Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/d862b5c6-40a1-4249-a26e-11938a702985/88d13f0c-ccc2-38b5-b670-66ee16223370.roa
File:                     88d13f0c-ccc2-38b5-b670-66ee16223370.roa (raw, json)
Hash identifier:          ngJdb8sOG+cDC7rH1vQ4zBGmtRVmo9dxZGuhoJDFerE=
Subject key identifier:   78:F8:1E:C1:57:45:FF:21:33:1E:5B:C7:A1:E4:F2:C2:C1:E2:6E:CF
Certificate issuer:       /CN=d862b5c6-40a1-4249-a26e-11938a702985
Certificate serial:       010D0C9F4328584B0B76B211561414071EB7FF80
Authority key identifier: 81:FC:0E:8B:83:2F:BA:DE:FF:FC:A3:85:C2:31:3C:E6:28:AA:19:D0
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/d862b5c6-40a1-4249-a26e-11938a702985.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/d862b5c6-40a1-4249-a26e-11938a702985/88d13f0c-ccc2-38b5-b670-66ee16223370.roa
Signing time:             Mon 01 Sep 2025 01:00:33 +0000
ROA not before:           Mon 01 Sep 2025 01:00:33 +0000
ROA not after:            Sun 30 Nov 2025 02:00:33 +0000
asID:                     15257
IP address blocks:        173.195.233.0/24 maxlen: 24
                          173.195.234.0/24 maxlen: 24
                          173.195.235.0/24 maxlen: 24
                          173.195.236.0/24 maxlen: 24
                          173.195.237.0/24 maxlen: 24
                          173.195.238.0/24 maxlen: 24
                          173.195.239.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/d862b5c6-40a1-4249-a26e-11938a702985/d862b5c6-40a1-4249-a26e-11938a702985.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/d862b5c6-40a1-4249-a26e-11938a702985/d862b5c6-40a1-4249-a26e-11938a702985.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/d862b5c6-40a1-4249-a26e-11938a702985.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 09 Sep 2025 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:0b:76:b2:11:56:14:14:07:1e:b7:ff:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d862b5c6-40a1-4249-a26e-11938a702985
        Validity
            Not Before: Sep  1 01:00:33 2025 GMT
            Not After : Nov 30 02:00:33 2025 GMT
        Subject: CN=050fa22d-6059-4c2f-b2f8-6371f51f940f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:62:fb:99:b0:2d:76:ff:06:2e:be:dc:85:65:
                    51:5a:9a:14:df:fc:1c:3e:8d:52:64:ac:a6:6f:72:
                    7b:34:30:29:33:47:7e:f8:aa:8a:90:8d:39:b4:7e:
                    53:2f:17:9f:22:40:16:cf:b6:8c:42:a8:68:27:4f:
                    ec:96:05:e3:21:1b:20:bd:ba:89:2c:c5:10:61:44:
                    0d:27:4d:b0:16:06:fb:2e:df:c7:13:5d:a5:af:90:
                    63:09:51:68:22:98:e8:21:71:be:ea:31:ab:33:c0:
                    d0:4e:35:d0:34:50:b3:ce:33:90:ad:97:0b:d5:19:
                    2e:15:05:5a:b6:83:69:d0:c0:69:8e:e9:6e:2b:54:
                    a2:57:86:af:0f:8f:d8:da:81:25:82:cd:5b:bd:df:
                    55:6c:e4:7a:b0:48:98:2c:b5:b4:3b:b3:95:ed:63:
                    5a:c1:4a:52:2b:a4:96:73:9c:5e:b1:aa:85:5f:08:
                    2f:c4:49:69:a3:d1:56:37:bc:7b:1f:ee:d9:37:a8:
                    af:48:3a:84:44:34:70:bc:86:a6:56:a2:c7:2d:e2:
                    c7:f7:13:1d:58:3d:d3:a6:bf:5b:e9:19:8e:e2:07:
                    66:25:81:80:01:e0:04:9e:cb:a2:ea:10:07:a2:5d:
                    1d:3d:56:06:44:18:3e:4f:75:aa:2f:fc:42:04:6e:
                    eb:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                78:F8:1E:C1:57:45:FF:21:33:1E:5B:C7:A1:E4:F2:C2:C1:E2:6E:CF
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/d862b5c6-40a1-4249-a26e-11938a702985/88d13f0c-ccc2-38b5-b670-66ee16223370.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/d862b5c6-40a1-4249-a26e-11938a702985/d862b5c6-40a1-4249-a26e-11938a702985.crl

            X509v3 Authority Key Identifier:
                keyid:81:FC:0E:8B:83:2F:BA:DE:FF:FC:A3:85:C2:31:3C:E6:28:AA:19:D0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/d862b5c6-40a1-4249-a26e-11938a702985.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  173.195.233.0-173.195.239.255

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         aa:3c:ed:30:90:10:b4:48:c3:fe:86:69:43:d5:86:e7:49:96:
         45:0b:2f:00:80:de:a1:ef:40:49:45:02:67:fe:26:d4:c3:01:
         e4:e8:8c:05:b0:29:3f:f0:0a:fd:90:86:d4:a9:9f:b5:50:fa:
         f7:fb:8f:1e:8f:fb:09:7c:74:d8:0e:e2:13:51:a1:66:25:a6:
         bc:2a:39:56:93:1f:5e:ad:50:0d:a1:f0:6a:b2:9b:81:86:46:
         14:17:d0:53:b4:6b:e9:f2:cc:4e:56:8a:33:db:c3:b8:80:28:
         41:a4:61:8b:34:60:c8:a8:5e:5b:7c:02:53:d9:fa:ff:33:83:
         08:94:fb:ab:01:24:4e:5e:06:8f:c4:e2:2e:57:06:44:76:59:
         d7:a7:a1:03:59:13:c4:a9:b8:7c:ed:23:6b:3c:ba:f2:0d:ba:
         8c:19:74:b2:43:b0:2d:6d:61:23:f4:bb:49:4c:d0:20:6d:ab:
         16:02:4f:84:cd:11:3c:ea:08:58:f3:65:ee:d4:93:0a:f4:0c:
         29:f3:42:83:b1:c8:76:e3:f5:b6:b2:41:fb:41:9a:3e:f6:ec:
         e8:9e:44:9c:ca:c3:cb:3b:2d:51:1f:c7:3c:7e:95:b4:d2:d7:
         a1:d3:4b:b1:33:7d:6e:6c:b4:6c:3b:89:92:1a:e9:3b:1a:de:
         63:a3:f9:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 8 02:03:01 2025 by rpki-client