc848-d2b2-3618-af2e-754c682b4f44.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8252d812-07cd-4870-b413-e08fb8355928/8252d812-07cd-4870-b413-e08fb8355928.crl

            X509v3 Authority Key Identifier:
                keyid:22:F6:B7:89:81:53:28:BF:20:D6:FF:E0:86:EC:A6:DC:6E:1E:F6:DC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8252d812-07cd-4870-b413-e08fb8355928.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.88.82.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6c:67:1e:5c:25:7b:ba:d1:60:c4:3d:da:ec:59:fd:04:d1:dc:
         f5:0d:79:0e:ae:e3:e3:e2:f9:7e:fb:12:63:18:3d:31:28:37:
         d6:92:06:64:77:42:04:30:61:58:d1:41:fd:f5:b2:63:a1:ea:
         ef:46:a8:bf:a4:53:a7:09:f1:72:66:0c:43:89:8c:8b:3e:c0:
         ef:37:44:b9:ff:da:88:4a:43:22:95:f5:b6:a3:66:1d:25:3f:
         b5:9d:29:89:fa:9f:2b:13:3d:11:16:14:c7:0d:ce:66:88:05:
         5c:49:4e:5e:6b:6c:21:86:03:af:64:47:24:0d:ab:4a:2e:32:
         94:51:df:55:f3:51:1f:5d:ac:72:27:0d:2d:00:00:46:1d:b7:
         db:27:28:e1:15:cf:0c:4c:81:cd:06:7d:05:2c:6c:5d:d6:bb:
         d1:25:50:2f:2a:07:e3:28:36:00:ae:3f:30:78:b7:a2:29:fe:
         e4:f0:99:89:00:d1:b1:7c:e1:7e:1e:76:23:77:56:79:a6:81:
         13:e6:a0:df:b2:5d:ad:81:52:b1:4c:4d:71:f5:c9:f9:7b:b1:
         5d:df:4c:1b:af:a0:1c:06:3b:62:33:ab:36:ce:41:7e:47:f4:
         f1:e9:6e:8a:04:ed:11:b0:79:ce:dc:15:76:e9:b1:f7:9b:d7:
         3c:46:2c:17
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 04:08:29 2025 by rpki-client