Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/5ccc221e-f692-3d65-be01-456a313c8f78.roa
File:                     5ccc221e-f692-3d65-be01-456a313c8f78.roa (raw, json)
Hash identifier:          r6pM/gAm5Gwkco8UZTjd/1Yk4PsMMxhtLJEr7FzCbAo=
Subject key identifier:   74:22:2B:5D:27:9F:9E:12:AD:33:2E:7A:E3:27:11:7F:85:6F:FD:64
Certificate issuer:       /CN=c2070b9e-789d-4f95-bca5-30e065e9a31d
Certificate serial:       010D0C9F4328584AFFE72813DA08B1301C8CDA00
Authority key identifier: F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/5ccc221e-f692-3d65-be01-456a313c8f78.roa
Signing time:             Wed 27 Aug 2025 21:37:39 +0000
ROA not before:           Wed 27 Aug 2025 21:37:39 +0000
ROA not after:            Tue 25 Nov 2025 22:37:39 +0000
asID:                     31898
IP address blocks:        162.88.29.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 11 Oct 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:ff:e7:28:13:da:08:b1:30:1c:8c:da:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c2070b9e-789d-4f95-bca5-30e065e9a31d
        Validity
            Not Before: Aug 27 21:37:39 2025 GMT
            Not After : Nov 25 22:37:39 2025 GMT
        Subject: CN=239710c3-f4d9-4953-be1b-f7c00847afd0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:bb:a7:d0:bf:0b:5b:21:4b:5a:b9:5d:21:47:
                    ed:11:e9:fe:54:cb:5f:70:42:9e:5d:30:77:df:e9:
                    3b:ad:85:b4:52:65:66:b5:f1:fd:e8:02:03:d5:f3:
                    58:0f:2d:e9:d5:4e:e2:cf:e4:80:5c:fc:28:c4:ec:
                    99:5a:81:16:e0:76:36:34:2a:2c:85:4d:bd:58:fc:
                    f0:3a:0c:47:a2:de:bb:02:06:49:5e:bb:ee:bd:e8:
                    a6:30:62:a1:bf:59:35:67:58:56:c7:e2:f2:b6:e5:
                    d2:1a:b8:79:84:23:6d:41:72:5e:03:85:95:1d:20:
                    77:14:1f:92:e2:77:44:0a:b0:0a:23:ca:de:b0:86:
                    fd:cb:a7:62:1b:d5:02:1a:9a:b3:d3:02:8a:34:7c:
                    89:ff:1d:9a:56:c7:02:4b:df:a0:0e:51:36:21:45:
                    84:aa:92:3f:16:9e:06:fe:04:af:dd:43:03:1c:41:
                    5b:f1:e7:34:3c:4a:34:7a:78:43:61:92:0d:6e:b5:
                    d2:36:42:72:2c:de:04:dd:31:46:bc:12:aa:30:ba:
                    5e:3d:59:b4:2a:d2:35:15:26:00:ba:dd:f9:25:20:
                    36:09:fe:ab:53:db:31:2f:e0:1c:1b:b1:aa:76:29:
                    9c:ca:e0:43:66:45:7b:54:8c:18:fc:14:48:df:e0:
                    6f:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                74:22:2B:5D:27:9F:9E:12:AD:33:2E:7A:E3:27:11:7F:85:6F:FD:64
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/5ccc221e-f692-3d65-be01-456a313c8f78.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl

            X509v3 Authority Key Identifier:
                keyid:F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  162.88.29.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         03:3e:05:f3:4f:9d:89:54:b5:6f:a8:c8:06:da:7f:2c:a6:da:
         1d:7b:86:35:aa:5b:e9:b7:c6:ef:2d:12:d4:8c:0a:61:51:6b:
         e8:f7:5d:41:f2:52:9b:0d:79:97:e4:ae:34:ff:9d:2c:67:c1:
         32:03:7d:72:dd:95:f0:47:65:ff:e7:d4:e7:0b:56:8f:8d:bc:
         f6:1c:c8:b1:2c:0c:b0:5c:92:b1:f6:c8:ed:4b:86:83:77:e8:
         58:61:54:f5:78:0b:0e:53:81:15:41:00:a4:ce:f5:85:c0:24:
         92:5c:dd:fd:94:1d:4c:f1:8b:04:bf:81:13:8c:3b:f7:bf:85:
         5c:89:05:ba:b5:ac:cf:8e:00:de:90:c2:22:ff:a9:84:48:3f:
         42:ba:b8:c1:ca:1d:c9:b9:a8:a3:2e:be:2b:99:22:3f:38:c2:
         b3:2f:6c:7b:47:9f:0a:96:74:8f:00:a1:05:98:67:70:a0:d6:
         63:5e:03:1b:df:02:51:d3:cc:d9:e5:0a:e5:6f:fc:a3:7f:48:
         94:69:3c:16:a1:a4:4f:ac:61:5a:bc:df:d9:b4:0b:66:72:b7:
         ec:56:92:f5:c3:11:67:6a:2a:6e:fa:a1:27:ca:99:b8:84:fb:
         05:80:35:0c:6e:b2:5a:a7:42:c2:3c:02:33:7d:c8:74:14:e3:
         ed:de:e5:fc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 9 00:56:00 2025 by rpki-client