Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/22cd03f4-746e-302a-bcc3-ded6414fe51d.roa
File:                     22cd03f4-746e-302a-bcc3-ded6414fe51d.roa (raw, json)
Hash identifier:          SxoEc8vug51RrYkBoAtTm01NbhEU9OQ9JDN7JhHF+LY=
Subject key identifier:   3B:C2:99:1F:93:1B:E4:1C:54:B0:8B:C0:0F:24:50:81:A3:67:08:D8
Certificate issuer:       /CN=f952aa88-d37b-47ee-bc94-8f7b9f93aa6a
Certificate serial:       010D0C9F4328584B16A16C57A07113DAEB50AFC0
Authority key identifier: C0:6E:9A:AC:67:54:6E:8A:CA:9E:27:90:88:75:9F:A8:87:B4:FA:37
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/22cd03f4-746e-302a-bcc3-ded6414fe51d.roa
Signing time:             Fri 05 Sep 2025 01:00:33 +0000
ROA not before:           Fri 05 Sep 2025 01:00:33 +0000
ROA not after:            Thu 04 Dec 2025 02:00:33 +0000
asID:                     81
IP address blocks:        198.86.104.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 10 Sep 2025 17:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:16:a1:6c:57:a0:71:13:da:eb:50:af:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f952aa88-d37b-47ee-bc94-8f7b9f93aa6a
        Validity
            Not Before: Sep  5 01:00:33 2025 GMT
            Not After : Dec  4 02:00:33 2025 GMT
        Subject: CN=e9bbff97-3cac-4ac0-9406-925ea0a47229
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:50:b1:c4:4c:5c:40:71:80:e2:e0:ca:04:84:
                    65:6f:d2:2e:9a:0f:0c:82:de:37:fb:fc:fd:7a:76:
                    8d:ae:2e:10:8d:9e:d1:31:d2:5a:3d:1b:4b:7c:11:
                    88:bc:b0:79:76:69:92:0a:79:6b:bf:63:fe:34:ae:
                    37:0f:9b:38:01:8b:a6:56:c6:d1:eb:89:fd:32:7a:
                    d2:51:55:84:66:1b:c6:1a:4d:0f:e8:64:8e:1e:b2:
                    89:7e:64:ed:c9:37:83:1f:f8:38:6d:b1:d3:83:f3:
                    da:d3:7b:8d:cc:d1:70:f9:49:80:91:06:dc:aa:9c:
                    55:a0:a4:38:3e:13:0d:b3:33:7f:f5:fc:91:4a:0e:
                    1f:c9:8b:2e:18:71:25:80:14:78:38:af:85:6e:1d:
                    ac:f9:83:31:01:e6:9d:9d:fb:93:0a:ea:c8:52:c6:
                    c8:39:cb:f1:77:8e:13:43:68:02:76:ba:fd:83:d3:
                    bd:3d:d7:d3:a0:61:0b:12:3a:3b:fe:12:b3:2e:e5:
                    82:f1:c6:85:79:91:65:1e:50:a2:ff:4f:1a:0f:1a:
                    ce:e6:01:16:8a:c8:9e:a0:ba:6a:c1:24:52:cc:2d:
                    27:eb:7f:bd:88:5f:22:d4:c1:82:3d:22:fd:f5:85:
                    41:d8:ab:11:4b:a9:cf:dd:10:ae:51:0c:28:ca:18:
                    b6:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3B:C2:99:1F:93:1B:E4:1C:54:B0:8B:C0:0F:24:50:81:A3:67:08:D8
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/22cd03f4-746e-302a-bcc3-ded6414fe51d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.crl

            X509v3 Authority Key Identifier:
                keyid:C0:6E:9A:AC:67:54:6E:8A:CA:9E:27:90:88:75:9F:A8:87:B4:FA:37

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  198.86.104.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         18:c8:0b:57:33:30:76:f3:dc:90:a9:51:4b:62:91:c3:e6:4f:
         df:fe:5e:c9:ad:54:3e:6f:de:9e:99:06:7d:27:e7:9f:5e:fb:
         29:f2:88:89:ce:c1:d1:ed:24:91:95:d0:71:ee:aa:17:ab:76:
         ac:c4:61:db:1b:b8:49:9e:f5:7c:a4:1a:50:1b:0a:92:db:21:
         df:c8:39:66:60:cf:d6:95:28:91:35:e4:95:25:c3:8e:25:fc:
         33:9f:e2:16:a5:fb:40:d9:f8:95:95:6e:a6:1e:fc:e1:d9:74:
         a9:9f:3a:ee:cc:c9:50:1a:88:15:c3:d6:80:89:74:57:4b:f6:
         35:85:7e:eb:b0:6c:2f:52:77:c8:42:d1:3a:12:c7:87:68:bd:
         74:38:d9:4b:cb:c4:15:19:ee:f7:c5:fa:85:3c:18:e9:ab:da:
         e6:0a:d9:e5:27:a4:23:6b:58:a2:4b:87:a2:de:29:1b:9e:5e:
         e2:70:7c:23:43:87:85:de:d9:06:39:6e:17:45:0f:3a:63:a8:
         ec:5c:8b:bb:89:a4:af:e9:a3:55:1d:69:b4:5d:dd:4b:f4:04:
         48:4f:30:6e:18:63:a0:9d:4d:f7:3a:79:98:8e:9d:4a:f4:d5:
         8a:20:e9:19:67:39:4d:79:d0:1d:d2:db:77:aa:fc:46:30:35:
         7f:b5:4b:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 9 08:00:15 2025 by rpki-client