Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/88e1646b-e1b3-42e7-8591-3a57fd436369/5757907e-a152-3421-ae20-7d46415d4c4e.roa
File:                     5757907e-a152-3421-ae20-7d46415d4c4e.roa (raw, json)
Hash identifier:          zIz7mWP3emqZR9gVPXTXa5FhAYWgEiI0b3m768yW++Q=
Subject key identifier:   7D:C8:ED:FF:6B:B7:3F:AA:7C:28:B3:19:15:C5:EA:3F:FC:F8:50:12
Certificate issuer:       /CN=88e1646b-e1b3-42e7-8591-3a57fd436369
Certificate serial:       010D0C9F4328584BA667AC359293E08A8697E8E0
Authority key identifier: BA:43:23:72:BB:F7:97:E5:F2:B4:13:EB:EC:BF:20:32:5C:2D:85:99
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/88e1646b-e1b3-42e7-8591-3a57fd436369.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/88e1646b-e1b3-42e7-8591-3a57fd436369/5757907e-a152-3421-ae20-7d46415d4c4e.roa
Signing time:             Sun 26 Oct 2025 13:00:38 +0000
ROA not before:           Sun 26 Oct 2025 13:00:38 +0000
ROA not after:            Sat 24 Jan 2026 14:00:38 +0000
asID:                     36634
IP address blocks:        205.221.103.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/88e1646b-e1b3-42e7-8591-3a57fd436369/88e1646b-e1b3-42e7-8591-3a57fd436369.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/88e1646b-e1b3-42e7-8591-3a57fd436369/88e1646b-e1b3-42e7-8591-3a57fd436369.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/88e1646b-e1b3-42e7-8591-3a57fd436369.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 29 Oct 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:a6:67:ac:35:92:93:e0:8a:86:97:e8:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=88e1646b-e1b3-42e7-8591-3a57fd436369
        Validity
            Not Before: Oct 26 13:00:38 2025 GMT
            Not After : Jan 24 14:00:38 2026 GMT
        Subject: CN=0c252c86-ae81-4271-bb19-78a18d9b8e18
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:59:98:d3:3a:28:75:4b:a3:24:00:aa:f1:66:
                    bb:6b:1a:8f:fb:d5:56:2f:93:fb:64:31:66:3b:d8:
                    71:a3:72:46:18:ef:f7:ec:ac:c6:61:27:94:96:38:
                    ff:bc:81:05:26:3d:88:d2:39:cf:cc:e2:0c:99:e8:
                    79:98:2a:92:97:02:53:c2:c9:4c:85:11:30:45:19:
                    9a:4c:c9:9e:81:c6:3b:a9:ab:06:24:2e:37:4d:6e:
                    ab:09:d5:9a:e6:27:ac:ba:38:a6:af:3f:63:28:6f:
                    7e:68:d5:38:be:38:70:2d:15:d0:18:23:dc:65:c6:
                    d3:eb:27:1e:91:42:c6:21:95:80:b4:61:e1:5d:b4:
                    0f:6f:21:19:05:09:e3:c5:3a:c7:4d:fd:8f:d3:02:
                    3e:9a:05:f2:1c:52:c0:26:37:59:05:fb:22:8e:f3:
                    7f:e0:be:61:ee:5e:26:dd:1c:60:04:20:eb:62:c3:
                    e9:e5:16:e9:74:bd:37:d8:1e:9c:d3:61:68:04:37:
                    5a:2b:5e:c9:5b:1e:f9:d2:fd:df:19:7e:dd:c1:16:
                    3b:8b:94:f1:61:43:13:57:08:c1:31:e0:05:6a:24:
                    bd:6b:af:29:21:bc:9f:c0:7b:12:9d:0a:70:db:03:
                    13:c4:1f:90:17:fa:57:f6:10:c6:e9:b7:5a:0a:b3:
                    26:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7D:C8:ED:FF:6B:B7:3F:AA:7C:28:B3:19:15:C5:EA:3F:FC:F8:50:12
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/88e1646b-e1b3-42e7-8591-3a57fd436369/5757907e-a152-3421-ae20-7d46415d4c4e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/88e1646b-e1b3-42e7-8591-3a57fd436369/88e1646b-e1b3-42e7-8591-3a57fd436369.crl

            X509v3 Authority Key Identifier:
                keyid:BA:43:23:72:BB:F7:97:E5:F2:B4:13:EB:EC:BF:20:32:5C:2D:85:99

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/88e1646b-e1b3-42e7-8591-3a57fd436369.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  205.221.103.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         74:d6:2c:2e:31:3a:2b:e5:a4:b6:1a:b0:00:85:4c:71:5f:43:
         36:37:54:11:c5:4f:e0:fe:1b:0c:18:bc:02:ed:05:c7:c4:f5:
         9a:5a:c1:70:33:22:25:17:e7:42:a6:8e:4e:9f:24:09:b5:8d:
         36:1c:c8:c2:ae:d0:ff:24:3d:9f:ee:17:49:c0:da:57:52:d3:
         6d:d9:f5:c0:97:86:40:7d:2d:96:fb:dd:c3:0b:aa:e4:b4:17:
         ab:f5:92:3d:c2:ee:89:cc:86:a3:1c:e6:03:cb:c6:99:64:e1:
         a0:57:a5:55:6a:42:11:0c:0e:84:82:47:b8:67:a9:78:34:6f:
         f3:f7:84:08:8c:a0:99:c7:cf:4a:6e:1b:c7:3c:ab:7a:0a:b4:
         d2:5e:20:89:0e:0b:c7:9f:bf:12:af:63:1c:b2:e6:f0:a6:c5:
         fe:60:72:8f:2e:34:a3:52:ad:a5:4d:8c:cb:79:3b:f2:33:e0:
         aa:5b:6f:42:86:5a:ca:9e:49:6a:95:eb:47:2c:88:5d:ac:14:
         e8:ae:14:7a:ad:75:03:0a:11:2f:0a:01:9e:08:2d:a8:a6:50:
         6f:88:da:11:af:7f:82:7b:a5:65:e5:2d:26:96:db:61:c9:18:
         d7:ba:33:82:3e:fd:b8:4a:63:ae:17:4d:58:d7:99:05:79:f6:
         65:11:f8:de
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 28 07:18:28 2025 by rpki-client