Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/0f303122-395f-3998-a8d9-fb83d68492ab.roa
File:                     0f303122-395f-3998-a8d9-fb83d68492ab.roa (raw, json)
Hash identifier:          28x6PN3SOQcpzWUPWUq1GzeFA4ExRS7s5cP9UmXXQGo=
Subject key identifier:   48:E4:D9:3B:32:15:DC:46:C3:58:2D:B6:BE:0A:45:26:CA:91:3E:0D
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F4328584B95A7ECD8680B30C12802C280
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/0f303122-395f-3998-a8d9-fb83d68492ab.roa
Signing time:             Mon 20 Oct 2025 13:00:38 +0000
ROA not before:           Mon 20 Oct 2025 13:00:38 +0000
ROA not after:            Sun 18 Jan 2026 14:00:38 +0000
asID:                     7015
IP address blocks:        174.180.88.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 23 Oct 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:95:a7:ec:d8:68:0b:30:c1:28:02:c2:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Oct 20 13:00:38 2025 GMT
            Not After : Jan 18 14:00:38 2026 GMT
        Subject: CN=c882eef1-040d-4520-9ce8-d9dbd421584d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:41:a5:48:79:b4:12:50:6d:6b:3e:3c:72:d3:
                    1f:9a:81:86:b4:9e:84:ef:65:cf:40:23:6b:90:65:
                    7c:17:36:64:bc:8a:02:c6:42:c9:cc:d3:5e:3d:a1:
                    f5:8f:1d:81:03:2a:e1:ba:c5:1c:8a:a5:5a:d9:ce:
                    cd:11:99:e5:d7:58:a7:15:ea:f4:13:f7:3f:48:c1:
                    ad:03:ed:7e:49:b6:1f:ec:8c:82:86:16:d7:f3:37:
                    18:01:0a:67:c4:40:85:60:7e:e3:56:84:1e:cd:fd:
                    3f:f0:b9:46:04:0d:13:70:8a:33:5e:fe:53:91:68:
                    6a:75:74:03:cd:21:17:13:50:7e:49:ef:f6:d7:00:
                    98:a4:90:4b:36:98:72:6b:02:11:ab:87:db:e0:dc:
                    c1:ab:0b:b0:73:7c:84:d7:f4:82:81:2d:c7:c8:c7:
                    69:0c:37:17:a3:81:b5:71:0a:6f:1f:bf:31:4a:8b:
                    65:e3:84:6e:32:bd:1d:75:8e:1d:76:71:f3:ed:bc:
                    27:a8:56:ac:bb:7e:0d:34:1e:55:4d:5b:42:bc:c7:
                    57:45:e6:fd:c3:ac:27:38:14:ec:31:9a:17:ff:76:
                    42:fa:03:19:d7:2a:54:f4:ef:95:f5:fe:9b:83:3f:
                    d8:6f:57:07:82:31:d0:02:7c:9e:74:59:8c:97:37:
                    ce:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                48:E4:D9:3B:32:15:DC:46:C3:58:2D:B6:BE:0A:45:26:CA:91:3E:0D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/0f303122-395f-3998-a8d9-fb83d68492ab.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  174.180.88.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         79:34:ed:15:6b:2e:7d:ea:e7:4e:53:5e:05:c5:e2:f3:2a:8e:
         42:3d:ea:fc:e7:74:63:8e:5c:c1:51:5a:4a:67:19:ff:53:78:
         21:1f:7e:48:af:7b:90:a4:75:75:a0:6c:b1:87:5a:8c:91:3c:
         ef:80:a0:46:51:9d:f0:8e:8a:ea:bc:7b:28:bf:40:49:28:99:
         d6:67:02:26:ee:76:aa:01:25:05:46:99:a0:97:e8:0a:41:4b:
         1a:e1:5c:51:dc:89:62:be:eb:d4:d9:e9:92:58:34:c3:c2:b4:
         f9:47:61:ce:2f:8b:7b:a8:2e:1d:33:79:ff:ab:3e:59:a3:5a:
         e7:3f:b8:92:e2:ff:c0:b0:35:88:78:2f:ed:7c:48:ab:21:1d:
         ad:98:bd:05:6e:7d:de:75:af:2f:23:15:ca:12:8f:9d:01:a6:
         b6:08:b0:f8:5a:cf:a8:c0:4d:af:66:33:aa:48:3f:d3:97:ce:
         02:7a:c2:f6:63:ff:02:04:c7:1e:fc:c0:aa:03:8d:b3:ce:0f:
         87:ea:37:a2:92:cb:31:03:d8:a6:91:ff:b8:8a:5f:87:a1:5f:
         6c:3b:b5:db:0c:5f:6c:39:e0:74:3a:e2:b0:41:f4:df:6d:3b:
         69:d1:ae:e0:de:68:e4:79:e5:92:de:8e:2d:1c:42:67:e6:b1:
         d3:30:f4:b4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 21 19:36:08 2025 by rpki-client