Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/9329000c-7d33-3c85-b9df-8ff94084da3d.roa
File:                     9329000c-7d33-3c85-b9df-8ff94084da3d.roa (raw, json)
Hash identifier:          HD4ynBig8CXcNQrQmV4RbZcoAt1ODuUGI8Ag1kdF/xE=
Subject key identifier:   38:84:D7:53:DB:A0:5F:C6:83:03:87:F1:23:2C:9F:1B:19:02:26:A2
Certificate issuer:       /CN=f952aa88-d37b-47ee-bc94-8f7b9f93aa6a
Certificate serial:       010D0C9F4328584A0727D6135B7CDAC19B5EE6C0
Authority key identifier: C0:6E:9A:AC:67:54:6E:8A:CA:9E:27:90:88:75:9F:A8:87:B4:FA:37
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/9329000c-7d33-3c85-b9df-8ff94084da3d.roa
Signing time:             Fri 30 May 2025 19:11:41 +0000
ROA not before:           Fri 30 May 2025 19:11:41 +0000
ROA not after:            Thu 28 Aug 2025 19:11:41 +0000
asID:                     81
IP address blocks:        198.86.244.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 09 Jun 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:07:27:d6:13:5b:7c:da:c1:9b:5e:e6:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f952aa88-d37b-47ee-bc94-8f7b9f93aa6a
        Validity
            Not Before: May 30 19:11:41 2025 GMT
            Not After : Aug 28 19:11:41 2025 GMT
        Subject: CN=cb1f700a-b05c-4667-9e4e-ba80fa27d74f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:78:67:82:83:af:cf:bf:b2:b9:6a:a0:ee:8c:
                    25:34:51:a1:ea:4e:38:12:a1:5c:e1:81:6f:47:73:
                    35:6b:15:64:09:c1:22:29:12:56:23:d7:e5:d5:4b:
                    a5:5a:ea:e5:b8:05:ca:45:85:80:2c:70:1d:d2:30:
                    28:3b:3f:c8:65:8c:a0:6e:c0:ff:36:eb:3d:dd:42:
                    a2:60:50:37:bb:cf:8b:73:f7:76:7f:f4:a8:4d:76:
                    f9:13:79:a8:a8:41:7c:18:94:e1:a7:8c:99:13:4c:
                    8c:09:93:b3:67:6b:e1:53:0f:a5:8e:81:a8:c6:66:
                    39:b8:db:eb:2d:bc:24:05:55:f7:3c:30:f6:d5:be:
                    96:eb:85:62:e3:ad:51:74:ee:f0:31:89:e4:72:a4:
                    ec:d3:28:1a:06:e7:b9:79:99:b3:13:85:b2:82:14:
                    73:29:7a:1b:8e:15:23:43:b9:b9:a0:3d:ab:86:89:
                    65:32:b5:4c:3d:b9:aa:cd:a6:ca:7d:ea:87:e0:12:
                    f4:29:4b:44:29:a4:9f:99:14:b4:a8:5b:bb:06:c0:
                    09:d7:09:4a:b7:18:52:a7:d3:2a:63:a7:7e:48:a4:
                    45:f4:e0:5e:d7:cc:8e:f9:1f:91:21:53:6a:5a:d7:
                    3a:fd:9d:dd:84:eb:19:69:75:07:57:6c:f9:80:f3:
                    71:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                38:84:D7:53:DB:A0:5F:C6:83:03:87:F1:23:2C:9F:1B:19:02:26:A2
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/9329000c-7d33-3c85-b9df-8ff94084da3d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.crl

            X509v3 Authority Key Identifier:
                keyid:C0:6E:9A:AC:67:54:6E:8A:CA:9E:27:90:88:75:9F:A8:87:B4:FA:37

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  198.86.244.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         80:30:cc:e9:c8:ac:98:b5:68:c8:0e:24:a0:7f:f1:16:ba:c5:
         3a:e3:a4:19:16:55:59:e5:3a:d8:87:00:a4:d4:a2:d1:8c:90:
         86:fc:2f:8a:13:e6:27:aa:6d:bd:37:62:87:bc:d6:bb:bb:68:
         30:fd:6a:b2:ff:4f:ad:97:f4:b9:71:78:4d:d3:ae:76:ec:07:
         04:63:d1:e7:06:c8:15:fa:d1:e5:c8:e8:58:27:e9:e4:65:88:
         95:f2:ee:26:22:39:60:e1:cb:f6:0f:3c:33:a0:67:20:33:58:
         9c:36:de:70:17:b8:47:b5:f8:0c:2b:03:b5:11:30:51:12:e8:
         3c:58:e0:67:a7:a7:53:b1:24:83:62:13:c9:a3:21:f4:1d:64:
         dc:b3:a2:42:3f:9b:e0:a1:31:63:0a:16:ae:ef:36:cb:76:c9:
         7b:ed:b1:c5:11:d1:3f:bb:db:7a:f5:1b:bc:90:81:a9:a0:64:
         5d:36:ec:83:3f:5a:e4:5f:03:13:05:f5:02:a8:a9:90:0e:6c:
         55:e4:7f:8b:e1:ba:ab:de:ff:f7:fb:d8:ec:67:86:43:a4:4f:
         21:77:12:e1:49:81:fd:15:ea:41:27:50:c6:c9:1c:07:c7:1e:
         e3:4a:51:09:41:57:52:1d:96:94:3e:4d:c3:d7:81:04:a8:c5:
         38:59:f6:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 03:14:38 2025 by rpki-client