Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/cc9383e4-2c51-4ffd-bfe9-69e9fd6c5b58/88479a7a-2aaa-3469-bf73-a6b9d5c2d2e8.roa
File:                     88479a7a-2aaa-3469-bf73-a6b9d5c2d2e8.roa (raw, json)
Hash identifier:          deAT2t+aresXBErfvoCDA5ES61U5V95mdWIO+eX0sGA=
Subject key identifier:   B2:2C:39:6A:B6:62:D4:F3:1B:16:4B:40:B3:41:B9:6D:83:A3:71:1C
Certificate issuer:       /CN=cc9383e4-2c51-4ffd-bfe9-69e9fd6c5b58
Certificate serial:       010D0C9F4328584A89A6189FFD82CC951473DE00
Authority key identifier: 26:D1:9B:B5:02:FD:CB:75:4D:60:A0:BB:6A:8F:47:07:E2:4C:17:3B
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/cc9383e4-2c51-4ffd-bfe9-69e9fd6c5b58.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/cc9383e4-2c51-4ffd-bfe9-69e9fd6c5b58/88479a7a-2aaa-3469-bf73-a6b9d5c2d2e8.roa
Signing time:             Wed 16 Jul 2025 13:01:03 +0000
ROA not before:           Wed 16 Jul 2025 13:01:03 +0000
ROA not after:            Tue 14 Oct 2025 13:01:03 +0000
asID:                     55293
IP address blocks:        64.4.160.0/22 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/cc9383e4-2c51-4ffd-bfe9-69e9fd6c5b58/cc9383e4-2c51-4ffd-bfe9-69e9fd6c5b58.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/cc9383e4-2c51-4ffd-bfe9-69e9fd6c5b58/cc9383e4-2c51-4ffd-bfe9-69e9fd6c5b58.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/cc9383e4-2c51-4ffd-bfe9-69e9fd6c5b58.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 26 Jul 2025 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:89:a6:18:9f:fd:82:cc:95:14:73:de:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cc9383e4-2c51-4ffd-bfe9-69e9fd6c5b58
        Validity
            Not Before: Jul 16 13:01:03 2025 GMT
            Not After : Oct 14 13:01:03 2025 GMT
        Subject: CN=ffe45068-c0f9-452e-b31a-9d0f1cb610c2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e2:0d:43:84:4c:f9:9e:9a:29:93:1d:a5:37:4e:
                    79:93:a4:5b:82:72:57:8d:d2:25:c5:33:d7:3c:aa:
                    22:8d:d9:7c:a4:d8:e6:ba:2f:de:0d:82:05:cf:57:
                    28:52:11:c6:e8:4b:69:6c:61:5c:fb:07:21:9b:3f:
                    22:86:21:95:34:f0:0d:28:40:bb:9b:bf:52:15:50:
                    f0:5b:90:f5:71:b5:95:21:b0:c0:e8:4f:18:02:35:
                    71:d2:0a:6e:fa:c8:2c:94:1e:f3:c1:69:05:af:73:
                    7a:a5:98:74:0c:50:1b:5e:7a:18:fa:3f:b1:a0:0d:
                    0a:5c:99:7e:06:20:70:86:97:4e:d0:34:3a:26:66:
                    b2:9d:b0:e6:6c:05:15:09:d0:9f:40:10:b5:dd:d7:
                    0d:07:5c:07:84:ba:a8:cb:a0:35:2a:f1:47:16:fc:
                    f2:6c:0e:65:a8:e5:b6:a7:c0:f2:98:b1:14:8e:e1:
                    1b:fe:db:d5:27:9b:b5:23:bc:16:5e:b6:ff:04:24:
                    7f:22:b1:7e:61:0b:85:29:e0:d3:59:f0:34:b5:18:
                    14:ee:1d:2c:39:aa:00:eb:8d:5d:70:7e:73:6a:ad:
                    ef:27:8a:84:af:d2:f5:b4:2c:a2:de:59:f0:b9:55:
                    2a:c2:9e:d8:cc:c0:1f:84:01:38:4d:a6:e6:de:40:
                    ad:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B2:2C:39:6A:B6:62:D4:F3:1B:16:4B:40:B3:41:B9:6D:83:A3:71:1C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/cc9383e4-2c51-4ffd-bfe9-69e9fd6c5b58/88479a7a-2aaa-3469-bf73-a6b9d5c2d2e8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/cc9383e4-2c51-4ffd-bfe9-69e9fd6c5b58/cc9383e4-2c51-4ffd-bfe9-69e9fd6c5b58.crl

            X509v3 Authority Key Identifier:
                keyid:26:D1:9B:B5:02:FD:CB:75:4D:60:A0:BB:6A:8F:47:07:E2:4C:17:3B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/cc9383e4-2c51-4ffd-bfe9-69e9fd6c5b58.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  64.4.160.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1d:80:31:08:e9:c2:36:d1:e6:78:d7:e5:e6:f6:c6:20:86:2d:
         a6:94:6e:6a:e4:62:ae:b9:3c:0f:e5:ad:2f:e6:66:d2:0e:cd:
         84:bd:ed:6a:55:b0:c7:2d:c1:a1:fe:f6:76:6e:f5:da:5f:57:
         8f:c3:25:6a:01:0c:d5:c0:c7:6f:ee:9e:43:ba:2a:50:99:72:
         72:ec:7f:33:a1:b2:3e:68:8a:1a:67:ce:d0:fb:10:ff:75:9a:
         ee:e5:6a:19:56:a6:ec:ab:5b:d4:d4:02:c8:c1:f4:78:1e:85:
         11:47:b5:5b:36:36:5e:fd:a6:12:37:e4:e4:68:29:77:90:f7:
         20:3e:ec:37:18:de:8a:d0:62:00:70:2b:83:b8:7d:7b:1e:c3:
         b0:c6:a7:9d:85:48:b6:fd:2d:43:bf:09:3f:17:30:62:c5:11:
         1e:ff:e2:a1:f4:bf:4c:90:4e:0f:85:5c:b6:d8:78:b4:5d:59:
         a8:a5:a1:97:fb:53:18:a2:e8:bc:92:bf:68:c7:ae:03:f7:8f:
         fb:78:98:7f:4b:12:68:7e:46:49:b8:4c:84:1d:c2:d6:c3:3d:
         de:19:61:20:e9:d0:45:fc:d1:b8:61:6a:93:d4:d3:39:9b:9b:
         8b:5d:dd:ae:d4:41:20:da:e8:c0:0b:78:2c:47:27:82:6a:62:
         e0:92:fd:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 25 12:59:04 2025 by rpki-client