Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/cc9383e4-2c51-4ffd-bfe9-69e9fd6c5b58/88e8ac82-36b4-37a5-b462-616b45ade786.roa
File:                     88e8ac82-36b4-37a5-b462-616b45ade786.roa (raw, json)
Hash identifier:          V5YRey0Q9JlaY67SYGg7t8SU4bgYZV45ZwEbwVRMXC8=
Subject key identifier:   FE:9F:2E:3C:67:23:1E:C5:15:77:A3:0E:EA:17:93:63:A0:7A:C8:85
Certificate issuer:       /CN=cc9383e4-2c51-4ffd-bfe9-69e9fd6c5b58
Certificate serial:       010D0C9F4328584A89A61BC3E6718DCFC4A81380
Authority key identifier: 26:D1:9B:B5:02:FD:CB:75:4D:60:A0:BB:6A:8F:47:07:E2:4C:17:3B
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/cc9383e4-2c51-4ffd-bfe9-69e9fd6c5b58.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/cc9383e4-2c51-4ffd-bfe9-69e9fd6c5b58/88e8ac82-36b4-37a5-b462-616b45ade786.roa
Signing time:             Wed 16 Jul 2025 13:01:03 +0000
ROA not before:           Wed 16 Jul 2025 13:01:03 +0000
ROA not after:            Tue 14 Oct 2025 13:01:03 +0000
asID:                     55293
IP address blocks:        216.137.176.0/20 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/cc9383e4-2c51-4ffd-bfe9-69e9fd6c5b58/cc9383e4-2c51-4ffd-bfe9-69e9fd6c5b58.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/cc9383e4-2c51-4ffd-bfe9-69e9fd6c5b58/cc9383e4-2c51-4ffd-bfe9-69e9fd6c5b58.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/cc9383e4-2c51-4ffd-bfe9-69e9fd6c5b58.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 26 Jul 2025 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:89:a6:1b:c3:e6:71:8d:cf:c4:a8:13:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cc9383e4-2c51-4ffd-bfe9-69e9fd6c5b58
        Validity
            Not Before: Jul 16 13:01:03 2025 GMT
            Not After : Oct 14 13:01:03 2025 GMT
        Subject: CN=54885cb1-d67b-453d-8e0e-b429ee7adf16
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:82:88:90:df:a8:d1:8a:2a:b0:63:2c:66:cf:8e:
                    b3:bd:c6:9a:2f:bf:d7:82:8d:8a:8c:56:65:be:05:
                    45:38:3f:9c:78:aa:33:e9:29:67:69:f0:2a:53:15:
                    ad:aa:2b:d0:6a:c7:7b:96:c8:ce:d6:6c:77:3a:aa:
                    40:31:d6:2e:61:ec:2e:25:3c:f6:8f:7f:ad:7b:c3:
                    af:47:a6:46:5d:f2:e5:97:ea:cc:ec:04:89:8d:7a:
                    83:8e:f3:97:09:05:76:eb:51:52:b8:70:9c:62:aa:
                    4d:fe:da:1e:40:65:c8:19:25:30:8d:6c:ba:37:60:
                    78:56:34:75:59:05:3d:56:26:5b:02:03:32:4b:89:
                    62:88:85:44:b1:e2:fd:cb:71:92:b3:4a:bf:64:1e:
                    05:11:a9:61:f4:de:20:83:5c:e3:c2:1a:1c:5f:83:
                    b4:ae:d4:f9:b9:d3:7f:19:08:b8:c2:8b:84:a5:27:
                    65:a1:01:1a:34:04:91:c6:28:7e:23:ea:59:23:cc:
                    ed:d5:b4:05:48:78:c9:d1:85:a8:e2:60:85:52:48:
                    82:84:48:b7:3f:39:3d:1e:8e:37:d2:7f:c6:da:69:
                    2c:ac:94:54:aa:61:37:12:02:b1:a3:45:2a:5a:ad:
                    81:af:2f:ee:ee:05:0c:21:8b:ab:1e:f1:36:03:ed:
                    0f:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FE:9F:2E:3C:67:23:1E:C5:15:77:A3:0E:EA:17:93:63:A0:7A:C8:85
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/cc9383e4-2c51-4ffd-bfe9-69e9fd6c5b58/88e8ac82-36b4-37a5-b462-616b45ade786.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/cc9383e4-2c51-4ffd-bfe9-69e9fd6c5b58/cc9383e4-2c51-4ffd-bfe9-69e9fd6c5b58.crl

            X509v3 Authority Key Identifier:
                keyid:26:D1:9B:B5:02:FD:CB:75:4D:60:A0:BB:6A:8F:47:07:E2:4C:17:3B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/cc9383e4-2c51-4ffd-bfe9-69e9fd6c5b58.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  216.137.176.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4d:69:ff:ee:0d:11:0e:fc:ab:e9:ad:b9:a3:0c:09:42:d4:cd:
         c1:32:e6:f8:cc:b5:2c:2a:48:8f:89:59:fc:71:2d:c0:d1:30:
         06:8c:41:52:0f:be:9a:81:e1:3f:76:66:3d:5f:61:e9:e9:9b:
         07:5c:45:03:b9:5b:77:1d:49:d2:57:da:95:5b:23:8e:a0:11:
         c3:3a:0d:7d:d1:aa:64:f1:44:e2:62:7c:fe:f2:19:35:12:5c:
         99:02:b9:77:02:b0:2e:8c:9e:b8:74:4f:ee:a2:c3:2b:97:65:
         3d:24:18:b1:03:98:f9:2d:dd:74:cd:c1:f0:84:f4:e6:34:64:
         75:fd:99:54:92:fe:69:88:77:d8:7c:bb:3a:29:ce:bf:08:a2:
         e9:99:8b:f1:49:29:26:5b:f5:15:52:f3:20:0d:62:1d:fa:35:
         e7:45:45:53:25:08:f7:17:af:89:91:1b:0c:ad:8c:bc:b1:65:
         80:ae:13:01:37:a9:63:6d:c1:a2:2d:64:de:67:fd:42:4e:9e:
         48:c5:04:71:fa:8b:75:1d:ea:b2:d3:00:a0:95:e9:96:85:0d:
         c1:41:87:e0:67:a0:64:8b:20:5e:a6:7a:56:8e:88:a8:1b:d0:
         e7:0e:4e:0a:77:cd:74:4f:14:f1:61:b7:d6:c2:15:39:41:a1:
         08:d7:75:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 25 13:01:53 2025 by rpki-client