Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8252d812-07cd-4870-b413-e08fb8355928/79f9acb8-49c4-3dc4-91be-d74f03c5ede7.roa
File:                     79f9acb8-49c4-3dc4-91be-d74f03c5ede7.roa (raw, json)
Hash identifier:          yFJ2jgebaIcZwiH1VNVADtcmANInhgUQShpAGhZjBFs=
Subject key identifier:   48:31:E9:E0:BE:9B:CB:4E:C3:CF:11:06:6E:A1:38:ED:C2:9B:EF:BD
Certificate issuer:       /CN=8252d812-07cd-4870-b413-e08fb8355928
Certificate serial:       010D0C9F4328584EBB11B37B3CD7CCBD27B8D400
Authority key identifier: 22:F6:B7:89:81:53:28:BF:20:D6:FF:E0:86:EC:A6:DC:6E:1E:F6:DC
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8252d812-07cd-4870-b413-e08fb8355928.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8252d812-07cd-4870-b413-e08fb8355928/79f9acb8-49c4-3dc4-91be-d74f03c5ede7.roa
Signing time:             Wed 05 Aug 2026 01:00:12 +0000
ROA not before:           Wed 05 Aug 2026 01:00:12 +0000
ROA not after:            Tue 03 Nov 2026 02:00:12 +0000
asID:                     54478
IP address blocks:        170.88.82.0/23 maxlen: 23
                          170.88.82.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8252d812-07cd-4870-b413-e08fb8355928/8252d812-07cd-4870-b413-e08fb8355928.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8252d812-07cd-4870-b413-e08fb8355928/8252d812-07cd-4870-b413-e08fb8355928.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8252d812-07cd-4870-b413-e08fb8355928.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 07 Aug 2026 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:bb:11:b3:7b:3c:d7:cc:bd:27:b8:d4:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8252d812-07cd-4870-b413-e08fb8355928
        Validity
            Not Before: Aug  5 01:00:12 2026 GMT
            Not After : Nov  3 02:00:12 2026 GMT
        Subject: CN=82db7771-fe1a-4bc9-9f65-f64934c70d20
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:e8:b0:52:de:da:3b:66:ee:e5:a9:58:de:c7:
                    c1:73:8e:1e:45:63:84:89:f1:25:e2:69:8d:89:a3:
                    81:cd:85:27:ed:38:0c:4f:53:95:5a:f9:de:a8:89:
                    ee:fc:60:b4:e5:7c:41:1f:fb:ff:fd:fe:7c:47:e5:
                    f2:42:29:90:21:e4:d9:84:9c:c8:76:bc:83:8c:a4:
                    88:27:a0:a5:42:4a:ff:9f:87:97:2e:89:51:48:44:
                    57:4c:57:fe:e3:27:b1:88:5f:d0:3a:a4:c9:96:17:
                    2c:ac:ae:f2:83:de:b8:1d:d3:0e:80:77:6b:fc:f3:
                    d8:d7:80:58:dd:82:48:76:29:ee:21:ae:e1:1c:ab:
                    ae:15:69:90:d8:d4:b8:87:6e:4c:77:eb:c3:ab:09:
                    fb:c0:b9:8b:c1:b6:18:c1:70:ab:3f:bb:d3:b8:56:
                    1e:ea:65:ae:98:a6:f3:01:43:c3:c9:cc:38:48:28:
                    52:8a:6f:bf:97:ef:65:be:b4:35:78:b5:95:fa:e0:
                    0a:4a:44:99:32:e2:e8:c4:7b:a4:d7:cd:bb:55:a4:
                    ba:03:7c:93:d4:f2:dd:0a:ae:8f:d4:6b:64:1b:aa:
                    03:ab:d1:cb:07:61:93:40:54:d9:78:38:d9:fc:33:
                    65:fc:d2:c9:a9:c4:8f:a7:2b:9e:a4:e5:ba:1a:aa:
                    b4:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                48:31:E9:E0:BE:9B:CB:4E:C3:CF:11:06:6E:A1:38:ED:C2:9B:EF:BD
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8252d812-07cd-4870-b413-e08fb8355928/79f9acb8-49c4-3dc4-91be-d74f03c5ede7.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8252d812-07cd-4870-b413-e08fb8355928/8252d812-07cd-4870-b413-e08fb8355928.crl

            X509v3 Authority Key Identifier:
                keyid:22:F6:B7:89:81:53:28:BF:20:D6:FF:E0:86:EC:A6:DC:6E:1E:F6:DC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8252d812-07cd-4870-b413-e08fb8355928.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.88.82.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         99:49:70:94:a3:c3:4b:46:e1:4b:86:50:39:8b:ba:a9:c2:dc:
         7c:c6:38:84:06:09:74:fc:36:4a:5f:d2:66:6e:6e:a9:b8:25:
         68:0e:ee:96:7e:e6:6f:0e:d4:86:0f:a0:76:7f:0c:51:67:6f:
         9b:12:b6:4a:5b:b7:6c:02:2c:92:9c:4b:27:b6:bd:ed:84:1b:
         f4:49:e7:56:e9:ce:6a:5f:27:8a:cc:6e:5e:9f:13:b1:59:18:
         5e:82:08:39:5c:d5:24:81:06:dc:5b:8f:c0:95:1b:c2:98:f1:
         dc:6f:22:e8:de:be:7c:a7:5d:bf:e9:39:55:fd:65:19:43:a0:
         e2:9f:5d:4e:59:f7:d5:ac:13:c8:16:dd:c9:8d:82:97:2b:78:
         cb:db:7b:cf:d8:86:f8:78:f5:85:1d:05:38:75:4e:1b:b6:81:
         1d:b9:19:90:63:42:5b:39:79:a2:a7:04:9a:01:52:2f:75:0e:
         55:38:6b:8f:45:3b:5c:71:2d:25:1f:89:3a:45:1b:73:97:bd:
         71:2c:a6:f1:92:40:d6:e4:61:ca:d1:fb:02:f9:c2:f0:79:a9:
         b8:18:42:db:6d:7d:ca:15:12:b3:9a:2b:95:d5:09:bc:f5:b1:
         9a:00:90:94:0a:a8:a5:50:b1:c7:a4:9e:2a:df:30:bc:2d:fd:
         27:91:91:cd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 5 19:55:36 2026 by rpki-client