Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/88842878-1050-4df7-822b-ea8ec25db83d/08d994b0-98f1-323a-8f29-58eb272417bd.roa
File:                     08d994b0-98f1-323a-8f29-58eb272417bd.roa (raw, json)
Hash identifier:          PzyHIFiRP6FcYBQxLQGXJ1b+p5S+mmX/OzPE4EEmsLc=
Subject key identifier:   37:5F:0A:6D:9B:D0:0E:86:21:96:5A:CA:08:AD:F7:95:83:36:22:32
Certificate issuer:       /CN=88842878-1050-4df7-822b-ea8ec25db83d
Certificate serial:       010D0C9F4328584A9FFBA1098C94DA9B2DDBE040
Authority key identifier: 0A:F4:2F:69:20:F1:AA:D7:6D:67:3C:86:9A:04:C8:80:1E:AD:7D:99
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/88842878-1050-4df7-822b-ea8ec25db83d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/88842878-1050-4df7-822b-ea8ec25db83d/08d994b0-98f1-323a-8f29-58eb272417bd.roa
Signing time:             Thu 24 Jul 2025 13:01:02 +0000
ROA not before:           Thu 24 Jul 2025 13:01:02 +0000
ROA not after:            Wed 22 Oct 2025 13:01:02 +0000
asID:                     16826
IP address blocks:        198.248.96.0/20 maxlen: 20
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/88842878-1050-4df7-822b-ea8ec25db83d/88842878-1050-4df7-822b-ea8ec25db83d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/88842878-1050-4df7-822b-ea8ec25db83d/88842878-1050-4df7-822b-ea8ec25db83d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/88842878-1050-4df7-822b-ea8ec25db83d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 10 Aug 2025 13:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:9f:fb:a1:09:8c:94:da:9b:2d:db:e0:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=88842878-1050-4df7-822b-ea8ec25db83d
        Validity
            Not Before: Jul 24 13:01:02 2025 GMT
            Not After : Oct 22 13:01:02 2025 GMT
        Subject: CN=8a139a22-43ba-4a6b-bffc-5e66f6608fec
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8e:93:19:61:59:79:42:4e:d2:4b:ea:3a:7c:c3:
                    ea:21:6d:ed:41:63:54:78:f3:86:12:89:f2:7e:83:
                    9f:3f:c1:9e:73:e4:93:26:36:a0:77:6e:c7:07:05:
                    70:69:a8:6f:a3:3b:4d:3a:e2:8b:42:c9:02:3d:15:
                    bf:f4:ba:79:8c:c1:84:72:04:73:cd:2d:b1:f3:54:
                    29:44:7a:16:90:3f:ba:a5:ef:81:28:b6:26:19:4f:
                    96:38:96:04:cc:46:45:99:d7:d2:ac:21:90:39:b2:
                    67:fe:39:03:15:bb:6d:cb:b7:f9:64:0c:7d:64:22:
                    fa:5a:8c:06:e2:de:2e:aa:f9:48:fe:8d:72:05:df:
                    13:3f:69:d0:20:f1:16:f2:ac:f3:b9:1d:8c:00:ed:
                    8f:58:19:65:17:9a:08:d1:8e:f7:ec:46:70:9e:91:
                    f2:6a:8d:5a:74:b6:52:a3:72:9d:c6:92:2f:f0:e7:
                    40:ca:67:cc:14:45:36:43:b0:6c:b6:7c:f8:47:1c:
                    ed:fe:65:96:c9:a9:9a:48:c3:2e:e1:06:9e:8c:63:
                    e4:67:95:28:fb:eb:aa:a5:b1:9b:e8:6e:91:36:a3:
                    ed:9a:3c:b3:1b:d8:3d:7e:81:a0:7f:3a:9a:e5:b5:
                    38:d4:8b:d4:1d:bd:38:30:26:62:5b:79:db:bc:57:
                    c9:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                37:5F:0A:6D:9B:D0:0E:86:21:96:5A:CA:08:AD:F7:95:83:36:22:32
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/88842878-1050-4df7-822b-ea8ec25db83d/08d994b0-98f1-323a-8f29-58eb272417bd.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/88842878-1050-4df7-822b-ea8ec25db83d/88842878-1050-4df7-822b-ea8ec25db83d.crl

            X509v3 Authority Key Identifier:
                keyid:0A:F4:2F:69:20:F1:AA:D7:6D:67:3C:86:9A:04:C8:80:1E:AD:7D:99

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/88842878-1050-4df7-822b-ea8ec25db83d.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  198.248.96.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         20:8e:6a:cb:7a:22:ce:58:44:13:80:b8:b5:91:ce:24:29:9e:
         b0:1b:40:d8:e3:fc:3a:8e:23:c8:a1:0c:d5:cb:60:e7:52:a8:
         58:3c:80:89:ff:35:ec:65:de:54:e4:83:f9:32:e5:dc:ad:bf:
         ce:c2:6f:f4:43:cf:09:45:d6:91:c3:e0:c1:3a:1b:1a:96:c0:
         2b:01:d8:3a:c7:c2:b4:11:91:4b:f9:6a:01:ec:65:e9:f4:10:
         f3:a6:9b:31:5b:22:44:31:96:5c:72:30:b6:52:69:eb:25:46:
         1a:c6:d5:a3:7c:fd:65:d5:86:d1:97:ae:98:0f:09:62:01:3a:
         d9:31:8a:89:85:19:48:2f:b0:03:f2:84:7f:3f:d9:68:1d:1b:
         07:f5:26:02:5f:34:68:94:a2:c2:a6:7d:d0:ef:e1:ed:48:e3:
         66:d7:8b:07:33:e6:71:0c:b2:f9:ac:0c:f4:b7:00:05:54:51:
         0b:ff:5b:62:6f:98:3b:df:86:0a:19:14:70:2b:6d:66:be:10:
         02:f6:cf:c0:bc:af:98:43:8d:18:06:74:a2:a8:8c:1d:ec:66:
         81:45:13:eb:f2:7c:ce:20:ed:17:5f:69:18:33:89:92:2e:db:
         f0:ef:7c:a5:dd:ab:51:5b:33:1a:07:34:cd:fc:d2:1b:58:21:
         6e:3b:da:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 9 10:54:09 2025 by rpki-client