Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/37d983de-280d-4374-a056-b21eb13451dd/790c45c2-ee51-3404-bfc6-3f7fe538a881.roa
File:                     790c45c2-ee51-3404-bfc6-3f7fe538a881.roa (raw, json)
Hash identifier:          HwdRYhJ+SSQY543WeAjqk0vUlwTqnP4B01yuJpFy8H0=
Subject key identifier:   5F:45:F8:64:0C:4F:4F:7C:91:AE:2C:61:48:22:1B:53:11:AD:91:F8
Certificate issuer:       /CN=37d983de-280d-4374-a056-b21eb13451dd
Certificate serial:       010D0C9F4328584BC270538603A3A46330A3C600
Authority key identifier: A5:EE:A9:C5:BB:76:2C:20:7E:C3:A2:EF:36:C8:B9:26:D2:B5:07:B3
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/37d983de-280d-4374-a056-b21eb13451dd.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/37d983de-280d-4374-a056-b21eb13451dd/790c45c2-ee51-3404-bfc6-3f7fe538a881.roa
Signing time:             Wed 05 Nov 2025 14:00:38 +0000
ROA not before:           Wed 05 Nov 2025 14:00:38 +0000
ROA not after:            Tue 03 Feb 2026 14:00:38 +0000
asID:                     33604
IP address blocks:        162.247.88.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/37d983de-280d-4374-a056-b21eb13451dd/37d983de-280d-4374-a056-b21eb13451dd.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/37d983de-280d-4374-a056-b21eb13451dd/37d983de-280d-4374-a056-b21eb13451dd.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/37d983de-280d-4374-a056-b21eb13451dd.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 08 Nov 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:c2:70:53:86:03:a3:a4:63:30:a3:c6:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=37d983de-280d-4374-a056-b21eb13451dd
        Validity
            Not Before: Nov  5 14:00:38 2025 GMT
            Not After : Feb  3 14:00:38 2026 GMT
        Subject: CN=23741390-3b46-4b86-9411-10c9f9cf9d0e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:74:06:e3:14:8c:df:9d:56:4c:40:c6:02:2b:
                    ec:51:73:d2:0d:46:5f:ae:c1:f6:97:74:4b:90:8b:
                    25:a5:7f:26:3a:50:25:aa:dc:79:40:ae:0e:24:70:
                    85:e3:6a:ab:27:d5:c0:a7:cf:36:97:66:4a:15:cb:
                    21:51:1a:2a:9a:a2:57:0c:05:a4:31:a8:a3:72:7c:
                    a8:c0:39:6f:d2:53:f8:89:ac:07:3b:6b:4d:13:be:
                    30:63:fa:4d:61:6f:43:18:67:5f:0c:a3:e2:0c:04:
                    b4:70:8e:1a:7f:ff:87:a8:89:e5:e1:ad:d6:aa:19:
                    e2:0b:86:c9:d1:06:f7:f9:6c:bb:bc:e8:87:0b:a8:
                    d2:d2:d2:be:7d:95:e9:d9:a9:7f:b8:b0:34:64:aa:
                    de:b5:77:fd:f4:50:9e:4f:b7:64:9f:c8:2b:82:da:
                    b8:03:4a:fa:fe:9f:b5:8a:08:21:87:6d:86:4d:2d:
                    f1:95:da:41:8e:d3:d0:17:af:01:1a:2e:df:42:16:
                    01:96:20:5c:d0:16:59:3b:7e:78:e4:95:bb:1a:e4:
                    5c:a1:91:df:b8:ce:bc:e5:af:25:cc:c1:1f:fb:c5:
                    d5:6d:bd:d5:90:1f:c8:b8:0e:ae:fa:2c:39:84:4c:
                    e8:23:38:ed:75:2e:4a:ad:2f:d0:c6:88:cf:78:2d:
                    c2:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5F:45:F8:64:0C:4F:4F:7C:91:AE:2C:61:48:22:1B:53:11:AD:91:F8
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/37d983de-280d-4374-a056-b21eb13451dd/790c45c2-ee51-3404-bfc6-3f7fe538a881.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/37d983de-280d-4374-a056-b21eb13451dd/37d983de-280d-4374-a056-b21eb13451dd.crl

            X509v3 Authority Key Identifier:
                keyid:A5:EE:A9:C5:BB:76:2C:20:7E:C3:A2:EF:36:C8:B9:26:D2:B5:07:B3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/37d983de-280d-4374-a056-b21eb13451dd.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  162.247.88.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6b:1b:0e:84:0b:e0:9c:52:45:7a:ea:ff:cc:99:6c:a5:00:16:
         f4:a0:c4:c3:5b:30:25:c1:4a:b0:7d:cd:95:cd:bb:3f:d9:1b:
         24:45:c0:0d:ff:f6:a6:e8:c5:d7:67:e5:d3:32:4d:a0:5d:d7:
         78:99:58:71:7c:8d:7e:54:73:db:02:34:80:6d:c3:ca:01:1c:
         a8:67:b3:5c:4a:4d:1c:81:a0:b7:f6:a3:38:d3:c0:76:99:c5:
         0f:4e:2f:9c:1a:69:5f:c7:45:2d:53:27:7e:67:5f:c7:1c:47:
         d5:c1:ac:50:38:06:60:bd:01:a0:3c:81:e5:83:e3:41:be:e3:
         59:ae:29:7b:3e:e0:af:b5:fe:62:7a:b4:6b:93:c4:20:8b:85:
         69:4a:ab:d6:a3:0e:54:f9:62:53:96:22:8f:64:4b:6b:3a:f4:
         d5:27:e0:e1:a4:f2:33:2a:cd:74:7b:9e:f2:42:75:97:aa:2c:
         3a:bc:e3:88:e8:ad:81:93:03:d8:61:77:e4:20:59:e0:f3:32:
         3d:f5:7b:cd:57:30:91:2c:66:2e:2c:12:cb:8e:a4:35:ee:0f:
         c2:68:4f:f6:b1:41:6e:40:79:a8:d1:6a:0a:7f:4d:82:ce:3a:
         46:54:c0:3c:65:c8:90:37:75:73:0a:3a:21:bf:2e:87:ea:ac:
         7f:6a:f1:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 20:53:43 2025 by rpki-client