Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8252d812-07cd-4870-b413-e08fb8355928/e81bee3c-f5b3-365f-8278-ffb72226e18e.roa
File:                     e81bee3c-f5b3-365f-8278-ffb72226e18e.roa (raw, json)
Hash identifier:          LcZ6uisOP5/NkogiFIVDs2aJYFksjWb+S1RyRBtQgUE=
Subject key identifier:   2F:A1:A6:A0:B5:D8:B0:44:0D:2D:FE:E4:43:61:FC:DA:63:2E:71:02
Certificate issuer:       /CN=8252d812-07cd-4870-b413-e08fb8355928
Certificate serial:       010D0C9F4328584A5FC5DB4128EB473ECB490A80
Authority key identifier: 22:F6:B7:89:81:53:28:BF:20:D6:FF:E0:86:EC:A6:DC:6E:1E:F6:DC
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8252d812-07cd-4870-b413-e08fb8355928.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8252d812-07cd-4870-b413-e08fb8355928/e81bee3c-f5b3-365f-8278-ffb72226e18e.roa
Signing time:             Tue 01 Jul 2025 13:01:04 +0000
ROA not before:           Tue 01 Jul 2025 13:01:04 +0000
ROA not after:            Mon 29 Sep 2025 13:01:04 +0000
asID:                     8075
IP address blocks:        170.88.84.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8252d812-07cd-4870-b413-e08fb8355928/8252d812-07cd-4870-b413-e08fb8355928.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8252d812-07cd-4870-b413-e08fb8355928/8252d812-07cd-4870-b413-e08fb8355928.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8252d812-07cd-4870-b413-e08fb8355928.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 12 Jul 2025 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:5f:c5:db:41:28:eb:47:3e:cb:49:0a:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8252d812-07cd-4870-b413-e08fb8355928
        Validity
            Not Before: Jul  1 13:01:04 2025 GMT
            Not After : Sep 29 13:01:04 2025 GMT
        Subject: CN=026badfe-5005-4319-8f51-0eb7c33da690
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:c4:68:60:bb:2e:3f:67:f1:64:15:49:85:39:
                    3d:b4:21:bd:3d:82:37:83:81:59:b9:79:50:97:11:
                    f3:7d:c6:78:3a:e8:d7:16:53:2e:1e:5c:0f:a2:28:
                    5f:fe:4b:8d:98:b0:96:dc:ad:de:9e:d7:98:4a:97:
                    f9:90:00:53:fe:40:04:65:c2:92:ad:5d:76:aa:bc:
                    df:16:b6:dc:20:df:ce:24:f7:de:ca:23:cc:0d:7a:
                    78:8c:3a:d9:ab:d3:86:ab:4f:d2:29:64:8c:a9:6e:
                    cb:53:2f:33:8a:fd:4d:cd:88:63:da:5f:9a:67:f6:
                    38:49:37:3f:85:b4:a4:81:4d:1d:73:62:27:e1:85:
                    a9:9f:55:6d:fa:00:6a:ab:ca:1e:1b:c7:51:8e:cd:
                    cd:67:c3:72:bc:bf:75:3a:43:0d:e2:32:e1:81:11:
                    7e:f9:da:36:29:9c:ee:08:b4:47:f5:35:cc:3a:8c:
                    7f:ec:34:b2:b5:62:9c:82:ec:57:2e:a0:d6:8e:28:
                    3c:26:9b:4e:d4:f6:54:27:e0:52:da:30:20:ac:3e:
                    10:a3:59:25:a2:c9:4a:8f:ff:00:fe:de:31:bb:1b:
                    ff:5c:d8:2e:0f:c8:bf:07:29:f6:d8:a4:67:8d:f2:
                    ac:a1:21:e1:67:75:56:93:36:08:4f:57:1d:ef:16:
                    a3:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2F:A1:A6:A0:B5:D8:B0:44:0D:2D:FE:E4:43:61:FC:DA:63:2E:71:02
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8252d812-07cd-4870-b413-e08fb8355928/e81bee3c-f5b3-365f-8278-ffb72226e18e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8252d812-07cd-4870-b413-e08fb8355928/8252d812-07cd-4870-b413-e08fb8355928.crl

            X509v3 Authority Key Identifier:
                keyid:22:F6:B7:89:81:53:28:BF:20:D6:FF:E0:86:EC:A6:DC:6E:1E:F6:DC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8252d812-07cd-4870-b413-e08fb8355928.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.88.84.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5c:93:a9:fd:97:60:11:e8:d6:22:30:9a:26:42:ad:03:ab:24:
         9f:2e:43:f0:b9:de:a7:84:72:b8:ae:b6:a3:2b:e4:db:4c:b2:
         1f:3a:e6:2d:04:4d:fd:2d:c3:60:ba:cd:bf:af:1b:c4:a2:9b:
         e9:f4:9e:b6:0b:36:dd:53:2a:7f:a1:a8:3c:c9:b4:e9:d6:6e:
         20:c5:b3:78:6e:29:25:06:76:a9:e4:b9:68:64:e7:6e:37:a2:
         2e:96:56:59:f4:95:0a:7d:1d:d4:ed:5b:0c:95:d0:06:a7:30:
         fa:b1:a5:a1:95:41:93:c5:1a:dd:d9:9c:f5:8a:96:fa:19:08:
         bf:d6:d5:47:96:6c:2b:a7:16:b9:a6:10:f0:b2:8e:3c:1e:27:
         42:86:15:1f:af:65:dc:81:27:da:80:f7:4a:4a:29:7a:c4:9b:
         ca:17:dd:a2:f4:79:9c:f1:28:57:5e:52:86:1d:76:c5:78:7c:
         a4:60:3c:07:0a:9a:9e:d2:0a:68:fb:21:b6:01:87:02:80:16:
         a9:03:fb:2a:4f:3f:45:23:03:44:aa:80:8d:04:43:2f:d8:56:
         c3:5f:60:a4:95:65:ba:c8:09:60:f9:b2:b9:18:ff:91:e7:5f:
         68:e9:4b:db:8c:69:6c:5a:a8:92:72:8e:f5:39:0f:5d:8c:81:
         5e:c7:03:a5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 11 04:41:08 2025 by rpki-client