Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/28b0e2e4-5f2a-4ecd-ad6b-97416951f017/088c14c0-87f9-31b9-9bc1-18e2325bcf39.roa
File:                     088c14c0-87f9-31b9-9bc1-18e2325bcf39.roa (raw, json)
Hash identifier:          SAoT3bth0xoNwf36Ne6yLqTcb+mI45EhUUW+gkdYnEM=
Subject key identifier:   99:F4:8B:18:94:1B:48:D8:16:E2:48:E1:E9:E1:97:A7:35:23:09:0D
Certificate issuer:       /CN=28b0e2e4-5f2a-4ecd-ad6b-97416951f017
Certificate serial:       010D0C9F4328584B2496D82CDEB51BF0F9CC2A00
Authority key identifier: 78:E0:85:36:78:70:3F:C9:6B:CE:79:FC:9F:32:58:F4:FF:32:02:55
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/28b0e2e4-5f2a-4ecd-ad6b-97416951f017.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/28b0e2e4-5f2a-4ecd-ad6b-97416951f017/088c14c0-87f9-31b9-9bc1-18e2325bcf39.roa
Signing time:             Wed 10 Sep 2025 01:00:33 +0000
ROA not before:           Wed 10 Sep 2025 01:00:33 +0000
ROA not after:            Tue 09 Dec 2025 02:00:33 +0000
asID:                     393249
IP address blocks:        137.82.0.0/16 maxlen: 16
                          142.103.0.0/16 maxlen: 16
                          192.5.96.0/24 maxlen: 24
                          192.73.5.0/24 maxlen: 24
                          198.162.32.0/19 maxlen: 19
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/28b0e2e4-5f2a-4ecd-ad6b-97416951f017/28b0e2e4-5f2a-4ecd-ad6b-97416951f017.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/28b0e2e4-5f2a-4ecd-ad6b-97416951f017/28b0e2e4-5f2a-4ecd-ad6b-97416951f017.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/28b0e2e4-5f2a-4ecd-ad6b-97416951f017.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 13 Oct 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:24:96:d8:2c:de:b5:1b:f0:f9:cc:2a:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=28b0e2e4-5f2a-4ecd-ad6b-97416951f017
        Validity
            Not Before: Sep 10 01:00:33 2025 GMT
            Not After : Dec  9 02:00:33 2025 GMT
        Subject: CN=e3f89861-b125-4f8d-8682-5943973a60d3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:e3:c7:f0:2d:8d:c4:9e:9c:a9:e7:43:7a:3f:
                    45:85:a5:69:1c:99:87:ce:de:4e:0c:95:18:a3:61:
                    44:b2:f6:d0:48:8c:d5:68:8f:9c:7c:9e:f4:a4:a8:
                    e3:23:1c:0c:56:bb:4b:3b:4b:7b:5a:e8:39:88:20:
                    97:59:b3:da:f0:9e:69:2b:d1:10:3c:d7:1b:6b:45:
                    39:71:ec:93:56:71:19:ad:95:d3:b3:55:58:63:60:
                    e9:50:d9:e0:32:b2:9c:29:56:74:39:18:ec:0a:29:
                    90:bb:24:e0:2c:08:cd:29:04:2f:2c:65:7e:fa:b3:
                    15:8c:49:27:bb:e2:8b:95:4e:2e:77:f0:24:bf:06:
                    e6:bf:05:ae:dd:15:4b:bc:78:a8:ae:df:2b:9d:e2:
                    e8:3f:4e:cb:84:3d:2a:95:83:d1:97:24:e0:ff:e3:
                    d9:f9:ad:fb:b7:7f:97:d3:de:65:d8:75:6b:76:3a:
                    26:18:bc:9e:41:94:28:ae:ea:9c:b8:15:43:37:18:
                    37:d5:48:45:2f:6a:7a:1e:93:15:0e:34:86:4d:75:
                    9b:c9:ed:14:8b:07:e5:bb:08:8c:fa:c4:61:65:d1:
                    e3:fd:6b:1f:8a:00:63:a9:ae:fd:2c:c7:b5:dc:8a:
                    a2:11:36:a1:2c:da:bb:40:fe:de:2d:b4:97:61:45:
                    31:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                99:F4:8B:18:94:1B:48:D8:16:E2:48:E1:E9:E1:97:A7:35:23:09:0D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/28b0e2e4-5f2a-4ecd-ad6b-97416951f017/088c14c0-87f9-31b9-9bc1-18e2325bcf39.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/28b0e2e4-5f2a-4ecd-ad6b-97416951f017/28b0e2e4-5f2a-4ecd-ad6b-97416951f017.crl

            X509v3 Authority Key Identifier:
                keyid:78:E0:85:36:78:70:3F:C9:6B:CE:79:FC:9F:32:58:F4:FF:32:02:55

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/28b0e2e4-5f2a-4ecd-ad6b-97416951f017.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  137.82.0.0/16
                  142.103.0.0/16
                  192.5.96.0/24
                  192.73.5.0/24
                  198.162.32.0/19

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7d:7b:7a:fa:3f:93:6b:51:20:19:e9:4f:f7:63:de:83:07:91:
         53:80:ae:8c:97:e0:0b:e9:e8:62:69:41:7b:17:eb:02:13:61:
         ab:c9:d2:56:ba:4e:2e:e1:0e:33:4b:ff:e0:98:31:e8:07:9f:
         8c:6e:67:8b:ed:1d:89:93:dc:ff:35:78:dd:c8:97:17:07:78:
         9b:e2:f0:82:9f:fa:ba:c7:f8:06:44:ef:88:54:91:10:46:82:
         d9:1c:e8:f5:96:82:f7:81:1c:63:9a:11:96:7b:70:da:df:52:
         c5:0b:28:90:66:25:a7:fe:5a:61:e7:28:c3:48:46:51:c5:ba:
         52:10:db:17:c7:c6:b9:ab:d8:2e:d5:84:2c:49:00:e9:f5:67:
         46:38:c1:99:84:52:84:30:76:b9:fb:f3:a3:46:5c:24:89:d2:
         96:37:09:aa:8f:91:8a:b9:8b:2f:93:25:1d:8d:d3:b9:f5:f9:
         f9:0d:3f:1a:b3:c3:6d:71:6d:ff:26:2d:06:84:13:c3:f7:33:
         b4:e1:17:bc:a6:4b:a3:fa:31:33:ae:b2:8f:2d:aa:58:5e:1d:
         b1:3d:84:71:6e:3e:fb:b2:3a:35:b7:ee:0d:17:f5:3c:cc:e8:
         c0:c4:83:c0:2a:80:ef:7b:5a:99:b8:e1:38:bd:8d:e5:cb:66:
         be:ea:0f:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 11 16:25:16 2025 by rpki-client