Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8252d812-07cd-4870-b413-e08fb8355928/74f940ef-a5a5-3cdc-994d-05fec743f183.roa
File:                     74f940ef-a5a5-3cdc-994d-05fec743f183.roa (raw, json)
Hash identifier:          G90KAwhC7sW+hSmGuyGIGilDVdWY4sGEB79GP4a309Y=
Subject key identifier:   2F:C6:DB:7C:26:FA:88:08:4F:E5:BB:2A:96:42:99:FE:AF:A1:F3:84
Certificate issuer:       /CN=8252d812-07cd-4870-b413-e08fb8355928
Certificate serial:       010D0C9F4328584A612B0ED98D885DA78D6BB000
Authority key identifier: 22:F6:B7:89:81:53:28:BF:20:D6:FF:E0:86:EC:A6:DC:6E:1E:F6:DC
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8252d812-07cd-4870-b413-e08fb8355928.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8252d812-07cd-4870-b413-e08fb8355928/74f940ef-a5a5-3cdc-994d-05fec743f183.roa
Signing time:             Wed 02 Jul 2025 01:00:49 +0000
ROA not before:           Wed 02 Jul 2025 01:00:49 +0000
ROA not after:            Tue 30 Sep 2025 01:00:49 +0000
asID:                     8075
IP address blocks:        170.88.83.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8252d812-07cd-4870-b413-e08fb8355928/8252d812-07cd-4870-b413-e08fb8355928.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8252d812-07cd-4870-b413-e08fb8355928/8252d812-07cd-4870-b413-e08fb8355928.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8252d812-07cd-4870-b413-e08fb8355928.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 12 Jul 2025 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:61:2b:0e:d9:8d:88:5d:a7:8d:6b:b0:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8252d812-07cd-4870-b413-e08fb8355928
        Validity
            Not Before: Jul  2 01:00:49 2025 GMT
            Not After : Sep 30 01:00:49 2025 GMT
        Subject: CN=5b403a60-72cb-4a89-87db-9db9713920c1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:87:3f:f7:21:d6:62:79:53:09:fa:c8:85:2a:8c:
                    f7:58:8f:ba:ea:ba:1b:0a:ca:cd:31:d7:ee:58:fc:
                    97:1c:83:10:32:b9:75:12:d4:9c:b2:27:a0:d6:1b:
                    44:eb:72:9a:ef:6c:f3:1b:bd:b8:80:19:7d:bf:d1:
                    57:72:02:0a:fe:92:a3:03:4c:12:ac:c6:67:2e:fb:
                    c5:5f:ef:17:1b:02:79:c9:91:ca:af:a7:ac:25:2e:
                    96:05:4f:14:41:71:0f:31:f4:a3:46:3d:aa:a0:0a:
                    51:f4:97:f5:73:e2:c9:91:e0:20:6f:ea:67:c1:b6:
                    8c:d6:96:5a:5e:f7:28:28:51:c5:96:47:e0:72:87:
                    aa:5e:17:2e:21:c8:d1:4a:c6:d7:8b:e3:69:f4:4b:
                    7f:26:96:23:e6:f3:99:c9:a2:a0:df:81:ad:a3:e9:
                    f6:9f:d4:99:d5:c9:ce:08:54:d4:e5:05:f8:b9:1f:
                    9c:18:c9:e2:8e:af:e0:05:da:e4:a9:6b:b0:53:f0:
                    6d:76:9d:df:dd:bc:c1:fa:bc:bc:8a:c4:81:dd:33:
                    70:29:ef:ac:5b:f2:8b:43:de:f4:fe:a2:0b:ea:92:
                    19:c1:fa:3f:a4:dd:05:68:f5:7e:a5:1b:d9:ab:59:
                    1a:9e:b7:6d:48:8e:45:1a:1b:9d:27:a0:86:83:21:
                    98:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2F:C6:DB:7C:26:FA:88:08:4F:E5:BB:2A:96:42:99:FE:AF:A1:F3:84
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8252d812-07cd-4870-b413-e08fb8355928/74f940ef-a5a5-3cdc-994d-05fec743f183.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8252d812-07cd-4870-b413-e08fb8355928/8252d812-07cd-4870-b413-e08fb8355928.crl

            X509v3 Authority Key Identifier:
                keyid:22:F6:B7:89:81:53:28:BF:20:D6:FF:E0:86:EC:A6:DC:6E:1E:F6:DC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8252d812-07cd-4870-b413-e08fb8355928.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.88.83.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         8f:24:5c:08:d3:bb:da:9c:db:d4:e1:e8:cf:78:a8:30:d5:95:
         bd:2c:40:95:3b:cf:84:81:90:98:a0:44:78:84:9c:bb:42:22:
         b7:5b:33:c4:6b:5d:41:8a:78:9c:8d:fe:6e:85:80:b2:a8:d3:
         e4:d7:ef:cb:e5:24:0b:98:52:9d:03:87:64:9a:7d:39:fd:60:
         bb:a3:b4:81:9c:92:16:ac:ec:30:f7:df:1b:6b:8e:be:d9:f0:
         5b:73:60:2e:6f:d9:4b:2b:ec:eb:45:8d:ff:0a:2b:30:c1:84:
         b2:27:66:09:28:02:2e:91:13:3c:d8:a3:83:c2:df:66:af:4e:
         e4:a5:b4:93:00:34:6b:3d:82:80:a9:06:ed:ed:c3:06:ef:29:
         d2:16:f2:02:29:cb:c5:c6:4b:fc:c4:d7:25:a9:2f:43:c5:ad:
         e4:17:68:c5:74:c3:d1:ad:c3:0a:ea:5b:bb:05:23:de:6a:e3:
         00:bd:1d:cf:fa:ab:cd:c4:a1:3f:0d:e5:48:bc:8f:27:b4:7d:
         7f:0d:a0:c6:04:21:6b:93:d5:92:f4:2d:a8:3c:21:bf:7e:9c:
         9f:78:29:b6:5d:80:76:02:3b:87:4f:38:75:0a:a2:54:21:08:
         83:ad:6c:f0:17:8d:5c:a3:96:6e:89:45:04:75:b5:24:aa:f2:
         c5:e6:58:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 11 04:43:46 2025 by rpki-client