Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/b9030ea5-31a0-4bad-bebd-2fffbce27add/e8deb396-18f0-30fe-ba4e-3f30bc472371.roa
File:                     e8deb396-18f0-30fe-ba4e-3f30bc472371.roa (raw, json)
Hash identifier:          aE4HmQzWHexTq7o/c9AC2Gl4igDz4ze9etIWA3OHHGY=
Subject key identifier:   8B:9B:7C:BF:50:33:7F:55:6D:B0:49:E5:D1:85:94:19:8F:C7:25:E5
Certificate issuer:       /CN=b9030ea5-31a0-4bad-bebd-2fffbce27add
Certificate serial:       010D0C9F4328584AF0F15F86B87525E7FC1C2D40
Authority key identifier: B7:6C:F2:37:A3:77:AF:26:56:71:EE:05:4B:8E:1B:6E:12:E3:9C:62
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/b9030ea5-31a0-4bad-bebd-2fffbce27add.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/b9030ea5-31a0-4bad-bebd-2fffbce27add/e8deb396-18f0-30fe-ba4e-3f30bc472371.roa
Signing time:             Fri 22 Aug 2025 13:00:41 +0000
ROA not before:           Fri 22 Aug 2025 13:00:41 +0000
ROA not after:            Thu 20 Nov 2025 14:00:41 +0000
asID:                     49544
IP address blocks:        130.254.88.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/b9030ea5-31a0-4bad-bebd-2fffbce27add/b9030ea5-31a0-4bad-bebd-2fffbce27add.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/b9030ea5-31a0-4bad-bebd-2fffbce27add/b9030ea5-31a0-4bad-bebd-2fffbce27add.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/b9030ea5-31a0-4bad-bebd-2fffbce27add.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 25 Aug 2025 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:f0:f1:5f:86:b8:75:25:e7:fc:1c:2d:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b9030ea5-31a0-4bad-bebd-2fffbce27add
        Validity
            Not Before: Aug 22 13:00:41 2025 GMT
            Not After : Nov 20 14:00:41 2025 GMT
        Subject: CN=5e210de6-806d-4cde-ad6e-3504e2d3186c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:e1:be:0d:40:35:88:76:cb:ec:4e:51:39:dc:
                    e5:29:39:a6:74:e9:f6:e2:bd:ba:ca:84:bc:d3:ea:
                    a3:71:2d:f3:ea:d8:93:a1:08:db:64:48:5d:e8:72:
                    16:44:55:c8:3a:01:5a:e7:ec:bc:2e:22:fd:8e:0b:
                    e7:e4:80:4d:24:9f:25:84:bb:06:b3:a5:2b:25:66:
                    a9:4c:52:64:59:2c:89:44:0f:5c:ba:30:20:f7:6f:
                    2b:56:27:61:96:8b:75:48:51:f7:d0:c7:dc:da:af:
                    6d:60:11:b6:76:09:6c:77:73:05:7f:3d:5f:b4:ec:
                    76:d1:58:3f:9a:f6:7b:14:4b:ea:5c:da:67:1b:0d:
                    60:be:49:a5:f1:6e:a9:3e:9f:cd:d9:19:fd:d0:7f:
                    50:9a:3b:09:e3:7e:69:18:e5:98:47:f0:87:2b:ee:
                    a6:a5:32:d5:c4:e7:1a:c7:df:9c:b5:b8:24:0f:aa:
                    46:89:43:3e:4a:bb:4c:75:26:7e:e2:ac:99:66:5e:
                    3a:89:57:9c:be:76:9b:39:21:2e:77:b9:58:43:76:
                    43:17:ec:f5:7e:4d:bc:97:a7:d9:58:04:20:8b:b3:
                    d3:40:2b:97:ba:d3:4a:93:c9:7a:72:ee:4c:7c:34:
                    13:75:6a:16:ea:99:95:26:47:1d:56:39:4b:51:e1:
                    db:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8B:9B:7C:BF:50:33:7F:55:6D:B0:49:E5:D1:85:94:19:8F:C7:25:E5
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/b9030ea5-31a0-4bad-bebd-2fffbce27add/e8deb396-18f0-30fe-ba4e-3f30bc472371.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/b9030ea5-31a0-4bad-bebd-2fffbce27add/b9030ea5-31a0-4bad-bebd-2fffbce27add.crl

            X509v3 Authority Key Identifier:
                keyid:B7:6C:F2:37:A3:77:AF:26:56:71:EE:05:4B:8E:1B:6E:12:E3:9C:62

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/b9030ea5-31a0-4bad-bebd-2fffbce27add.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  130.254.88.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         37:3c:16:10:2a:94:1c:e1:f5:6c:97:be:05:fa:08:18:24:9e:
         7b:8e:7d:47:2b:70:5c:b2:49:76:cc:ed:b4:4d:9f:71:6f:a1:
         fc:1c:0d:4e:43:a1:65:5b:ca:b4:d6:54:e0:bc:52:93:30:c4:
         a1:0a:c1:f2:79:9f:58:64:fa:92:25:c8:9e:82:2d:4f:60:9d:
         74:b3:6d:c8:19:71:32:03:15:4f:8b:cd:a8:72:e3:6b:4b:c4:
         9c:b3:59:df:bd:92:b0:4e:dc:00:3d:e4:7c:0f:63:ba:d9:f4:
         ba:b0:65:60:a7:84:7a:53:60:f8:18:f2:ee:86:bc:1b:ff:f2:
         1c:c0:99:c1:fd:1c:d4:75:a6:f8:3b:d7:42:be:42:47:fd:9e:
         b5:97:45:21:b6:5f:a3:f4:3d:46:89:12:11:36:61:e7:b3:27:
         4f:47:da:61:b2:3e:b5:d0:85:86:64:4c:0e:82:5c:db:2f:bd:
         8c:9d:0c:3e:6c:33:1d:2e:21:94:df:0f:33:9c:4e:e5:d8:33:
         e4:fa:a8:f0:fd:c0:82:39:b6:33:ce:86:23:d0:26:19:3e:ad:
         4e:78:55:34:e5:d9:17:c6:3f:f5:6a:e6:bc:71:bb:55:2b:4a:
         b3:31:ee:5b:5b:a6:ea:cc:04:1e:8c:9d:6c:a9:e1:c0:94:8c:
         bb:ff:8b:21
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 23:50:07 2025 by rpki-client