Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c6e86b52-dd36-46b7-afe5-266195bdcf1a/88e3d175-c5a4-3013-946a-49cb10702dec.roa
File:                     88e3d175-c5a4-3013-946a-49cb10702dec.roa (raw, json)
Hash identifier:          XwOn7aCv0dFNSuCR+/30xMERVpShjG2kVxHpL3xRV9s=
Subject key identifier:   9D:88:71:17:87:B1:42:BD:05:48:BF:CC:85:5C:97:DD:96:FC:39:78
Certificate issuer:       /CN=c6e86b52-dd36-46b7-afe5-266195bdcf1a
Certificate serial:       010D0C9F4328584B0CDC135909F1C5C9E7E3BE00
Authority key identifier: F6:49:17:0D:24:FB:CF:BC:02:F8:B9:17:FA:AA:FE:4D:CE:55:E4:D6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c6e86b52-dd36-46b7-afe5-266195bdcf1a.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c6e86b52-dd36-46b7-afe5-266195bdcf1a/88e3d175-c5a4-3013-946a-49cb10702dec.roa
Signing time:             Mon 01 Sep 2025 13:00:40 +0000
ROA not before:           Mon 01 Sep 2025 13:00:40 +0000
ROA not after:            Sun 30 Nov 2025 14:00:40 +0000
asID:                     26744
IP address blocks:        199.166.248.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c6e86b52-dd36-46b7-afe5-266195bdcf1a/c6e86b52-dd36-46b7-afe5-266195bdcf1a.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c6e86b52-dd36-46b7-afe5-266195bdcf1a/c6e86b52-dd36-46b7-afe5-266195bdcf1a.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c6e86b52-dd36-46b7-afe5-266195bdcf1a.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 21 Sep 2025 13:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:0c:dc:13:59:09:f1:c5:c9:e7:e3:be:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c6e86b52-dd36-46b7-afe5-266195bdcf1a
        Validity
            Not Before: Sep  1 13:00:40 2025 GMT
            Not After : Nov 30 14:00:40 2025 GMT
        Subject: CN=e308877f-2a9f-4f32-ae9e-ee016a947f9f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:22:f7:0b:18:06:61:92:cd:c1:30:7c:54:67:
                    7f:93:d3:3e:ff:08:03:d7:80:c8:a0:ea:fe:79:94:
                    82:45:15:d9:29:f1:6d:a7:25:84:d8:06:2c:03:c7:
                    71:c3:7d:e9:87:2c:f3:c8:58:f6:f3:b7:f4:00:5f:
                    ac:de:fe:5c:de:62:54:fe:5f:87:1d:7c:c7:b4:35:
                    e2:49:ee:9b:bd:70:d3:3b:20:db:1f:3a:bd:21:7d:
                    cf:9d:1f:5d:dc:15:df:e2:b1:3c:8b:e0:5f:f4:dc:
                    2c:55:1b:90:da:88:1b:b9:21:7e:f1:ff:9a:87:d2:
                    63:35:9f:b0:24:4b:25:2e:8c:f7:2b:b7:32:20:2c:
                    ac:ba:1d:51:51:d5:6b:33:71:90:14:ce:44:42:9d:
                    7d:10:0b:1f:55:ac:35:90:97:4b:8b:69:c2:8b:bc:
                    6b:7b:6e:69:10:b7:23:17:ba:fe:b4:9a:45:1f:fe:
                    d7:e7:a3:e2:6e:48:24:ee:bc:ba:cb:ed:89:94:8e:
                    8f:2d:a8:b3:42:b0:e2:db:7d:a5:15:d6:b3:04:c1:
                    7e:72:9c:c8:b5:35:14:a5:82:2d:f2:44:30:a6:de:
                    57:a2:29:40:33:0a:48:26:17:e6:06:93:16:81:15:
                    b1:50:c3:89:60:b6:e0:1a:7c:44:28:dc:5a:cf:38:
                    bb:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9D:88:71:17:87:B1:42:BD:05:48:BF:CC:85:5C:97:DD:96:FC:39:78
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c6e86b52-dd36-46b7-afe5-266195bdcf1a/88e3d175-c5a4-3013-946a-49cb10702dec.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c6e86b52-dd36-46b7-afe5-266195bdcf1a/c6e86b52-dd36-46b7-afe5-266195bdcf1a.crl

            X509v3 Authority Key Identifier:
                keyid:F6:49:17:0D:24:FB:CF:BC:02:F8:B9:17:FA:AA:FE:4D:CE:55:E4:D6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c6e86b52-dd36-46b7-afe5-266195bdcf1a.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.166.248.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1b:55:10:dd:fe:99:ab:ff:62:2f:a9:00:7f:75:01:4f:d5:8f:
         26:b4:86:a0:df:f8:6d:bb:58:a9:72:65:cb:78:ea:3a:0d:f9:
         eb:c8:30:a2:86:dc:63:82:0e:c2:11:09:8f:0d:b7:ff:67:ae:
         71:38:e6:34:9e:51:d2:97:8d:40:c8:d9:1d:f9:3f:4c:a5:a1:
         ca:1a:75:6c:54:1f:6b:a2:53:16:42:0d:0f:aa:a2:a9:8b:b2:
         71:60:5b:72:64:f7:ec:e2:a7:bd:79:c9:d6:8d:27:85:1a:94:
         c2:d4:67:26:47:c5:06:8c:96:65:94:82:dd:d0:98:e8:c8:ce:
         44:ea:84:01:72:a9:ef:16:29:36:7b:59:c3:2e:59:78:2b:ff:
         3c:b2:a6:4f:58:ea:2f:36:0e:21:03:c6:32:64:23:af:1e:42:
         85:86:68:3c:85:8b:2a:a9:73:4f:56:0f:40:b2:14:f6:9c:7e:
         a0:98:59:67:ad:4b:b1:97:5b:fa:fe:e7:c5:6e:bd:26:ea:85:
         20:3d:f7:91:71:1a:05:a8:ee:3d:ec:d6:62:b8:2a:7d:2f:45:
         c2:45:69:ab:64:3e:07:a5:e5:a7:a7:06:d5:20:27:e8:71:bf:
         89:15:2b:0e:71:23:68:8a:ce:85:77:6f:e5:78:5f:3d:e4:2c:
         4a:4e:d9:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 19 14:21:28 2025 by rpki-client