Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/88842878-1050-4df7-822b-ea8ec25db83d/d7ea5d8d-dec7-3bb3-afdc-d97a2eb61c2c.roa
File:                     d7ea5d8d-dec7-3bb3-afdc-d97a2eb61c2c.roa (raw, json)
Hash identifier:          gAZb/dXgqsg1ps2wH5RDvkCHOdDi+n9ZJ9VBtOgmu5M=
Subject key identifier:   A8:87:18:2B:1B:DB:28:D6:32:12:C3:C6:27:0E:F8:70:AE:D4:8A:9C
Certificate issuer:       /CN=88842878-1050-4df7-822b-ea8ec25db83d
Certificate serial:       010D0C9F4328584B047C018FC6985BBF8F88E780
Authority key identifier: 0A:F4:2F:69:20:F1:AA:D7:6D:67:3C:86:9A:04:C8:80:1E:AD:7D:99
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/88842878-1050-4df7-822b-ea8ec25db83d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/88842878-1050-4df7-822b-ea8ec25db83d/d7ea5d8d-dec7-3bb3-afdc-d97a2eb61c2c.roa
Signing time:             Fri 29 Aug 2025 13:00:41 +0000
ROA not before:           Fri 29 Aug 2025 13:00:41 +0000
ROA not after:            Thu 27 Nov 2025 14:00:41 +0000
asID:                     2495
IP address blocks:        198.248.196.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/88842878-1050-4df7-822b-ea8ec25db83d/88842878-1050-4df7-822b-ea8ec25db83d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/88842878-1050-4df7-822b-ea8ec25db83d/88842878-1050-4df7-822b-ea8ec25db83d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/88842878-1050-4df7-822b-ea8ec25db83d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 11 Oct 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:04:7c:01:8f:c6:98:5b:bf:8f:88:e7:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=88842878-1050-4df7-822b-ea8ec25db83d
        Validity
            Not Before: Aug 29 13:00:41 2025 GMT
            Not After : Nov 27 14:00:41 2025 GMT
        Subject: CN=ca0dc5ff-c815-46eb-907e-7d250eab4434
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:6c:ce:09:7d:f7:fa:49:b3:01:45:af:82:16:
                    7a:95:b5:f5:2a:b2:77:a1:21:e4:3c:5d:f5:04:ee:
                    12:0b:cb:4d:5f:16:85:07:fb:48:29:f4:4d:a8:43:
                    da:2e:a5:53:69:ed:93:d3:f1:2e:a9:a6:0e:87:85:
                    6d:44:2e:0a:ac:ba:c7:f6:ea:57:25:34:13:cc:f4:
                    7b:9c:d6:3a:e7:13:fc:da:69:ea:ca:0d:46:19:e7:
                    a7:87:c4:3f:b9:07:03:47:70:dd:00:71:94:42:a1:
                    7b:f3:94:89:e2:76:ac:56:f2:02:a8:93:96:16:e6:
                    fc:4c:65:5f:90:cf:57:75:06:d2:0a:af:5f:fd:dc:
                    04:83:fa:c9:33:69:38:e3:35:7a:5b:cc:82:a7:7b:
                    9f:e1:6b:fa:59:a0:10:03:91:85:29:63:e1:ea:c4:
                    db:b2:e4:00:2c:30:0a:a6:32:30:bb:6b:44:21:e6:
                    99:75:d0:7e:65:2b:01:17:ef:1a:d5:69:20:fd:28:
                    e4:82:38:15:a3:a6:d4:6e:c2:d6:15:ab:4b:e7:cc:
                    60:ad:d8:53:0a:60:d1:49:82:be:1e:08:b6:e0:f9:
                    79:33:68:62:ca:0c:9f:40:1c:54:ed:94:bd:36:62:
                    8c:9a:64:1a:64:d8:8d:06:93:3e:dc:79:75:47:14:
                    aa:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A8:87:18:2B:1B:DB:28:D6:32:12:C3:C6:27:0E:F8:70:AE:D4:8A:9C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/88842878-1050-4df7-822b-ea8ec25db83d/d7ea5d8d-dec7-3bb3-afdc-d97a2eb61c2c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/88842878-1050-4df7-822b-ea8ec25db83d/88842878-1050-4df7-822b-ea8ec25db83d.crl

            X509v3 Authority Key Identifier:
                keyid:0A:F4:2F:69:20:F1:AA:D7:6D:67:3C:86:9A:04:C8:80:1E:AD:7D:99

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/88842878-1050-4df7-822b-ea8ec25db83d.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  198.248.196.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         66:61:41:d9:72:90:9f:2d:d3:17:5b:e3:fc:1a:e2:a1:a0:c2:
         76:53:cf:ba:d1:f5:9a:e7:76:b6:6c:86:cd:f3:ff:80:31:e8:
         20:88:63:70:75:a2:84:d7:27:41:ff:cc:97:69:8e:e9:e0:78:
         cb:d6:f0:1c:38:a2:af:4e:32:ce:0c:e1:af:85:fa:21:ed:26:
         5b:98:16:35:b2:3f:72:16:fb:fc:a3:54:33:24:b3:ae:94:5e:
         43:58:01:77:5a:68:a7:2b:5a:8d:71:2e:93:e9:a7:f9:2c:df:
         13:46:c1:ea:ed:04:c6:73:44:28:0d:44:0a:fc:23:13:00:2d:
         38:a6:a5:a7:c4:e6:36:91:75:c1:1b:95:e1:f3:cf:92:01:66:
         f2:2c:1d:d4:fe:de:f3:88:b9:3e:76:7f:52:73:42:0f:2e:9a:
         94:be:32:86:f6:42:6b:36:a4:a8:67:d4:bf:02:6f:57:bc:ef:
         b1:db:81:c3:2e:96:b4:d6:b3:4e:e7:cf:3b:73:65:e0:82:b6:
         8d:18:17:d7:56:85:24:00:89:35:f4:14:8c:75:9d:98:fc:07:
         89:f1:de:e1:a9:61:ba:40:a8:9c:84:90:f5:25:7c:c6:2e:fb:
         2b:7d:ec:3f:2f:35:d2:93:32:ee:fd:c8:c7:50:c1:37:a9:d2:
         25:1f:b8:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 9 20:09:11 2025 by rpki-client