Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/74b24643-d6d5-4d2a-b885-83160dec7103/e8a4e9ef-e6df-392b-b42b-db3c5f8d0b12.roa
File:                     e8a4e9ef-e6df-392b-b42b-db3c5f8d0b12.roa (raw, json)
Hash identifier:          yTjsPc1IZpNUdeSnLm2Suovgo69SStVehBc0XkirAvM=
Subject key identifier:   AE:D2:EE:95:6A:0E:70:F3:DE:10:59:1F:38:AF:07:9D:AF:36:30:C7
Certificate issuer:       /CN=74b24643-d6d5-4d2a-b885-83160dec7103
Certificate serial:       010D0C9F4328584AAB264A613D3DC62613C68080
Authority key identifier: 32:48:2C:26:74:5B:59:00:E4:D0:78:12:7E:F4:AA:AE:8A:4E:57:19
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/74b24643-d6d5-4d2a-b885-83160dec7103.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/74b24643-d6d5-4d2a-b885-83160dec7103/e8a4e9ef-e6df-392b-b42b-db3c5f8d0b12.roa
Signing time:             Mon 28 Jul 2025 13:01:04 +0000
ROA not before:           Mon 28 Jul 2025 13:01:04 +0000
ROA not after:            Sun 26 Oct 2025 13:01:04 +0000
asID:                     42
IP address blocks:        208.67.88.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/74b24643-d6d5-4d2a-b885-83160dec7103/74b24643-d6d5-4d2a-b885-83160dec7103.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/74b24643-d6d5-4d2a-b885-83160dec7103/74b24643-d6d5-4d2a-b885-83160dec7103.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/74b24643-d6d5-4d2a-b885-83160dec7103.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 06 Aug 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:ab:26:4a:61:3d:3d:c6:26:13:c6:80:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=74b24643-d6d5-4d2a-b885-83160dec7103
        Validity
            Not Before: Jul 28 13:01:04 2025 GMT
            Not After : Oct 26 13:01:04 2025 GMT
        Subject: CN=913a21d6-e8be-47ff-896c-77309bedee89
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:b1:2a:83:03:15:1a:ec:01:56:90:ef:9f:19:
                    c2:3c:78:cf:82:aa:8d:38:73:7a:ec:08:7b:a7:b5:
                    29:b8:6d:4f:aa:c4:47:3c:0d:93:32:bb:37:8b:c9:
                    d5:13:50:85:74:5d:a4:f6:e5:5d:c2:b4:18:3e:ca:
                    bc:d1:3f:eb:77:98:02:f0:8c:75:38:22:6c:ce:19:
                    c5:36:8e:77:c3:0c:51:6b:e5:7e:83:a1:93:74:5e:
                    de:c6:92:99:cb:0d:35:aa:7c:df:97:19:73:8b:08:
                    62:d8:5f:d4:6d:de:99:39:0f:44:89:ea:8d:0e:74:
                    a1:ee:7d:f6:36:fd:7d:af:c8:13:c2:a0:e3:59:26:
                    28:bb:d9:cc:1d:c8:ec:52:09:0e:c0:f7:45:3e:84:
                    8f:33:76:22:ed:17:15:e7:84:c0:71:24:53:a1:ba:
                    97:39:4f:ac:56:ad:c2:f4:bd:ae:75:b8:75:74:69:
                    ac:e8:50:2b:e2:f3:31:66:f8:89:bf:40:b3:51:92:
                    54:b4:8d:62:a9:65:d8:f1:40:ee:d8:2b:5a:71:42:
                    5c:2e:b7:50:72:d5:68:a0:80:f1:bd:70:46:85:f7:
                    2b:4f:45:e7:29:5a:02:0f:e2:80:4b:7b:6e:ab:ef:
                    bc:61:a5:6e:c7:5a:b0:1b:7c:5f:b3:7c:6c:d1:b3:
                    10:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AE:D2:EE:95:6A:0E:70:F3:DE:10:59:1F:38:AF:07:9D:AF:36:30:C7
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/74b24643-d6d5-4d2a-b885-83160dec7103/e8a4e9ef-e6df-392b-b42b-db3c5f8d0b12.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/74b24643-d6d5-4d2a-b885-83160dec7103/74b24643-d6d5-4d2a-b885-83160dec7103.crl

            X509v3 Authority Key Identifier:
                keyid:32:48:2C:26:74:5B:59:00:E4:D0:78:12:7E:F4:AA:AE:8A:4E:57:19

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/74b24643-d6d5-4d2a-b885-83160dec7103.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  208.67.88.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         67:73:c5:a4:ad:20:9c:dd:85:31:e2:69:9c:bd:a4:22:b8:27:
         b6:db:72:95:50:eb:74:5b:46:0a:29:3b:ec:00:33:be:97:ba:
         da:44:97:7e:e7:21:22:d3:cf:b5:ae:73:f0:16:5a:51:64:e4:
         a1:80:bb:4e:34:ca:a7:25:87:67:9f:5e:12:d3:12:b8:19:f1:
         d3:3e:ab:3a:10:f7:2c:54:c3:37:97:2d:96:01:30:66:ba:3a:
         f8:1d:45:a8:56:b8:b9:e2:d4:8a:11:3c:d5:da:29:2e:97:66:
         20:f5:fb:d0:54:ab:63:17:d4:0e:27:9d:45:e8:a5:79:b8:8e:
         47:94:44:15:2c:45:28:12:96:0f:60:4e:00:d0:53:86:d9:cf:
         66:d6:3c:f5:d3:58:78:d2:d1:72:8e:f5:a5:0d:24:23:83:dc:
         0f:a7:7a:81:3b:fc:2b:2c:42:52:65:27:c0:29:32:bc:94:5e:
         29:f8:2e:c3:1c:7e:8e:f8:36:eb:e3:fa:ed:ea:89:7a:c8:6c:
         2c:b0:b0:1d:45:cd:5c:e6:c3:06:e1:d3:98:f9:33:0c:14:9c:
         c5:3a:83:3d:ad:36:dd:e5:45:03:0d:4d:ab:2b:06:f2:a8:23:
         45:85:10:4d:23:64:00:d7:e8:7f:ae:41:b3:c1:a2:95:54:a4:
         f1:c7:fc:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 19:05:42 2025 by rpki-client