Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/88842878-1050-4df7-822b-ea8ec25db83d/2e6e5776-9e96-3cc4-84c0-99402971fc6e.roa
File:                     2e6e5776-9e96-3cc4-84c0-99402971fc6e.roa (raw, json)
Hash identifier:          w5t7FxYVGH+TPacnGSvtr9eojyj+Zc/R9mLGLZoRIJo=
Subject key identifier:   0A:A1:51:43:77:3B:7E:AC:D6:72:21:59:BD:E9:EB:D5:09:D7:58:C7
Certificate issuer:       /CN=88842878-1050-4df7-822b-ea8ec25db83d
Certificate serial:       010D0C9F4328584AAB264E6B8D16680A4B543940
Authority key identifier: 0A:F4:2F:69:20:F1:AA:D7:6D:67:3C:86:9A:04:C8:80:1E:AD:7D:99
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/88842878-1050-4df7-822b-ea8ec25db83d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/88842878-1050-4df7-822b-ea8ec25db83d/2e6e5776-9e96-3cc4-84c0-99402971fc6e.roa
Signing time:             Mon 28 Jul 2025 13:01:04 +0000
ROA not before:           Mon 28 Jul 2025 13:01:04 +0000
ROA not after:            Sun 26 Oct 2025 13:01:04 +0000
asID:                     11317
IP address blocks:        164.113.255.128/27 maxlen: 27
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/88842878-1050-4df7-822b-ea8ec25db83d/88842878-1050-4df7-822b-ea8ec25db83d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/88842878-1050-4df7-822b-ea8ec25db83d/88842878-1050-4df7-822b-ea8ec25db83d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/88842878-1050-4df7-822b-ea8ec25db83d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 08 Aug 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:ab:26:4e:6b:8d:16:68:0a:4b:54:39:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=88842878-1050-4df7-822b-ea8ec25db83d
        Validity
            Not Before: Jul 28 13:01:04 2025 GMT
            Not After : Oct 26 13:01:04 2025 GMT
        Subject: CN=8fcbf8dd-6a12-43d8-b6b8-1c3084a9defc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:1d:8d:9a:bf:28:8a:4d:cd:32:d1:f7:aa:c7:
                    dd:2c:89:2d:c7:00:00:b8:fa:7d:40:0a:94:b9:52:
                    8c:25:5b:c0:74:88:41:2f:bc:fc:4c:63:a8:73:2a:
                    49:82:48:27:1e:fd:83:a3:84:34:ae:3e:95:2d:f0:
                    af:62:b8:40:20:89:75:34:1f:6a:7f:18:a5:3c:fa:
                    33:53:29:90:46:df:27:81:68:9b:7c:30:0e:00:50:
                    1c:52:c6:b9:4c:e0:4e:be:30:29:aa:eb:6b:b9:44:
                    a5:5a:57:04:a5:63:3b:b3:d1:16:e3:c3:8a:6a:fe:
                    51:50:95:8e:06:6e:14:e4:1c:a1:34:68:9d:1a:3b:
                    d2:7d:a4:f2:ae:ea:6f:7a:ce:e4:28:f8:76:0d:14:
                    19:ff:41:fd:a1:21:e3:57:4d:7e:53:57:26:41:ff:
                    04:84:3c:b8:9a:cc:3a:17:1a:00:82:55:83:88:66:
                    68:b5:da:2b:ae:f2:a3:4e:37:a6:12:58:d6:85:88:
                    44:e7:94:84:3d:11:cf:f6:d7:e7:68:df:6d:89:0b:
                    21:ab:ab:0e:ab:6c:f2:29:9c:94:3b:e7:8a:b8:3c:
                    23:74:12:89:31:00:6a:28:e4:9f:ed:0b:52:04:f1:
                    69:d2:00:be:c5:dc:b0:8b:a4:42:de:11:1e:76:04:
                    90:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0A:A1:51:43:77:3B:7E:AC:D6:72:21:59:BD:E9:EB:D5:09:D7:58:C7
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/88842878-1050-4df7-822b-ea8ec25db83d/2e6e5776-9e96-3cc4-84c0-99402971fc6e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/88842878-1050-4df7-822b-ea8ec25db83d/88842878-1050-4df7-822b-ea8ec25db83d.crl

            X509v3 Authority Key Identifier:
                keyid:0A:F4:2F:69:20:F1:AA:D7:6D:67:3C:86:9A:04:C8:80:1E:AD:7D:99

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/88842878-1050-4df7-822b-ea8ec25db83d.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  164.113.255.128/27

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         9d:d2:6d:d4:6f:2d:9d:ad:9b:fa:c9:31:31:ec:1d:f8:60:1c:
         e3:c1:d7:c0:f5:84:a6:0a:5d:05:d1:01:1f:76:55:2d:73:db:
         af:f0:2a:3a:76:cc:ac:bd:fe:71:c5:4e:a9:b4:df:42:1c:d9:
         cb:21:b9:24:60:1e:b0:54:ec:75:ef:64:28:2f:86:60:fb:a1:
         9d:20:88:96:c2:5b:fc:dc:4e:17:19:c2:9e:b5:1b:21:5b:e4:
         15:dc:6b:c1:99:a2:01:ba:d8:ca:c9:15:f2:04:d0:d5:5f:d3:
         1d:b9:f6:56:5b:91:79:5c:b2:53:16:b8:d4:f6:9d:fd:5b:5f:
         1c:f4:b9:a6:0e:9b:36:ed:93:0c:90:c8:49:7d:5d:20:5b:ec:
         ad:c5:63:c7:0d:30:b2:e7:93:2d:0a:53:2c:8a:03:3c:1f:53:
         a0:09:34:02:9a:35:c9:23:f4:bd:8e:18:95:98:64:fa:2a:e6:
         e6:26:af:71:f1:1d:bd:4d:87:62:a2:0c:b7:b9:74:0e:aa:b8:
         1d:39:3b:19:90:2b:60:e7:bb:9c:28:a4:39:65:3b:bf:7e:42:
         51:30:f8:b7:f5:bc:d4:2b:7b:64:fe:41:4d:a3:f3:40:19:4e:
         1e:24:e0:8c:a9:bb:73:7d:87:51:e4:94:32:0b:b1:14:b9:d0:
         a0:0c:46:a6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 7 14:44:07 2025 by rpki-client