Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/7167ea5f-811a-4441-8916-556d83efd033/88c4e6b8-172c-3ade-933f-aa3f36db79aa.roa
File:                     88c4e6b8-172c-3ade-933f-aa3f36db79aa.roa (raw, json)
Hash identifier:          X4PKzYKUBhcrWoKhaGn/5sUYKJOjV1dNKujTQTWHjog=
Subject key identifier:   6F:C4:D0:A5:36:54:FE:A6:FE:C3:E8:C5:B6:C1:92:EE:B8:FD:D6:FD
Certificate issuer:       /CN=7167ea5f-811a-4441-8916-556d83efd033
Certificate serial:       010D0C9F4328584B0746B3AB96D806BF205FFFA0
Authority key identifier: 39:79:53:0C:27:5C:8F:B6:9B:A2:FC:BF:03:C4:39:6E:A3:D9:14:D4
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/7167ea5f-811a-4441-8916-556d83efd033.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/7167ea5f-811a-4441-8916-556d83efd033/88c4e6b8-172c-3ade-933f-aa3f36db79aa.roa
Signing time:             Sat 30 Aug 2025 13:00:42 +0000
ROA not before:           Sat 30 Aug 2025 13:00:42 +0000
ROA not after:            Fri 28 Nov 2025 14:00:42 +0000
asID:                     19846
IP address blocks:        172.83.82.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/7167ea5f-811a-4441-8916-556d83efd033/7167ea5f-811a-4441-8916-556d83efd033.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/7167ea5f-811a-4441-8916-556d83efd033/7167ea5f-811a-4441-8916-556d83efd033.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/7167ea5f-811a-4441-8916-556d83efd033.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 20 Oct 2025 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:07:46:b3:ab:96:d8:06:bf:20:5f:ff:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7167ea5f-811a-4441-8916-556d83efd033
        Validity
            Not Before: Aug 30 13:00:42 2025 GMT
            Not After : Nov 28 14:00:42 2025 GMT
        Subject: CN=90489b5b-c3f9-4427-96a5-f4132a841e3e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:ba:9b:dc:3c:c6:c4:5e:83:56:b3:7b:a7:b3:
                    d4:b3:33:a8:ec:1d:a4:f8:55:d5:63:e7:64:47:a3:
                    59:af:75:dd:13:55:4b:20:dc:29:b1:d8:76:9e:cd:
                    1c:ac:a7:81:68:4d:2a:90:a7:4c:08:f7:dc:ac:44:
                    78:66:76:da:eb:66:45:4c:b9:50:e5:cc:24:7d:69:
                    91:c2:84:c4:76:4d:67:52:a1:8f:91:22:f2:96:ff:
                    c9:6b:af:13:27:3c:0b:f2:ae:a5:9c:87:ba:87:91:
                    b0:3e:2d:68:85:c3:2e:25:40:2c:c4:e9:a4:86:23:
                    79:66:fe:db:fe:76:2c:d3:9a:b4:30:67:df:ff:2d:
                    eb:d6:91:e2:19:16:ef:15:bd:24:fc:aa:22:e6:ac:
                    b6:18:d4:20:88:53:c3:0d:34:8c:2b:86:02:95:ef:
                    8b:03:84:c8:29:c3:cc:0b:83:45:3c:12:3a:e4:39:
                    a7:28:a4:6c:7c:7c:68:df:83:5b:ca:83:d2:29:d8:
                    d5:06:b5:db:37:16:da:54:d4:fe:ec:09:55:16:b7:
                    96:67:0b:30:ad:c5:e6:4b:87:05:f8:6c:5b:4c:87:
                    d2:06:fd:d5:da:f4:5b:89:80:bd:71:f6:7c:1c:53:
                    d9:c4:40:13:3e:8e:80:ea:72:16:1e:64:aa:fb:e6:
                    24:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6F:C4:D0:A5:36:54:FE:A6:FE:C3:E8:C5:B6:C1:92:EE:B8:FD:D6:FD
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/7167ea5f-811a-4441-8916-556d83efd033/88c4e6b8-172c-3ade-933f-aa3f36db79aa.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/7167ea5f-811a-4441-8916-556d83efd033/7167ea5f-811a-4441-8916-556d83efd033.crl

            X509v3 Authority Key Identifier:
                keyid:39:79:53:0C:27:5C:8F:B6:9B:A2:FC:BF:03:C4:39:6E:A3:D9:14:D4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/7167ea5f-811a-4441-8916-556d83efd033.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  172.83.82.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         05:fa:bf:18:db:7d:66:4b:c4:b0:8a:6a:40:b6:5b:e6:a2:a3:
         72:d5:73:24:78:7c:f1:ac:c2:35:a2:29:7c:b6:0f:3c:61:b5:
         09:0f:2b:4d:48:9f:08:1c:41:98:59:1d:bd:9d:88:b8:10:91:
         c9:b3:49:1d:f2:3c:44:7a:35:4e:68:e5:36:bb:95:9d:9a:d3:
         97:27:bf:74:c2:bd:15:3a:62:28:98:3e:e6:12:0d:dc:57:30:
         50:6f:3e:a6:46:b6:37:04:39:01:e6:27:4d:60:20:8b:d9:cd:
         74:2b:dc:e1:30:a4:df:59:28:ff:9b:e7:a0:7d:07:4d:9b:0e:
         03:fd:ee:66:97:9d:02:2d:a5:32:86:9c:0f:0c:2b:6e:b4:4e:
         df:0f:be:1b:c9:88:d7:47:18:b5:cb:a9:25:2a:ad:53:bb:41:
         a3:f7:f6:46:ad:5e:95:27:8f:0d:06:2d:33:9a:1a:50:ca:f3:
         99:d5:1e:bf:5f:16:82:7e:d5:cb:92:2e:4e:42:52:f5:d5:56:
         dc:bc:19:a4:2b:5a:14:1f:60:0c:9f:85:8e:a7:31:9d:6e:3d:
         59:15:83:12:3a:b5:92:aa:de:af:be:61:d7:13:f7:3f:30:fc:
         87:48:dd:60:d9:ba:bf:5d:7b:50:5f:fe:5b:8d:a2:18:ef:75:
         72:9b:82:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 12:27:01 2025 by rpki-client