Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/88db2ec8-651c-4bdc-bf38-97fe38702609/4c26d07a-6a10-3283-bc4c-d335313f9d53.roa
File:                     4c26d07a-6a10-3283-bc4c-d335313f9d53.roa (raw, json)
Hash identifier:          VDMCDFLKCpDbrGjbSJlmYGVG88t1Z1yP0R7Vn9d6V4s=
Subject key identifier:   7E:B3:8E:19:C3:0F:19:AF:63:71:6B:FB:36:09:CE:DF:15:16:FA:1E
Certificate issuer:       /CN=88db2ec8-651c-4bdc-bf38-97fe38702609
Certificate serial:       010D0C9F4328584D59EA68CAFE00C39D9DB7AC00
Authority key identifier: 78:E5:8B:03:25:A9:5A:F6:BF:DD:70:79:BD:52:50:E6:03:FE:B0:00
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/88db2ec8-651c-4bdc-bf38-97fe38702609.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/88db2ec8-651c-4bdc-bf38-97fe38702609/4c26d07a-6a10-3283-bc4c-d335313f9d53.roa
Signing time:             Tue 31 Mar 2026 13:00:30 +0000
ROA not before:           Tue 31 Mar 2026 13:00:30 +0000
ROA not after:            Mon 29 Jun 2026 13:00:30 +0000
asID:                     7922
IP address blocks:        121.91.208.0/20 maxlen: 24
                          121.91.224.0/19 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/88db2ec8-651c-4bdc-bf38-97fe38702609/88db2ec8-651c-4bdc-bf38-97fe38702609.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/88db2ec8-651c-4bdc-bf38-97fe38702609/88db2ec8-651c-4bdc-bf38-97fe38702609.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/88db2ec8-651c-4bdc-bf38-97fe38702609.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 19 Apr 2026 05:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:59:ea:68:ca:fe:00:c3:9d:9d:b7:ac:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=88db2ec8-651c-4bdc-bf38-97fe38702609
        Validity
            Not Before: Mar 31 13:00:30 2026 GMT
            Not After : Jun 29 13:00:30 2026 GMT
        Subject: CN=a727c29d-8814-40e2-a106-f26c6a5f5ef1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:1e:2a:a7:32:a9:76:af:0b:78:42:d7:83:98:
                    8f:84:ef:a6:ba:cc:eb:f4:24:a5:d8:cf:60:75:e3:
                    ef:78:a9:69:67:03:3e:50:56:cf:40:df:00:41:a5:
                    1e:48:2b:d4:89:f2:cd:1c:3b:0d:f7:b2:8f:68:e6:
                    9d:df:55:8f:10:ff:65:58:c9:9b:a3:e4:95:b0:ca:
                    ef:d1:cf:d9:50:c7:a5:16:64:0d:6b:d3:67:90:03:
                    ef:3d:46:52:de:b7:cb:e3:1f:05:8a:66:7b:98:9f:
                    8a:69:62:df:6a:e2:49:19:c5:41:83:88:4e:69:a7:
                    76:4b:3e:c2:53:46:ab:9d:57:d9:af:27:96:fe:f5:
                    d8:41:45:5e:72:4a:ef:f6:fa:f9:46:63:1c:36:57:
                    ac:51:13:52:89:d3:74:31:c1:e8:4d:5c:f0:86:dc:
                    fa:e6:46:c3:83:cc:5c:91:4d:9e:a6:0c:0a:66:49:
                    3d:c3:bc:9e:9b:7b:62:36:c3:dd:ea:c2:48:eb:9c:
                    00:51:99:3b:a4:08:e5:26:e3:f9:29:c6:5e:c9:5d:
                    63:93:7f:24:cf:9f:0b:00:94:7a:c9:1f:a0:1d:39:
                    5c:ff:38:f7:85:f9:9e:42:bf:df:88:d6:bb:d3:8d:
                    bf:d2:ef:11:07:6d:67:58:63:39:7c:e8:f0:37:80:
                    7d:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7E:B3:8E:19:C3:0F:19:AF:63:71:6B:FB:36:09:CE:DF:15:16:FA:1E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/88db2ec8-651c-4bdc-bf38-97fe38702609/4c26d07a-6a10-3283-bc4c-d335313f9d53.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/88db2ec8-651c-4bdc-bf38-97fe38702609/88db2ec8-651c-4bdc-bf38-97fe38702609.crl

            X509v3 Authority Key Identifier:
                keyid:78:E5:8B:03:25:A9:5A:F6:BF:DD:70:79:BD:52:50:E6:03:FE:B0:00

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/88db2ec8-651c-4bdc-bf38-97fe38702609.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  121.91.208.0-121.91.255.255

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         50:9f:71:5d:65:07:33:d2:a1:d1:4f:5e:6a:a9:fa:45:87:f5:
         a7:e0:b1:0b:c0:d4:a5:60:75:50:26:19:ea:45:10:c7:45:f1:
         f9:66:9d:e8:92:fb:bc:3d:24:30:e3:cd:66:ce:4b:32:6f:29:
         8c:a6:05:62:12:67:3b:76:be:b7:97:b7:ee:77:f4:89:c7:50:
         ac:ba:3c:5d:2d:8e:fa:97:51:66:fa:f4:14:40:6f:8d:b6:40:
         7d:e1:33:c5:36:4d:02:a6:99:37:04:63:72:31:ca:48:4b:15:
         be:91:71:14:95:ff:1d:e3:dc:1d:a5:60:e5:11:e3:18:be:4e:
         2a:ff:95:cc:40:54:04:5e:4c:35:2e:e3:f8:a0:5a:e7:3e:7d:
         a1:4d:fc:76:bf:52:c7:20:68:b5:59:ce:db:93:a8:24:68:a1:
         6c:c3:31:ac:d0:4d:aa:96:02:0b:12:c6:e3:89:27:93:96:13:
         74:78:59:a6:55:87:da:de:14:62:12:16:82:06:f7:0a:27:a6:
         73:06:92:ab:10:35:99:a3:7b:10:c0:23:4a:be:f3:88:91:45:
         30:c3:ab:f6:28:c8:dc:38:23:66:eb:97:75:0e:b1:e3:76:23:
         e2:ca:3f:1c:86:fa:39:17:e2:1f:00:af:cf:75:92:0f:78:ae:
         ba:96:a2:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 14:37:54 2026 by rpki-client