Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/17e20fae-392b-4b22-b475-c6dff7142fa6/88284c80-4080-3740-a1d6-8df786cec5f4.roa
File:                     88284c80-4080-3740-a1d6-8df786cec5f4.roa (raw, json)
Hash identifier:          2VgkBfWyz7u2hzAdIAyqUs2/Bj2oQnljPCyumdvtgAQ=
Subject key identifier:   ED:82:A2:4B:CF:E6:4A:46:B8:28:E0:61:A2:3B:A6:EE:80:9C:B9:9D
Certificate issuer:       /CN=17e20fae-392b-4b22-b475-c6dff7142fa6
Certificate serial:       010D0C9F4328584AAB264A8C1668A3F9BB9CA580
Authority key identifier: A1:92:8C:F9:58:DA:45:07:22:A0:BC:C9:76:E1:3D:EE:08:F7:66:6B
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/17e20fae-392b-4b22-b475-c6dff7142fa6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/17e20fae-392b-4b22-b475-c6dff7142fa6/88284c80-4080-3740-a1d6-8df786cec5f4.roa
Signing time:             Mon 28 Jul 2025 13:01:04 +0000
ROA not before:           Mon 28 Jul 2025 13:01:04 +0000
ROA not after:            Sun 26 Oct 2025 13:01:04 +0000
asID:                     715
IP address blocks:        199.120.141.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/17e20fae-392b-4b22-b475-c6dff7142fa6/17e20fae-392b-4b22-b475-c6dff7142fa6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/17e20fae-392b-4b22-b475-c6dff7142fa6/17e20fae-392b-4b22-b475-c6dff7142fa6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/17e20fae-392b-4b22-b475-c6dff7142fa6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 08 Aug 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:ab:26:4a:8c:16:68:a3:f9:bb:9c:a5:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=17e20fae-392b-4b22-b475-c6dff7142fa6
        Validity
            Not Before: Jul 28 13:01:04 2025 GMT
            Not After : Oct 26 13:01:04 2025 GMT
        Subject: CN=d934c48f-a572-4771-8726-97e7815197ef
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:e0:41:a7:0e:24:c3:6b:66:a7:8c:2c:a1:3d:
                    7e:6f:ff:b0:65:3c:ac:ac:1a:26:1e:99:e6:e4:a6:
                    e2:f9:84:8d:92:69:97:14:88:9a:e2:7d:e0:ec:99:
                    dc:ed:22:a2:0a:62:7c:95:1e:a3:91:1a:3e:04:a7:
                    eb:57:38:3f:3e:ac:90:a0:61:34:1a:5f:70:3e:08:
                    36:79:3d:68:4d:fc:8e:ff:d8:3e:2f:98:91:3a:77:
                    bd:e6:69:e2:d0:ac:9d:41:0d:c3:e1:68:83:53:97:
                    db:5c:45:42:b4:90:f3:6d:65:59:c6:39:86:21:e6:
                    7c:a3:df:66:ec:fa:b9:33:71:ae:dd:03:d1:91:c3:
                    56:9f:41:6e:80:35:d0:3e:84:35:7e:0a:01:60:4d:
                    58:10:63:09:f8:9f:19:fe:e0:15:84:fc:39:f0:ca:
                    cc:31:41:cc:b7:e2:ea:e6:8f:1d:18:72:fe:18:c9:
                    7c:62:f2:ad:28:ff:6e:a1:39:b6:c7:b1:de:73:8c:
                    62:25:e7:e1:2f:12:bf:8a:8f:a7:47:37:85:c6:17:
                    15:b1:4c:06:c5:c1:df:3e:b8:bd:87:de:eb:fa:b7:
                    be:c0:30:bf:79:c8:76:c3:02:34:30:3d:e8:a1:1b:
                    4b:fa:0b:db:05:29:e8:64:40:a4:0c:8f:87:e7:ee:
                    59:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                ED:82:A2:4B:CF:E6:4A:46:B8:28:E0:61:A2:3B:A6:EE:80:9C:B9:9D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/17e20fae-392b-4b22-b475-c6dff7142fa6/88284c80-4080-3740-a1d6-8df786cec5f4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/17e20fae-392b-4b22-b475-c6dff7142fa6/17e20fae-392b-4b22-b475-c6dff7142fa6.crl

            X509v3 Authority Key Identifier:
                keyid:A1:92:8C:F9:58:DA:45:07:22:A0:BC:C9:76:E1:3D:EE:08:F7:66:6B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/17e20fae-392b-4b22-b475-c6dff7142fa6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.120.141.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         25:20:12:fb:19:75:40:d3:46:e0:3d:aa:c3:e8:05:b2:59:38:
         fd:f4:f1:00:9e:ba:5a:39:46:9e:3b:84:12:b5:9f:39:b2:a2:
         92:9a:37:ed:06:d5:6e:9a:be:52:ac:d1:3d:87:2d:e1:31:66:
         38:84:35:51:05:fc:76:2e:d7:14:0a:58:b6:5e:10:f8:2c:5f:
         bd:df:13:75:6d:1f:33:4a:d4:92:d2:07:61:4e:d8:e6:4f:36:
         8a:76:6d:72:6c:96:56:e6:f5:21:b6:09:24:d0:cf:4d:7a:bb:
         00:d2:4e:33:d7:2e:44:0e:3e:bd:c6:fb:1b:9d:f4:76:47:96:
         45:6f:08:b0:31:f3:09:95:d0:d3:84:11:65:f7:71:9d:d6:04:
         97:f3:c3:81:ce:53:ca:8c:fc:62:58:66:0e:3f:55:fa:b4:1b:
         e1:4f:5b:86:44:13:3a:ad:dc:14:40:a6:66:f2:10:76:0f:ab:
         70:3e:26:a9:0e:a8:c2:c9:a4:97:6e:46:9d:cd:0a:c4:63:ae:
         8d:dc:e0:1d:c3:6a:02:9c:8a:64:cb:0d:dc:d9:36:ab:85:cd:
         32:e5:7d:55:88:1c:03:ec:e6:c3:d7:ec:b7:a1:80:0c:a3:cb:
         96:6b:66:ff:b7:f7:da:44:ae:96:19:d8:8f:aa:16:f1:5e:0c:
         ad:69:46:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 6 19:37:38 2025 by rpki-client