Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/389ccac4-3a4f-31cc-8314-f01742908fa8.roa
File:                     389ccac4-3a4f-31cc-8314-f01742908fa8.roa (raw, json)
Hash identifier:          CmY3XeDVRR0dHZu0KugSjRQp8MTeA4InHRY+Uhd1hLk=
Subject key identifier:   0C:20:71:E7:BD:DF:76:00:F8:F4:37:DD:96:00:8F:F8:E8:5C:0A:A3
Certificate issuer:       /CN=c2070b9e-789d-4f95-bca5-30e065e9a31d
Certificate serial:       010D0C9F4328584AFFE71F8653238B6D609D0D00
Authority key identifier: F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/389ccac4-3a4f-31cc-8314-f01742908fa8.roa
Signing time:             Wed 27 Aug 2025 21:37:35 +0000
ROA not before:           Wed 27 Aug 2025 21:37:35 +0000
ROA not after:            Tue 25 Nov 2025 22:37:35 +0000
asID:                     31898
IP address blocks:        162.88.8.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 11 Oct 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:ff:e7:1f:86:53:23:8b:6d:60:9d:0d:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c2070b9e-789d-4f95-bca5-30e065e9a31d
        Validity
            Not Before: Aug 27 21:37:35 2025 GMT
            Not After : Nov 25 22:37:35 2025 GMT
        Subject: CN=81749026-8d55-4cf9-b37e-7c62964054e0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e5:52:73:90:26:3b:f7:d1:d9:cb:1f:60:c5:7c:
                    ee:a6:a9:a2:dd:a1:43:d2:9f:04:f8:1e:5a:d3:b3:
                    7e:00:4c:68:dd:f4:02:93:7c:d3:e8:2f:5c:cd:58:
                    7a:65:94:34:f3:8f:30:da:7b:93:33:35:48:66:1c:
                    bc:02:24:75:8c:47:d1:cf:a6:f8:c4:c6:ee:25:ce:
                    7b:f7:65:f8:50:5b:9c:da:bf:44:70:27:d6:bb:da:
                    cc:7f:96:ba:89:48:7a:54:81:8f:58:61:0a:43:4d:
                    94:2f:d8:a5:55:19:fd:94:85:61:f4:90:5c:20:8d:
                    a5:d2:f4:16:5f:4f:e7:16:0a:00:37:24:2b:8e:e0:
                    ff:b7:c0:67:39:92:f4:13:fc:dc:3a:a2:62:28:8c:
                    e8:62:63:e1:d2:61:5b:8b:ec:fc:1b:90:ec:f7:82:
                    10:b7:f6:90:79:f6:2f:1b:ce:23:bd:c5:e0:83:71:
                    6b:b9:03:e6:fe:d2:3c:0f:fb:f5:ee:fe:a7:c6:97:
                    6e:09:27:bf:75:10:c4:7d:3d:4a:c1:1c:57:df:36:
                    2f:b9:72:4c:4a:52:54:66:f3:51:19:ed:75:73:4a:
                    c0:9b:66:a4:7c:68:fd:8c:73:da:41:f8:39:53:cd:
                    23:8c:b3:7c:4b:a8:8d:ae:4b:d2:d5:c8:6e:cf:1b:
                    d9:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0C:20:71:E7:BD:DF:76:00:F8:F4:37:DD:96:00:8F:F8:E8:5C:0A:A3
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/389ccac4-3a4f-31cc-8314-f01742908fa8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl

            X509v3 Authority Key Identifier:
                keyid:F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  162.88.8.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         04:d8:cb:90:86:76:81:7e:c9:ed:f9:e9:b5:0f:0e:fa:6f:51:
         23:fe:54:57:ab:da:f3:e8:be:48:5e:ca:42:c5:e1:e4:17:6a:
         5e:22:e9:8a:e5:8b:70:f7:49:de:94:76:85:ab:ec:f4:b6:42:
         c8:b6:1f:0b:e1:89:0b:a7:e7:d0:ae:8e:37:99:92:07:f9:da:
         32:4a:30:46:cc:49:ad:cc:68:8b:87:9f:5b:b6:a0:05:8b:ca:
         2d:85:c2:0a:b3:5e:f4:10:33:fb:28:3f:60:fa:26:1b:59:da:
         5c:80:fd:25:51:8b:b1:4e:8e:38:ea:1e:7c:97:78:15:77:d8:
         06:2f:9b:76:c7:7e:36:eb:c1:04:19:ac:e1:ac:62:dc:98:4c:
         b5:2d:8c:95:b7:61:32:7b:22:c9:40:c5:18:42:e8:e0:be:56:
         51:6a:36:1e:90:05:69:f3:0d:7f:c5:5a:1d:c4:53:8d:99:a1:
         ce:bc:f1:48:37:ee:6c:ac:02:dc:7f:b2:ce:29:41:1a:0b:f4:
         8c:63:02:1b:01:d3:b8:5a:3c:87:f1:e1:19:1b:28:bd:2d:cd:
         5e:fb:14:b2:f3:9e:fb:0e:48:13:b5:d5:fb:45:b3:dd:b5:fa:
         4f:36:14:c2:64:c3:4e:93:67:80:81:cc:d6:3c:b3:39:80:db:
         36:a3:f9:b8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 9 00:58:27 2025 by rpki-client