Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/a8896b29-5f5f-31c5-955e-c41e695b37fe.roa
File:                     a8896b29-5f5f-31c5-955e-c41e695b37fe.roa (raw, json)
Hash identifier:          mytov+k7usGvWU7U9vwdx9/vaJZm7t/t+RuMT3ycNSw=
Subject key identifier:   53:8C:CF:E2:33:74:A5:DD:4B:2B:5A:13:69:73:45:05:7E:66:CE:FF
Certificate issuer:       /CN=f952aa88-d37b-47ee-bc94-8f7b9f93aa6a
Certificate serial:       010D0C9F4328584B16A161798EE3D75D2AD07660
Authority key identifier: C0:6E:9A:AC:67:54:6E:8A:CA:9E:27:90:88:75:9F:A8:87:B4:FA:37
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/a8896b29-5f5f-31c5-955e-c41e695b37fe.roa
Signing time:             Fri 05 Sep 2025 01:00:33 +0000
ROA not before:           Fri 05 Sep 2025 01:00:33 +0000
ROA not after:            Thu 04 Dec 2025 02:00:33 +0000
asID:                     81
IP address blocks:        192.101.22.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 10 Sep 2025 17:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:16:a1:61:79:8e:e3:d7:5d:2a:d0:76:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f952aa88-d37b-47ee-bc94-8f7b9f93aa6a
        Validity
            Not Before: Sep  5 01:00:33 2025 GMT
            Not After : Dec  4 02:00:33 2025 GMT
        Subject: CN=ffa44640-834c-4642-b0fc-cb11efebee58
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:b8:03:4d:7c:08:70:5a:10:a8:3e:fc:c3:54:
                    2d:2f:17:c9:74:b9:cd:76:d7:30:03:fb:10:ca:4e:
                    07:be:88:32:04:8a:33:a2:6f:a4:41:31:4d:98:04:
                    4e:fb:bf:d0:75:85:53:17:8b:88:0d:ed:69:d7:66:
                    9f:e0:ea:38:e4:28:61:64:f0:8f:6f:4d:4b:5c:e1:
                    af:c3:c6:3a:88:a2:ba:a6:a0:47:f0:c3:3c:fe:ab:
                    ad:78:29:50:40:b1:b4:41:97:c8:f0:92:08:d4:26:
                    75:91:85:e5:67:aa:92:ed:58:a9:8a:10:d9:a9:82:
                    ca:a4:bf:76:cc:80:15:c7:e2:cb:50:d7:73:3e:29:
                    ba:1e:e5:99:3a:35:89:74:dc:e4:fc:fc:57:37:28:
                    f2:79:f5:29:d4:c3:d1:ce:9e:f4:ac:7d:63:5d:be:
                    4c:95:7b:56:b3:8c:f4:35:a3:12:d5:b4:59:eb:bd:
                    ee:e6:10:96:e3:4e:0c:27:0e:5e:57:51:36:d0:3a:
                    cf:3c:07:85:07:65:8a:c5:fa:db:89:c8:e2:8d:31:
                    0a:c5:9b:2e:98:ce:31:87:bc:01:7c:23:73:59:53:
                    da:cb:78:18:e9:77:bb:0f:2f:ce:d3:a1:c0:15:39:
                    f6:ed:c0:62:b1:4b:29:04:b7:55:9a:3c:c6:29:1e:
                    b6:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                53:8C:CF:E2:33:74:A5:DD:4B:2B:5A:13:69:73:45:05:7E:66:CE:FF
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/a8896b29-5f5f-31c5-955e-c41e695b37fe.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.crl

            X509v3 Authority Key Identifier:
                keyid:C0:6E:9A:AC:67:54:6E:8A:CA:9E:27:90:88:75:9F:A8:87:B4:FA:37

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.101.22.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         66:20:8f:85:27:54:8e:d1:46:22:c3:a2:41:36:9f:4a:f8:9b:
         1f:af:53:a8:b1:bf:2a:c1:c5:c6:6f:3a:71:37:53:16:be:54:
         93:e3:7e:57:ee:27:4e:ac:c0:1b:77:4d:e2:8a:fd:e8:ce:65:
         fb:f0:92:f7:81:d0:93:1d:5f:d1:26:74:a8:d3:20:02:79:33:
         37:2c:5e:78:43:5e:8c:42:4b:e9:d1:05:08:4c:a2:86:d7:18:
         a2:23:74:87:7d:e6:f1:10:7e:d3:b0:2f:73:e7:26:68:32:ff:
         32:e1:16:79:40:66:82:db:13:e9:e1:27:8f:19:ac:04:b3:67:
         85:79:d2:6f:13:7d:3a:e9:a6:dc:3c:29:6d:1a:83:0d:3e:a4:
         3e:44:a6:6b:83:3b:44:f9:68:93:82:10:1e:ae:0f:af:67:8e:
         7a:97:be:1c:c8:4f:13:66:1b:58:92:40:8d:c5:16:95:85:93:
         1a:0c:5c:52:f6:2c:7e:eb:cf:f7:74:58:7a:ae:5e:d2:6e:b1:
         b3:5f:80:0e:01:18:e2:a0:6d:9c:67:8e:06:43:0d:25:de:a1:
         79:84:d4:e6:d3:ae:be:d4:e9:5d:87:04:f3:86:4e:83:30:97:
         04:45:3e:66:9a:a6:24:bc:24:67:52:0e:aa:1a:02:0d:d6:47:
         14:1f:59:8a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 9 08:06:01 2025 by rpki-client