Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8252d812-07cd-4870-b413-e08fb8355928/95eebf6d-d077-352d-92fd-01a38addd17f.roa
File:                     95eebf6d-d077-352d-92fd-01a38addd17f.roa (raw, json)
Hash identifier:          xM+kQ8laZejGf6eyhbwfok1lBjxicGew0WypKWHfNAo=
Subject key identifier:   BA:8A:E7:70:5B:14:72:E8:3C:9E:A5:1F:B6:FB:E2:44:BF:F9:84:E4
Certificate issuer:       /CN=8252d812-07cd-4870-b413-e08fb8355928
Certificate serial:       010D0C9F4328584A612B0EC2CD6FF8B07D33EE80
Authority key identifier: 22:F6:B7:89:81:53:28:BF:20:D6:FF:E0:86:EC:A6:DC:6E:1E:F6:DC
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8252d812-07cd-4870-b413-e08fb8355928.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8252d812-07cd-4870-b413-e08fb8355928/95eebf6d-d077-352d-92fd-01a38addd17f.roa
Signing time:             Wed 02 Jul 2025 01:00:49 +0000
ROA not before:           Wed 02 Jul 2025 01:00:49 +0000
ROA not after:            Tue 30 Sep 2025 01:00:49 +0000
asID:                     36642
IP address blocks:        170.88.83.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8252d812-07cd-4870-b413-e08fb8355928/8252d812-07cd-4870-b413-e08fb8355928.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8252d812-07cd-4870-b413-e08fb8355928/8252d812-07cd-4870-b413-e08fb8355928.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8252d812-07cd-4870-b413-e08fb8355928.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 12 Jul 2025 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:61:2b:0e:c2:cd:6f:f8:b0:7d:33:ee:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8252d812-07cd-4870-b413-e08fb8355928
        Validity
            Not Before: Jul  2 01:00:49 2025 GMT
            Not After : Sep 30 01:00:49 2025 GMT
        Subject: CN=e2fbb966-7788-41a8-af09-1dbe7592d953
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8b:78:95:c4:aa:a5:38:d7:2d:d1:87:3a:50:2f:
                    21:be:67:fb:e4:94:09:cf:da:ef:59:bb:c6:5c:19:
                    47:3d:3f:fa:01:93:65:6c:58:37:89:20:fe:15:32:
                    64:8d:cd:c6:1a:ba:f2:01:47:27:5e:d4:b2:1d:f1:
                    15:cd:90:e2:ad:33:59:3a:4e:bb:ca:c8:e4:d3:d7:
                    50:57:a3:d7:b8:8e:05:16:96:11:54:b9:32:a8:81:
                    91:99:34:f3:df:6b:21:1c:6e:2f:68:84:f3:72:4d:
                    c6:e3:65:06:93:af:fd:6d:45:c4:fe:39:7f:ac:0e:
                    45:d2:fe:30:ee:25:cb:d0:7a:95:11:f4:7d:41:f2:
                    1d:60:bd:75:b4:1a:ca:61:5e:cf:eb:1c:9d:33:7e:
                    de:ed:ed:f8:dd:3c:1a:42:67:6f:0b:b1:d9:4b:69:
                    3f:9f:45:72:49:67:c8:3c:0f:62:fb:d9:c6:72:f4:
                    df:1f:ab:bd:f7:67:f9:3d:10:f1:17:15:63:81:5c:
                    9b:ed:8a:13:75:32:65:e0:c5:20:9c:ca:5c:c6:83:
                    0f:4e:50:46:ca:9b:84:cc:ea:38:14:bc:4c:f0:07:
                    f3:f8:5c:80:c3:ff:18:56:d2:85:98:ad:31:df:05:
                    fc:af:13:33:b3:23:09:75:63:52:7c:e9:4a:6d:dc:
                    70:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BA:8A:E7:70:5B:14:72:E8:3C:9E:A5:1F:B6:FB:E2:44:BF:F9:84:E4
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8252d812-07cd-4870-b413-e08fb8355928/95eebf6d-d077-352d-92fd-01a38addd17f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8252d812-07cd-4870-b413-e08fb8355928/8252d812-07cd-4870-b413-e08fb8355928.crl

            X509v3 Authority Key Identifier:
                keyid:22:F6:B7:89:81:53:28:BF:20:D6:FF:E0:86:EC:A6:DC:6E:1E:F6:DC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8252d812-07cd-4870-b413-e08fb8355928.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.88.83.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         66:8b:c0:94:09:54:67:4e:ef:ee:cd:a8:a4:e0:6e:0d:2e:32:
         81:34:1a:6e:d7:8e:08:25:f2:b5:30:d9:4c:34:a2:1d:48:bb:
         8d:13:eb:ae:a6:dd:8e:e4:d7:9c:e6:36:15:16:0f:8d:15:08:
         e7:29:15:37:bb:63:fb:40:5b:24:43:09:5a:b5:cb:64:1d:38:
         ee:c4:6d:6f:f5:12:7e:ce:1e:c4:ab:7f:7f:8a:12:d3:7a:f2:
         b2:dc:01:d4:08:43:fa:4f:78:a9:17:a3:ce:81:8e:b3:74:a0:
         28:a1:53:d0:9b:2c:f9:bb:a2:21:cf:7c:3b:ef:e6:9f:80:65:
         ac:db:6f:0f:5f:7c:af:d1:98:88:6d:10:b3:bf:79:ad:a1:ba:
         f3:a8:7c:b6:b8:2d:11:78:b0:e4:f0:24:c8:ea:cf:5d:af:bd:
         9c:10:b3:e7:98:19:9f:39:b8:a9:8c:ec:ae:ec:73:6e:25:12:
         ea:27:ec:83:04:fc:bc:8e:3a:95:e8:93:49:a8:f4:3c:89:75:
         9f:60:6a:c3:a0:23:de:07:c5:95:77:f7:90:ba:92:35:3e:50:
         b3:b8:12:29:09:6d:d1:6e:be:8e:5b:d9:e1:11:b4:43:17:8b:
         74:13:24:6d:d2:58:56:d5:a5:41:ec:6f:76:92:67:62:74:21:
         03:a2:42:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 11 04:41:11 2025 by rpki-client