Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/88e058e6-ff68-4d5d-b7b8-04d1661ec235/5eef130d-0c76-3809-a4ca-7c2b066f7eae.roa
File:                     5eef130d-0c76-3809-a4ca-7c2b066f7eae.roa (raw, json)
Hash identifier:          enGOPN1A+G+mHjIXqzatnXhoW3EIn6Sq/6DGXfg/ACQ=
Subject key identifier:   B9:E2:D8:4C:75:4C:C2:FB:C1:14:0B:D0:9F:DC:22:04:A3:71:74:DC
Certificate issuer:       /CN=88e058e6-ff68-4d5d-b7b8-04d1661ec235
Certificate serial:       010D0C9F4328584B08ABF19044820D963EA15280
Authority key identifier: 7F:1F:72:F4:8D:1D:D7:6F:87:2D:2D:EA:F2:15:9E:CA:D3:6A:2D:42
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/88e058e6-ff68-4d5d-b7b8-04d1661ec235.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/88e058e6-ff68-4d5d-b7b8-04d1661ec235/5eef130d-0c76-3809-a4ca-7c2b066f7eae.roa
Signing time:             Sun 31 Aug 2025 01:00:33 +0000
ROA not before:           Sun 31 Aug 2025 01:00:33 +0000
ROA not after:            Sat 29 Nov 2025 02:00:33 +0000
asID:                     20
IP address blocks:        199.89.214.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/88e058e6-ff68-4d5d-b7b8-04d1661ec235/88e058e6-ff68-4d5d-b7b8-04d1661ec235.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/88e058e6-ff68-4d5d-b7b8-04d1661ec235/88e058e6-ff68-4d5d-b7b8-04d1661ec235.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/88e058e6-ff68-4d5d-b7b8-04d1661ec235.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 11 Oct 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:08:ab:f1:90:44:82:0d:96:3e:a1:52:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=88e058e6-ff68-4d5d-b7b8-04d1661ec235
        Validity
            Not Before: Aug 31 01:00:33 2025 GMT
            Not After : Nov 29 02:00:33 2025 GMT
        Subject: CN=b44c8180-bb8d-4ef4-8ce2-5bcb4a2baab4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:89:aa:47:89:6b:f5:79:ed:0c:9e:c4:cd:a7:
                    c1:f5:a1:00:69:67:b5:03:82:65:74:43:d4:f7:6f:
                    35:22:8e:52:95:9a:50:80:6e:a9:a5:69:f7:ac:29:
                    7f:41:ce:12:34:89:1f:fe:02:06:71:97:71:06:64:
                    2f:77:2a:cf:b6:be:e7:02:f5:af:21:26:00:4c:fb:
                    24:1f:3d:32:f1:ef:0f:ae:24:6e:ea:f0:ff:80:50:
                    af:91:b9:06:4a:fe:7f:fd:55:f4:56:13:b2:97:9c:
                    d1:c4:fb:e9:4b:04:a8:14:62:5e:d5:e5:bc:ed:de:
                    60:f9:2a:04:20:c4:db:69:35:48:ba:40:b7:e2:03:
                    91:a5:35:d4:fe:9a:da:6d:8c:e5:9c:3d:e3:79:09:
                    41:34:81:48:a4:ee:a2:a7:bb:fd:7c:e2:b4:83:31:
                    10:fb:04:13:10:00:5e:89:f9:60:ef:bf:c8:f2:99:
                    e5:b0:a2:a3:37:0a:f3:e9:14:f1:b7:db:fe:01:9d:
                    21:ac:f6:33:c5:0d:2d:3a:9b:64:39:37:07:5a:d3:
                    64:7e:35:5d:c7:32:8a:53:41:d7:9a:e8:74:3d:68:
                    4d:4b:b1:b0:2d:da:69:cb:4e:97:af:d5:77:35:13:
                    d9:52:ee:13:ec:f0:5c:b2:a6:75:c1:08:a6:30:81:
                    ce:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B9:E2:D8:4C:75:4C:C2:FB:C1:14:0B:D0:9F:DC:22:04:A3:71:74:DC
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/88e058e6-ff68-4d5d-b7b8-04d1661ec235/5eef130d-0c76-3809-a4ca-7c2b066f7eae.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/88e058e6-ff68-4d5d-b7b8-04d1661ec235/88e058e6-ff68-4d5d-b7b8-04d1661ec235.crl

            X509v3 Authority Key Identifier:
                keyid:7F:1F:72:F4:8D:1D:D7:6F:87:2D:2D:EA:F2:15:9E:CA:D3:6A:2D:42

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/88e058e6-ff68-4d5d-b7b8-04d1661ec235.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.89.214.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         93:f0:ec:ac:e6:c6:c2:9d:48:81:de:8a:38:df:a1:bf:28:7e:
         be:49:e6:ea:7b:88:d2:8a:97:03:52:ca:48:31:e5:04:41:66:
         58:39:c0:3a:93:32:b8:86:9c:3b:c2:41:e1:c9:f8:9d:0a:0e:
         33:60:27:c9:b7:22:bd:3f:b0:82:5e:90:4f:1a:21:60:da:7a:
         12:6b:ef:05:38:7b:0e:e1:3e:ba:56:48:ef:02:3d:41:c7:c3:
         da:1e:24:8d:cf:06:74:52:53:3a:c0:7e:30:7c:fc:e3:db:79:
         ed:2b:68:7a:ae:7b:2f:e5:d1:a5:10:53:87:45:fa:eb:7f:38:
         ea:2a:c6:f3:e0:30:90:48:6c:3b:1b:30:89:cb:6f:b6:56:8a:
         24:30:f3:53:96:e1:d8:09:87:c0:67:62:a0:d7:ea:5e:28:db:
         ed:0d:88:27:8e:8a:41:0b:a7:82:ab:9f:79:0b:b7:09:f5:aa:
         cd:5a:f9:76:b0:1d:9c:f4:39:ca:cd:f0:75:a9:dd:f3:eb:80:
         16:48:0b:2c:36:84:f7:4b:20:4d:73:e5:26:05:37:d0:e3:61:
         c2:00:4d:1b:8a:f0:82:a2:71:7f:ea:3e:a8:df:90:18:af:cd:
         57:33:c0:27:46:06:73:d2:a0:a3:c6:57:95:37:ee:fc:bf:94:
         f7:03:4c:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 10 03:57:06 2025 by rpki-client