Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d3a00337-0fdf-42e1-9343-424fd474da93/88fa68b5-1bfb-3036-8fdb-75b76e78c0bb.roa
File:                     88fa68b5-1bfb-3036-8fdb-75b76e78c0bb.roa (raw, json)
Hash identifier:          P7hQksmC0duh/unbveysFNQuThqmMkzimdhJwDODHlk=
Subject key identifier:   54:A0:F5:F9:55:49:59:AD:94:1E:FA:34:8E:CD:7A:7A:35:1A:D2:C2
Certificate issuer:       /CN=d3a00337-0fdf-42e1-9343-424fd474da93
Certificate serial:       010D0C9F4328584B9E07AD236B09703E32D66640
Authority key identifier: CB:37:3A:06:D0:D6:61:3B:C1:2E:E7:33:9E:8A:11:DA:AE:C9:55:0D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d3a00337-0fdf-42e1-9343-424fd474da93.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d3a00337-0fdf-42e1-9343-424fd474da93/88fa68b5-1bfb-3036-8fdb-75b76e78c0bb.roa
Signing time:             Thu 23 Oct 2025 13:00:38 +0000
ROA not before:           Thu 23 Oct 2025 13:00:38 +0000
ROA not after:            Wed 21 Jan 2026 14:00:38 +0000
asID:                     27398
IP address blocks:        206.81.160.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d3a00337-0fdf-42e1-9343-424fd474da93/d3a00337-0fdf-42e1-9343-424fd474da93.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d3a00337-0fdf-42e1-9343-424fd474da93/d3a00337-0fdf-42e1-9343-424fd474da93.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d3a00337-0fdf-42e1-9343-424fd474da93.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 08 Nov 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:9e:07:ad:23:6b:09:70:3e:32:d6:66:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d3a00337-0fdf-42e1-9343-424fd474da93
        Validity
            Not Before: Oct 23 13:00:38 2025 GMT
            Not After : Jan 21 14:00:38 2026 GMT
        Subject: CN=9732f8fd-0d0e-4a6d-8f1b-ed2f6339f014
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:5e:3d:90:ec:53:00:03:15:bf:e7:4e:ff:8f:
                    af:cf:dc:e1:94:bb:97:ff:94:6e:d6:30:dc:c0:b8:
                    c5:e8:a0:21:44:55:ef:9c:48:4f:73:97:0a:78:f6:
                    6b:88:12:f3:bc:80:bd:5f:d6:fe:9a:55:b4:05:b5:
                    03:b1:87:7a:e2:db:80:cd:e2:73:97:23:5b:df:84:
                    fe:f0:c7:25:da:f6:41:96:39:fc:e4:3a:3c:ed:85:
                    15:89:0b:bb:0a:1f:36:bb:d4:af:ae:dc:eb:f3:33:
                    d5:e4:40:8e:05:b0:95:66:ad:6c:ed:d8:c1:bc:ac:
                    c1:9e:b6:71:46:48:48:c4:78:2a:f0:2e:95:1a:cd:
                    d0:87:c7:34:58:fb:3b:1b:4d:74:53:68:d5:e2:16:
                    0b:2d:b1:51:47:99:ef:d6:f2:8e:9a:c2:97:32:64:
                    26:ee:40:b2:b7:d3:7a:5e:13:70:71:4b:ea:95:c4:
                    09:f0:ce:5e:d9:be:0b:4d:bd:a0:53:76:14:4b:cb:
                    ef:14:dc:8e:97:23:a4:91:a9:e9:74:01:11:ff:0d:
                    c1:d7:35:0a:23:08:0c:06:63:b1:ee:91:6b:0d:95:
                    0d:5f:8f:9c:e8:37:e8:80:d7:ee:26:a6:88:68:ac:
                    56:1b:03:cb:2a:e4:0e:eb:ea:d7:53:84:9b:5d:d6:
                    ba:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                54:A0:F5:F9:55:49:59:AD:94:1E:FA:34:8E:CD:7A:7A:35:1A:D2:C2
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d3a00337-0fdf-42e1-9343-424fd474da93/88fa68b5-1bfb-3036-8fdb-75b76e78c0bb.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d3a00337-0fdf-42e1-9343-424fd474da93/d3a00337-0fdf-42e1-9343-424fd474da93.crl

            X509v3 Authority Key Identifier:
                keyid:CB:37:3A:06:D0:D6:61:3B:C1:2E:E7:33:9E:8A:11:DA:AE:C9:55:0D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d3a00337-0fdf-42e1-9343-424fd474da93.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  206.81.160.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         33:e4:92:f1:75:1f:ab:ae:69:b5:66:bb:4d:6f:29:10:71:25:
         a0:72:12:ce:65:a6:70:7f:b7:d0:60:7b:36:c1:26:1c:3a:5f:
         8e:92:8b:01:1a:8f:1b:bd:a7:1f:e9:b9:33:1f:08:9c:e1:af:
         fa:9f:89:9a:80:3c:9b:78:7d:ff:d3:5b:82:41:19:8e:c8:89:
         e3:d8:e1:20:8d:a6:b2:5f:b3:29:94:d4:73:a6:1e:e1:0b:5c:
         52:be:16:f3:73:15:1e:ad:f1:67:7d:44:64:91:65:fe:12:4c:
         28:0f:5a:b2:9f:94:c2:f0:38:71:23:05:f1:e4:65:a8:24:ab:
         96:23:3d:bb:14:20:7e:62:3b:9b:ac:eb:32:0b:d1:2a:e5:76:
         dd:5a:17:67:1f:87:ae:60:55:b1:a0:fd:e5:66:3d:29:dc:1d:
         f7:b3:6f:aa:36:c1:59:4c:e7:2b:99:3b:f4:6c:5a:81:ba:0d:
         06:a3:72:a3:33:9f:a6:79:1c:21:a4:d4:4c:5c:60:a1:87:44:
         ee:43:7a:8b:61:0a:1b:da:93:36:92:17:c9:5d:51:06:2c:72:
         b0:03:a6:ca:a1:3f:1d:6c:cf:c5:cd:1c:d1:5f:3f:b5:6a:dd:
         d0:31:11:27:45:5b:c6:36:6d:6c:65:79:e6:79:88:50:50:67:
         ed:92:66:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 16:07:20 2025 by rpki-client