Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/ab98592a-7218-439c-b165-34810fd16d71/83192027-2fc6-3941-b351-d37908fed464.roa
File:                     83192027-2fc6-3941-b351-d37908fed464.roa (raw, json)
Hash identifier:          oIkCy/rJv6kTGjPcRl7YOoJdE3nVveXastFxwIIaN0I=
Subject key identifier:   79:20:82:A8:ED:C7:9E:18:23:50:0F:42:FA:5F:9B:25:76:90:CB:7A
Certificate issuer:       /CN=ab98592a-7218-439c-b165-34810fd16d71
Certificate serial:       010D0C9F4328584BAEB91791063146EEF91BCD40
Authority key identifier: 07:77:4B:3F:A3:E5:F4:F7:B2:D2:93:CC:27:35:33:62:B8:4E:78:3D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/ab98592a-7218-439c-b165-34810fd16d71.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/ab98592a-7218-439c-b165-34810fd16d71/83192027-2fc6-3941-b351-d37908fed464.roa
Signing time:             Wed 29 Oct 2025 12:31:17 +0000
ROA not before:           Wed 29 Oct 2025 12:31:17 +0000
ROA not after:            Tue 27 Jan 2026 13:31:17 +0000
asID:                     3300
IP address blocks:        198.207.76.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/ab98592a-7218-439c-b165-34810fd16d71/ab98592a-7218-439c-b165-34810fd16d71.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/ab98592a-7218-439c-b165-34810fd16d71/ab98592a-7218-439c-b165-34810fd16d71.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/ab98592a-7218-439c-b165-34810fd16d71.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 07 Nov 2025 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:ae:b9:17:91:06:31:46:ee:f9:1b:cd:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ab98592a-7218-439c-b165-34810fd16d71
        Validity
            Not Before: Oct 29 12:31:17 2025 GMT
            Not After : Jan 27 13:31:17 2026 GMT
        Subject: CN=3c8e6187-64fa-498b-81ec-89e1d4e90bb9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:e9:e0:97:7a:cd:2f:6a:9f:bc:3f:7c:e1:5a:
                    8d:1c:15:64:92:90:a7:82:d5:9e:7b:39:af:46:c5:
                    04:21:81:3f:4a:08:17:69:ec:c4:9d:4f:96:31:8b:
                    38:3d:88:ad:4c:89:9e:1d:91:a2:cb:15:1f:28:d4:
                    4a:3f:fe:84:9b:d0:8c:cf:25:5a:f0:8a:7d:60:77:
                    79:05:7a:22:5d:c9:5f:83:dc:67:ed:aa:db:02:9b:
                    78:ab:96:56:4b:06:c0:a5:7e:20:af:7a:ac:bb:46:
                    e1:65:22:b2:16:a8:dc:ae:fa:2f:4e:91:ea:f8:45:
                    35:b9:46:05:a9:00:68:fa:cb:f6:04:f6:5a:95:6f:
                    8c:e6:2e:26:d9:15:8f:8d:6b:92:a4:67:96:e8:a1:
                    f4:b9:d6:34:09:16:a2:65:2c:f9:34:3a:ad:8a:06:
                    6b:08:9a:16:6a:67:cf:53:e7:78:37:56:d2:c7:e8:
                    8c:6d:f3:4b:56:45:a8:20:08:33:5e:59:c2:59:8a:
                    8b:3e:6e:3a:d3:e2:9c:1b:4d:26:89:95:7e:ad:12:
                    98:5e:e6:4c:15:95:40:0a:29:d6:1e:68:dc:5d:ad:
                    8d:81:2c:67:29:2f:1f:6b:7d:7f:a4:bf:57:52:33:
                    9e:9f:1f:4d:13:4b:b5:4b:7b:4f:d9:f6:c5:1c:69:
                    74:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                79:20:82:A8:ED:C7:9E:18:23:50:0F:42:FA:5F:9B:25:76:90:CB:7A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/ab98592a-7218-439c-b165-34810fd16d71/83192027-2fc6-3941-b351-d37908fed464.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/ab98592a-7218-439c-b165-34810fd16d71/ab98592a-7218-439c-b165-34810fd16d71.crl

            X509v3 Authority Key Identifier:
                keyid:07:77:4B:3F:A3:E5:F4:F7:B2:D2:93:CC:27:35:33:62:B8:4E:78:3D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/ab98592a-7218-439c-b165-34810fd16d71.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  198.207.76.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         92:ec:e2:64:e8:88:e1:7c:22:f8:30:1c:69:dd:5f:53:cd:a2:
         3a:72:5b:cf:8b:9d:7b:c1:80:ce:d8:b3:2e:c8:4f:53:be:3b:
         7a:5b:6f:4f:2b:19:f2:19:9c:50:0d:89:08:92:1b:74:60:4f:
         a5:a2:5b:48:4c:4a:5b:01:4d:c9:f0:4f:64:8d:3a:ba:4e:d2:
         32:a6:a9:7e:8d:ce:25:2f:f6:97:3e:42:7e:be:6b:5e:dd:dc:
         50:89:4c:e3:8b:39:57:50:5b:94:fb:45:31:65:9d:57:9c:04:
         bd:43:0b:92:91:a5:c2:18:0d:ce:cc:a9:66:c6:cc:85:d8:bc:
         22:d3:6d:e8:5a:2a:1c:2c:40:51:c7:ab:2a:65:ff:9f:7f:1b:
         94:90:d3:d3:7c:79:ed:9b:79:d4:b5:c7:44:cc:57:12:c8:13:
         63:5f:02:6e:bd:54:dc:bb:de:9c:54:71:ee:4d:1a:cb:84:51:
         15:36:bd:6e:26:64:c9:1d:55:ad:75:0f:52:43:2f:6b:e0:d1:
         7d:2f:d3:cf:dd:55:c1:c3:50:25:14:2f:34:d0:b0:93:0a:32:
         6a:ca:98:b2:71:27:fe:78:40:73:43:b7:be:af:25:da:0e:d4:
         a7:94:ac:f7:4c:b3:95:4c:dd:f4:20:67:b0:fa:75:41:6e:68:
         80:0f:ee:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 19:38:22 2025 by rpki-client