Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/c8c301ab-7d22-46c3-8211-f6373ec82d5a/a816a3a2-4dd3-31a0-a0e6-f87205862e3f.roa
File:                     a816a3a2-4dd3-31a0-a0e6-f87205862e3f.roa (raw, json)
Hash identifier:          vjMzSSkvm8jG6QxOWsiKEOaB2S2pDFiEDfFnErmnxhI=
Subject key identifier:   7B:EF:87:A1:73:C1:64:44:00:E2:52:C2:FC:25:7A:24:79:9A:09:66
Certificate issuer:       /CN=c8c301ab-7d22-46c3-8211-f6373ec82d5a
Certificate serial:       010D0C9F4328584AB91B922B5EE175A90CBFBC00
Authority key identifier: 1B:13:FC:C8:68:95:3B:53:A8:FC:E8:B9:4B:8B:04:23:97:4A:52:D1
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/c8c301ab-7d22-46c3-8211-f6373ec82d5a.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/c8c301ab-7d22-46c3-8211-f6373ec82d5a/a816a3a2-4dd3-31a0-a0e6-f87205862e3f.roa
Signing time:             Sat 02 Aug 2025 13:00:41 +0000
ROA not before:           Sat 02 Aug 2025 13:00:41 +0000
ROA not after:            Fri 31 Oct 2025 13:00:41 +0000
asID:                     31898
IP address blocks:        162.253.82.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/c8c301ab-7d22-46c3-8211-f6373ec82d5a/c8c301ab-7d22-46c3-8211-f6373ec82d5a.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/c8c301ab-7d22-46c3-8211-f6373ec82d5a/c8c301ab-7d22-46c3-8211-f6373ec82d5a.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/c8c301ab-7d22-46c3-8211-f6373ec82d5a.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 08 Aug 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:b9:1b:92:2b:5e:e1:75:a9:0c:bf:bc:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c8c301ab-7d22-46c3-8211-f6373ec82d5a
        Validity
            Not Before: Aug  2 13:00:41 2025 GMT
            Not After : Oct 31 13:00:41 2025 GMT
        Subject: CN=327e893f-ea5a-46a5-b810-4c18af53965b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:88:f5:ce:33:ec:13:d5:ed:19:9b:b5:d0:00:02:
                    46:e8:72:55:cb:ec:72:94:e8:cc:11:dc:9a:b4:ae:
                    90:86:56:90:83:5d:e0:f0:06:7e:b3:b7:e0:8e:26:
                    6c:44:4d:7a:32:39:43:f6:30:8f:10:6b:97:d7:58:
                    5e:9b:cc:3a:e4:dc:9c:a8:35:a1:da:5d:a7:3c:50:
                    04:1a:43:f5:5d:01:fd:50:45:a0:cd:af:81:c7:45:
                    34:a5:89:56:ca:c0:3c:4f:4e:cd:9f:57:d5:4f:4d:
                    ef:6d:92:00:db:e8:fb:16:5e:60:d3:26:0b:38:28:
                    0b:63:97:9c:5b:54:e8:5c:fb:9f:b8:84:66:22:96:
                    c8:cb:fa:a2:4d:f7:ca:47:a2:1e:5b:d9:b1:7d:89:
                    23:a4:ed:cb:10:04:75:4c:ec:9a:5c:b4:c0:b0:c0:
                    25:f6:6a:f7:4d:1d:ae:f4:4a:98:0b:bb:3d:ea:f9:
                    60:70:48:04:37:c4:71:f4:9a:16:3e:a8:ff:e6:74:
                    06:04:be:6c:4a:c4:41:98:30:b0:07:1d:87:f9:b1:
                    b3:d3:e3:e2:aa:6d:1d:32:12:7d:13:7f:a2:65:2d:
                    a6:42:6e:0a:02:3d:75:1b:70:75:e6:8b:7d:5e:bb:
                    6a:a5:4c:99:26:bf:9a:ed:c7:4c:d6:bb:96:c0:fa:
                    09:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7B:EF:87:A1:73:C1:64:44:00:E2:52:C2:FC:25:7A:24:79:9A:09:66
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/c8c301ab-7d22-46c3-8211-f6373ec82d5a/a816a3a2-4dd3-31a0-a0e6-f87205862e3f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/c8c301ab-7d22-46c3-8211-f6373ec82d5a/c8c301ab-7d22-46c3-8211-f6373ec82d5a.crl

            X509v3 Authority Key Identifier:
                keyid:1B:13:FC:C8:68:95:3B:53:A8:FC:E8:B9:4B:8B:04:23:97:4A:52:D1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/c8c301ab-7d22-46c3-8211-f6373ec82d5a.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  162.253.82.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4e:16:24:56:a5:dc:dd:7c:4a:24:24:cf:b5:4f:ca:eb:0e:0d:
         c7:19:c5:bd:ca:04:51:69:dc:63:cc:ab:71:de:b6:4b:0d:92:
         1e:d7:f2:2e:af:06:d5:07:52:5d:43:3e:c2:90:98:4f:fa:40:
         b2:b4:32:41:3c:e7:3a:b6:4c:8c:96:23:d3:c2:53:47:6d:af:
         5d:22:f4:f4:94:76:38:67:66:4d:38:e9:be:85:55:8a:2d:f9:
         54:a6:1e:3d:b3:7b:0d:ae:22:56:ef:55:24:ca:d0:dc:b4:b9:
         4e:78:93:08:b4:db:d6:ba:5a:53:ac:7c:ce:68:e8:16:2b:09:
         72:a2:12:a7:bc:ac:54:51:ae:47:40:38:f2:d3:95:b9:76:d6:
         3c:28:d3:f2:04:f1:c1:6a:89:8a:51:8e:b1:f4:2f:8b:93:28:
         98:16:08:76:f6:e7:81:c5:25:de:c5:1b:ff:ad:86:7f:84:fd:
         8e:7d:75:b0:c8:61:a1:ba:57:9b:d0:17:db:87:b2:19:69:26:
         c6:7c:0d:65:80:c3:84:dd:3e:8f:0e:1f:3e:d4:b5:72:70:18:
         c5:26:1e:da:35:51:d8:35:47:36:8f:88:15:96:c3:99:62:8a:
         8f:a2:09:3b:c2:28:7d:a3:da:e0:6e:20:9e:3e:7d:25:b9:75:
         f4:fe:61:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 7 03:17:56 2025 by rpki-client