Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/0b883aa7-bd4f-4703-b044-59552058f266/98f7161e-4b96-39d0-a64f-56b992ee2e54.roa
File:                     98f7161e-4b96-39d0-a64f-56b992ee2e54.roa (raw, json)
Hash identifier:          edC4YsESqRL/g0aYTuDMsHbBorHo57PAv8pVLgfqA7E=
Subject key identifier:   F5:6E:88:88:7B:30:B9:30:BF:F6:0B:D7:02:74:32:E8:6B:2D:1B:E5
Certificate issuer:       /CN=0b883aa7-bd4f-4703-b044-59552058f266
Certificate serial:       010D0C9F4328584B044FAD346794EDAEBE910400
Authority key identifier: 83:A9:D3:49:01:EB:18:49:AF:28:59:BC:2C:FE:2D:7B:B4:A3:1F:8D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/0b883aa7-bd4f-4703-b044-59552058f266.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/0b883aa7-bd4f-4703-b044-59552058f266/98f7161e-4b96-39d0-a64f-56b992ee2e54.roa
Signing time:             Fri 29 Aug 2025 11:31:28 +0000
ROA not before:           Fri 29 Aug 2025 11:31:28 +0000
ROA not after:            Thu 27 Nov 2025 12:31:28 +0000
asID:                     7922
IP address blocks:        64.112.8.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/0b883aa7-bd4f-4703-b044-59552058f266/0b883aa7-bd4f-4703-b044-59552058f266.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/0b883aa7-bd4f-4703-b044-59552058f266/0b883aa7-bd4f-4703-b044-59552058f266.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/0b883aa7-bd4f-4703-b044-59552058f266.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 10 Oct 2025 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:04:4f:ad:34:67:94:ed:ae:be:91:04:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0b883aa7-bd4f-4703-b044-59552058f266
        Validity
            Not Before: Aug 29 11:31:28 2025 GMT
            Not After : Nov 27 12:31:28 2025 GMT
        Subject: CN=02bf5019-31a0-4792-a820-5031547d33b3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:f6:b3:c0:87:86:6f:8e:54:e0:6f:63:01:88:
                    52:ae:60:3d:84:64:be:7f:a1:48:5b:32:1e:b7:11:
                    c0:a6:08:0a:1d:da:8c:d8:c5:d6:e4:cc:32:b2:3d:
                    cb:13:79:c0:27:66:69:76:a5:ab:6d:0a:b4:fd:33:
                    70:e6:f8:8c:c4:de:dd:8d:58:e3:9a:96:8b:0e:41:
                    67:3f:93:31:45:42:ef:d2:f1:8b:f9:d4:e7:a6:f5:
                    9a:3e:f1:43:92:9c:a5:45:c4:13:88:80:79:0a:4e:
                    0b:ac:20:51:08:77:36:b8:dd:57:88:02:5d:f6:7a:
                    a6:34:1d:8e:21:28:3b:5a:af:d4:de:66:cf:64:16:
                    2e:8f:9a:1b:29:13:38:0d:84:da:e2:8c:19:38:f5:
                    8c:91:ce:49:f8:6d:8b:7c:18:2b:0a:6a:2f:35:26:
                    df:bb:fe:1c:af:9d:b0:cd:81:f7:5b:95:77:c9:6c:
                    7f:3f:ef:21:56:d3:df:2b:38:fe:aa:0f:55:e7:ec:
                    e5:f8:a8:b2:a5:cc:00:48:54:a3:3c:96:ce:78:de:
                    49:f0:80:ec:bc:87:ed:51:f5:60:f1:29:3e:98:70:
                    e1:3c:69:bb:b7:f5:4f:ab:4f:05:dc:1e:13:1b:4a:
                    96:5a:86:9c:b0:76:ae:47:1e:a9:2d:96:6e:28:76:
                    7d:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F5:6E:88:88:7B:30:B9:30:BF:F6:0B:D7:02:74:32:E8:6B:2D:1B:E5
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/0b883aa7-bd4f-4703-b044-59552058f266/98f7161e-4b96-39d0-a64f-56b992ee2e54.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/0b883aa7-bd4f-4703-b044-59552058f266/0b883aa7-bd4f-4703-b044-59552058f266.crl

            X509v3 Authority Key Identifier:
                keyid:83:A9:D3:49:01:EB:18:49:AF:28:59:BC:2C:FE:2D:7B:B4:A3:1F:8D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/0b883aa7-bd4f-4703-b044-59552058f266.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  64.112.8.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         b2:d4:85:28:90:1c:fd:32:d9:03:d0:2f:0f:a6:2a:60:d2:bb:
         1d:31:a5:db:ea:77:30:de:8d:d9:ad:d3:1f:69:21:43:ae:ec:
         81:53:96:6c:0f:75:1d:8f:85:30:29:a1:84:a1:b9:40:10:99:
         3b:a5:db:c5:45:4f:e6:66:63:ac:4b:13:eb:fd:ad:0e:25:f6:
         98:a8:ae:2f:fa:0a:a2:62:ae:b1:98:de:d0:a9:d4:01:b0:3f:
         2a:68:e2:18:9b:2c:e4:7c:93:84:7f:a5:8c:02:b2:b2:fc:31:
         43:fb:1a:51:31:8c:92:60:e9:59:6e:62:3f:62:8a:3f:b2:ff:
         27:20:41:6b:2a:80:5e:2e:9c:42:24:61:30:b6:7d:d2:28:89:
         60:d3:c0:b0:fc:ab:84:23:81:10:5f:be:b7:d7:8b:95:14:6b:
         12:ce:10:d0:80:aa:d6:53:52:54:51:35:80:15:93:18:88:a0:
         67:90:06:6c:d1:a8:c7:0a:14:50:cc:d9:dc:54:09:4f:81:d0:
         b2:ec:cd:5e:5d:38:02:5f:96:a2:23:11:13:ce:91:70:44:24:
         13:5b:3b:36:11:ad:db:50:72:28:67:6d:5f:5b:5e:c3:ed:20:
         cb:bd:e3:d7:55:f7:fb:69:64:e6:d8:01:4e:6b:c0:81:46:e5:
         54:64:b0:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 9 01:13:00 2025 by rpki-client