Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/0be0d1a4-2c88-4596-81d7-3b6685e04a2d/a7fbd760-6ed0-3731-864b-962a37a9d75f.roa
File:                     a7fbd760-6ed0-3731-864b-962a37a9d75f.roa (raw, json)
Hash identifier:          OgWlqmndQEmIx1vGLDnQUZb7fphZGDWp7NYsl0FS8co=
Subject key identifier:   67:FF:67:96:6E:CE:61:80:86:2D:5C:A5:76:32:57:0D:33:38:7D:31
Certificate issuer:       /CN=0be0d1a4-2c88-4596-81d7-3b6685e04a2d
Certificate serial:       010D0C9F4328584A761B600DE8C8A6F787D13B00
Authority key identifier: BF:9B:E4:B5:3E:13:95:1F:07:53:D8:E9:0C:8E:45:5A:0E:B5:0C:82
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/0be0d1a4-2c88-4596-81d7-3b6685e04a2d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/0be0d1a4-2c88-4596-81d7-3b6685e04a2d/a7fbd760-6ed0-3731-864b-962a37a9d75f.roa
Signing time:             Wed 09 Jul 2025 13:01:04 +0000
ROA not before:           Wed 09 Jul 2025 13:01:04 +0000
ROA not after:            Tue 07 Oct 2025 13:01:04 +0000
asID:                     0
IP address blocks:        199.88.185.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/0be0d1a4-2c88-4596-81d7-3b6685e04a2d/0be0d1a4-2c88-4596-81d7-3b6685e04a2d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/0be0d1a4-2c88-4596-81d7-3b6685e04a2d/0be0d1a4-2c88-4596-81d7-3b6685e04a2d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/0be0d1a4-2c88-4596-81d7-3b6685e04a2d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 11 Jul 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:76:1b:60:0d:e8:c8:a6:f7:87:d1:3b:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0be0d1a4-2c88-4596-81d7-3b6685e04a2d
        Validity
            Not Before: Jul  9 13:01:04 2025 GMT
            Not After : Oct  7 13:01:04 2025 GMT
        Subject: CN=ff6b16bd-a759-459b-b3fa-88ad6c103b7e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:81:ad:02:fc:22:04:eb:50:83:70:6e:29:ff:ce:
                    26:75:ad:39:80:3e:82:e2:56:bf:18:35:7c:13:89:
                    20:63:21:f1:fe:1b:93:33:3c:b9:7a:58:64:e9:22:
                    d8:5d:21:8b:5f:17:f9:3c:fb:72:9f:37:3c:cd:2d:
                    8d:25:bd:a4:f0:de:e1:84:02:1c:b9:be:09:db:54:
                    5d:f1:2d:54:ea:9b:f8:40:61:30:b3:39:bc:9f:d8:
                    29:2b:d7:fe:2f:c8:91:39:97:c4:43:f3:3b:00:7c:
                    0e:ee:8b:f5:bd:b9:7e:65:ff:03:bd:9c:1d:5a:76:
                    27:a2:ee:e9:36:50:fd:c1:6b:e3:62:14:84:b4:a8:
                    3d:15:73:58:a9:89:4a:1e:79:2e:1c:7e:6f:92:f9:
                    20:7f:39:4d:83:17:86:52:5b:01:db:09:6c:72:fc:
                    30:8e:09:83:60:d8:fb:2a:14:97:da:09:b4:95:7b:
                    55:a4:c7:21:6d:46:92:4f:1d:2a:b5:54:7d:69:8e:
                    aa:5a:0d:39:de:a2:94:d8:2b:67:69:28:9b:51:cc:
                    f1:5e:da:e3:af:b0:cb:d6:f8:f7:14:3b:7c:a7:da:
                    17:e2:f6:9d:3d:00:37:32:a1:cf:a9:17:5a:e2:56:
                    88:07:3f:c7:e9:25:09:89:fc:5b:dd:9c:c4:82:a6:
                    ab:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                67:FF:67:96:6E:CE:61:80:86:2D:5C:A5:76:32:57:0D:33:38:7D:31
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/0be0d1a4-2c88-4596-81d7-3b6685e04a2d/a7fbd760-6ed0-3731-864b-962a37a9d75f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/0be0d1a4-2c88-4596-81d7-3b6685e04a2d/0be0d1a4-2c88-4596-81d7-3b6685e04a2d.crl

            X509v3 Authority Key Identifier:
                keyid:BF:9B:E4:B5:3E:13:95:1F:07:53:D8:E9:0C:8E:45:5A:0E:B5:0C:82

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/0be0d1a4-2c88-4596-81d7-3b6685e04a2d.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.88.185.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7e:cc:be:de:54:c5:e4:a6:8c:57:cf:4d:78:5e:55:fd:fb:67:
         7e:22:00:4c:01:80:48:46:29:3b:ea:13:82:41:60:ed:36:18:
         89:73:a2:00:0a:28:2d:b7:eb:26:4a:6a:d4:c8:47:0e:c9:44:
         fc:5e:eb:55:65:f6:a5:9d:c6:6e:7e:ea:6c:57:59:42:6c:4e:
         ec:a4:21:c3:07:75:db:23:18:0f:4a:66:23:3d:aa:0f:6f:4c:
         24:d6:40:38:9c:c6:74:05:42:59:16:48:81:97:96:a0:af:30:
         97:89:da:f8:13:ac:de:08:5a:a3:36:43:6f:3a:bc:a1:e4:96:
         a5:e5:8a:6b:f8:8d:81:50:e4:d2:9a:6c:e6:44:e0:5b:55:95:
         97:84:3f:f1:de:8f:ba:ce:32:82:65:c2:3f:14:33:d4:71:41:
         7b:57:a7:6d:44:8b:6c:e4:ae:c0:a0:25:ba:ea:a6:f5:a4:ff:
         aa:26:20:4a:33:d3:22:10:fa:e2:99:56:5c:9c:b2:50:5c:7e:
         28:85:35:a5:79:35:ca:5e:23:bc:c5:30:d2:b0:76:da:9f:f2:
         f3:22:a2:cf:66:06:a7:c2:63:1f:ce:0d:8d:dc:72:27:28:8e:
         6e:5e:07:f9:65:4c:bb:11:b1:be:67:8f:f5:3f:5e:43:49:72:
         77:35:ec:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 10 09:40:22 2025 by rpki-client