Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9/88a2969f-7abc-3c1c-af89-6b29fda18bf6.roa
File:                     88a2969f-7abc-3c1c-af89-6b29fda18bf6.roa (raw, json)
Hash identifier:          9qMcDR4W2qtdRXBe+7CO3+0nAGLPT3lVow5ym+aEyAI=
Subject key identifier:   9E:4B:DA:4D:43:4F:F6:0D:CC:28:D3:41:3B:3B:87:79:D2:9F:D0:83
Certificate issuer:       /CN=a340834d-d728-405c-95f1-caa6810aa7d9
Certificate serial:       010D0C9F4328584D6EDA5CD8DC7148A06040E980
Authority key identifier: 83:C6:E8:CD:02:CF:5F:C7:0A:7E:12:DB:6C:32:83:E3:4C:35:F7:21
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9/88a2969f-7abc-3c1c-af89-6b29fda18bf6.roa
Signing time:             Wed 08 Apr 2026 01:00:24 +0000
ROA not before:           Wed 08 Apr 2026 01:00:24 +0000
ROA not after:            Tue 07 Jul 2026 01:00:24 +0000
asID:                     59210
IP address blocks:        131.153.48.0/22 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9/a340834d-d728-405c-95f1-caa6810aa7d9.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9/a340834d-d728-405c-95f1-caa6810aa7d9.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 18 Apr 2026 17:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:6e:da:5c:d8:dc:71:48:a0:60:40:e9:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a340834d-d728-405c-95f1-caa6810aa7d9
        Validity
            Not Before: Apr  8 01:00:24 2026 GMT
            Not After : Jul  7 01:00:24 2026 GMT
        Subject: CN=499dff5e-35f7-422a-a9ee-14a67be96b03
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:83:d1:a0:11:d6:f3:23:88:77:86:1d:9c:b4:a9:
                    fa:e5:df:c4:08:1e:ab:b2:7c:ca:ce:0e:96:ab:c3:
                    0e:40:65:6a:d3:47:4f:d7:43:8e:eb:96:17:2e:4a:
                    88:17:f3:94:d7:e9:91:83:1e:a1:ab:f7:89:0a:84:
                    7f:6e:ba:3d:59:52:e5:6e:d2:95:a0:88:be:01:a7:
                    64:18:d8:5c:d7:1d:66:b5:67:79:01:cd:92:9b:68:
                    5c:b2:a8:f2:d4:07:25:83:5a:ea:c9:96:0c:55:98:
                    08:ec:e7:06:46:83:5e:f5:07:24:82:22:b4:ad:7c:
                    2c:c8:b0:9a:94:f0:a1:15:b7:81:99:ad:f8:3c:1b:
                    11:96:a0:d0:94:d4:27:b4:e1:8b:ba:92:d4:69:ae:
                    4e:0d:11:2e:2b:b8:1d:77:52:06:41:1a:74:4b:1f:
                    e6:52:b2:57:0e:b8:c5:53:36:14:22:5b:28:c1:4a:
                    1f:f0:79:68:4a:fd:69:ce:b0:2a:c5:42:e9:bc:f0:
                    dd:6d:90:c7:38:3d:0a:76:ec:18:08:26:52:01:ea:
                    7c:40:97:d0:24:e5:f7:61:01:32:20:de:25:99:60:
                    b5:93:57:01:b2:ef:2a:00:e6:18:3d:76:c8:2d:8b:
                    48:b3:0c:45:49:f6:4e:8a:9b:3b:3c:78:30:1d:86:
                    23:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9E:4B:DA:4D:43:4F:F6:0D:CC:28:D3:41:3B:3B:87:79:D2:9F:D0:83
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9/88a2969f-7abc-3c1c-af89-6b29fda18bf6.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9/a340834d-d728-405c-95f1-caa6810aa7d9.crl

            X509v3 Authority Key Identifier:
                keyid:83:C6:E8:CD:02:CF:5F:C7:0A:7E:12:DB:6C:32:83:E3:4C:35:F7:21

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  131.153.48.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         12:4a:06:90:f0:65:15:1a:1c:db:51:8e:6c:ac:3b:77:0a:fe:
         c3:ec:59:10:33:20:c3:41:14:b0:5d:00:c3:69:0f:58:29:f7:
         f1:6c:f7:07:ad:f4:9d:aa:8b:20:7e:58:4c:ab:26:ca:16:d7:
         2b:b7:a8:eb:92:07:8e:30:35:a7:3c:5a:7a:81:18:a7:80:4b:
         61:49:d1:eb:fe:e7:4e:e1:cb:3f:50:0c:ea:55:7b:75:94:08:
         58:00:c6:98:25:22:90:d2:12:47:df:a6:bd:55:db:28:8c:47:
         03:58:f8:98:b2:fb:a6:e8:2c:eb:87:a5:64:db:4e:cc:4c:06:
         ae:d2:9d:f8:93:96:20:08:ee:f1:59:04:db:bf:f4:a4:32:a0:
         be:18:89:85:ea:ed:74:11:3a:79:58:e7:a6:fa:0b:56:a4:02:
         82:d3:e8:f6:3c:83:5d:d3:4d:61:e5:13:c7:aa:46:cc:1c:38:
         9b:63:ec:3d:a7:9e:6f:fd:d8:ae:25:da:cb:36:ae:21:f5:27:
         da:7b:3b:2b:cd:8a:ef:f7:5a:0f:a0:21:e9:5b:29:04:4a:7d:
         de:cf:f7:b1:c5:e5:fd:33:0f:b3:b1:20:2d:d5:8f:7b:97:19:
         8f:d7:c6:a1:0c:f6:fe:c0:b2:ac:45:c6:c5:f5:7a:36:c3:42:
         0d:07:43:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 14:15:35 2026 by rpki-client