Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/e5dbd103-f55d-48bc-bcdd-bddd2f9a82ac/a88d6f0d-6f2a-30fe-924b-1062d69f740d.roa
File:                     a88d6f0d-6f2a-30fe-924b-1062d69f740d.roa (raw, json)
Hash identifier:          6OauVCPFXdPu3Apvcs+Yn/RJYadWpNiIpIrstT9Df60=
Subject key identifier:   71:51:97:7E:90:A1:D4:A5:25:8D:97:C7:25:EC:DE:2F:C9:78:D2:53
Certificate issuer:       /CN=e5dbd103-f55d-48bc-bcdd-bddd2f9a82ac
Certificate serial:       010D0C9F4328584DF210B84007C6DB9A60BE6740
Authority key identifier: 8A:B9:95:79:E4:34:18:36:BE:94:98:E6:13:4F:FE:DC:1E:59:71:FF
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/e5dbd103-f55d-48bc-bcdd-bddd2f9a82ac.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/e5dbd103-f55d-48bc-bcdd-bddd2f9a82ac/a88d6f0d-6f2a-30fe-924b-1062d69f740d.roa
Signing time:             Mon 25 May 2026 01:00:24 +0000
ROA not before:           Mon 25 May 2026 01:00:24 +0000
ROA not after:            Sun 23 Aug 2026 01:00:24 +0000
asID:                     400528
IP address blocks:        142.202.124.0/22 maxlen: 24
                          192.171.112.0/23 maxlen: 24
                          2605:8a40::/32 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/e5dbd103-f55d-48bc-bcdd-bddd2f9a82ac/e5dbd103-f55d-48bc-bcdd-bddd2f9a82ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/e5dbd103-f55d-48bc-bcdd-bddd2f9a82ac/e5dbd103-f55d-48bc-bcdd-bddd2f9a82ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/e5dbd103-f55d-48bc-bcdd-bddd2f9a82ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 14 Jun 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:f2:10:b8:40:07:c6:db:9a:60:be:67:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e5dbd103-f55d-48bc-bcdd-bddd2f9a82ac
        Validity
            Not Before: May 25 01:00:24 2026 GMT
            Not After : Aug 23 01:00:24 2026 GMT
        Subject: CN=616d47c1-e053-41a9-abe0-a02640c78722
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:92:8a:1b:f9:28:af:bf:97:66:ac:57:77:31:
                    76:87:b7:58:d4:e6:04:23:68:d1:20:07:54:d0:9d:
                    d5:7b:40:49:98:15:18:d3:9c:b3:a1:0d:d8:28:9a:
                    e9:b8:97:23:ab:e0:e9:08:0f:17:93:82:1c:d6:3a:
                    29:8c:85:94:19:4a:5d:d9:5a:50:7f:34:fc:7d:97:
                    5d:df:65:98:b5:3d:c7:60:88:58:e4:44:34:79:5f:
                    44:87:3e:ac:14:a0:ec:e5:c7:58:92:4a:8a:5e:05:
                    19:91:b1:99:2a:19:4b:8e:eb:38:76:21:75:06:4e:
                    9b:dd:9f:37:70:7f:16:cd:5f:d4:c4:90:31:43:ab:
                    20:f0:ec:8c:d7:3c:3d:99:66:73:6b:e2:11:07:b8:
                    f4:d9:bf:d6:32:d1:be:56:fb:a5:e7:0b:e1:7d:f7:
                    00:b7:b3:4f:e2:96:65:89:19:e8:ea:c5:15:63:14:
                    6f:0f:ed:c3:a1:48:64:6c:2c:56:4f:f7:d3:e8:7c:
                    b1:08:8f:b3:21:11:85:e1:f5:1c:97:42:21:93:4c:
                    44:7e:dd:f2:ec:a1:e3:24:71:ea:04:8e:e5:ce:4b:
                    03:63:40:ef:52:5e:53:a1:d1:23:fe:e3:ff:de:c5:
                    75:8c:0a:5f:12:b3:3e:9a:6c:ce:60:14:3a:3c:f8:
                    67:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                71:51:97:7E:90:A1:D4:A5:25:8D:97:C7:25:EC:DE:2F:C9:78:D2:53
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/e5dbd103-f55d-48bc-bcdd-bddd2f9a82ac/a88d6f0d-6f2a-30fe-924b-1062d69f740d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/e5dbd103-f55d-48bc-bcdd-bddd2f9a82ac/e5dbd103-f55d-48bc-bcdd-bddd2f9a82ac.crl

            X509v3 Authority Key Identifier:
                keyid:8A:B9:95:79:E4:34:18:36:BE:94:98:E6:13:4F:FE:DC:1E:59:71:FF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/e5dbd103-f55d-48bc-bcdd-bddd2f9a82ac.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  142.202.124.0/22
                  192.171.112.0/23
                IPv6:
                  2605:8a40::/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2f:36:33:8f:5b:21:94:9a:54:de:f9:33:13:76:27:79:5f:d0:
         42:58:b0:e0:3f:eb:18:4e:cb:c9:0b:ba:44:f9:93:7b:3d:1e:
         c5:1e:c0:0b:cc:8d:e3:7b:f0:14:85:3a:29:97:60:cd:02:72:
         ba:90:df:aa:a0:e0:f7:4e:d6:02:c3:71:e8:19:bb:08:d5:52:
         da:74:c5:38:8b:9d:44:62:58:ae:c7:dc:20:a7:8b:42:cc:82:
         27:5f:f5:af:9a:65:e0:d4:25:8b:49:15:18:e7:ad:76:1c:66:
         3d:43:07:88:a8:ec:fc:41:3a:fa:1c:41:6d:01:2f:02:9b:45:
         83:bd:f7:51:b2:29:27:af:20:ec:b8:4d:a3:74:39:f0:79:1d:
         0f:52:32:93:3b:4b:00:b9:11:96:a5:75:5a:01:dc:2f:f2:54:
         cc:2d:60:2e:84:cd:01:b1:7a:ed:64:a1:fe:81:1c:35:9f:54:
         2a:de:88:e2:31:8c:b9:a4:b5:25:48:f3:66:a2:6f:7c:09:e7:
         f0:c0:72:53:5f:be:ff:12:69:77:03:98:f1:bc:64:a3:f5:2e:
         bf:c6:95:45:31:4c:67:8f:25:17:f0:48:52:5f:e8:ea:07:9c:
         47:cb:a9:94:44:7e:ec:c0:55:1c:bc:d5:5e:75:81:ce:88:2d:
         26:22:c5:21
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 08:46:41 2026 by rpki-client