Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/88842878-1050-4df7-822b-ea8ec25db83d/d2e389e3-c6b6-3280-a83d-864f511ff6b9.roa
File:                     d2e389e3-c6b6-3280-a83d-864f511ff6b9.roa (raw, json)
Hash identifier:          YQO3QMkipnnaY6fpfNhFd58bIO7M4KnEZHEpP4EXaf8=
Subject key identifier:   B0:AC:71:5A:3F:B6:0E:CC:50:22:16:F1:08:7C:B0:EA:44:98:D5:F5
Certificate issuer:       /CN=88842878-1050-4df7-822b-ea8ec25db83d
Certificate serial:       010D0C9F4328584E86F4F00C66DB35B36C072700
Authority key identifier: 0A:F4:2F:69:20:F1:AA:D7:6D:67:3C:86:9A:04:C8:80:1E:AD:7D:99
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/88842878-1050-4df7-822b-ea8ec25db83d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/88842878-1050-4df7-822b-ea8ec25db83d/d2e389e3-c6b6-3280-a83d-864f511ff6b9.roa
Signing time:             Fri 17 Jul 2026 09:00:14 +0000
ROA not before:           Fri 17 Jul 2026 09:00:14 +0000
ROA not after:            Thu 15 Oct 2026 09:00:14 +0000
asID:                     2495
IP address blocks:        164.113.88.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/88842878-1050-4df7-822b-ea8ec25db83d/88842878-1050-4df7-822b-ea8ec25db83d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/88842878-1050-4df7-822b-ea8ec25db83d/88842878-1050-4df7-822b-ea8ec25db83d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/88842878-1050-4df7-822b-ea8ec25db83d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 26 Jul 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:86:f4:f0:0c:66:db:35:b3:6c:07:27:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=88842878-1050-4df7-822b-ea8ec25db83d
        Validity
            Not Before: Jul 17 09:00:14 2026 GMT
            Not After : Oct 15 09:00:14 2026 GMT
        Subject: CN=6a1eb70d-abef-4354-b065-d67d1a26117d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8e:aa:38:d3:1a:a4:21:d5:9f:43:c9:78:96:ea:
                    49:44:e7:b9:a1:14:57:de:2d:6f:cd:7a:05:7f:4f:
                    32:83:bf:fd:10:0e:69:e0:df:d3:57:36:84:84:74:
                    6c:c7:0d:d7:dc:43:26:95:99:e1:ca:9d:2e:d8:e9:
                    2d:a2:7d:35:89:cb:99:85:17:fc:e9:51:e6:d4:1e:
                    bc:b7:2e:05:8f:ce:59:59:06:04:84:5f:f5:49:fa:
                    b0:ae:29:3a:82:86:07:cb:1e:d2:e5:0a:ae:ee:50:
                    7c:cd:9d:3e:b7:b0:e4:70:81:e4:c1:f8:ce:bf:e2:
                    01:c4:95:d6:2c:1a:4a:1a:d2:ef:df:05:f4:05:a1:
                    79:56:42:f9:08:f8:19:7c:b0:88:bb:e1:28:e8:9a:
                    e8:25:8d:7f:ef:c4:3f:5a:d5:db:92:2d:78:43:2d:
                    ea:07:2a:53:0c:04:bf:34:d2:11:59:58:82:ec:fc:
                    68:a4:c3:45:c6:7f:ea:47:43:04:41:38:8c:64:f6:
                    5b:84:ac:f2:8d:03:fb:27:03:87:76:18:cf:09:f6:
                    60:23:49:4c:c6:28:bb:df:38:37:ff:5b:cf:be:c2:
                    83:65:51:94:66:d4:c4:c0:d2:34:0e:83:40:45:4e:
                    5a:7c:0d:50:ab:ad:71:12:8a:3e:be:65:c6:c2:1b:
                    08:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B0:AC:71:5A:3F:B6:0E:CC:50:22:16:F1:08:7C:B0:EA:44:98:D5:F5
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/88842878-1050-4df7-822b-ea8ec25db83d/d2e389e3-c6b6-3280-a83d-864f511ff6b9.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/88842878-1050-4df7-822b-ea8ec25db83d/88842878-1050-4df7-822b-ea8ec25db83d.crl

            X509v3 Authority Key Identifier:
                keyid:0A:F4:2F:69:20:F1:AA:D7:6D:67:3C:86:9A:04:C8:80:1E:AD:7D:99

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/88842878-1050-4df7-822b-ea8ec25db83d.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  164.113.88.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         bb:52:e0:57:38:3e:49:a9:05:ec:d4:9a:04:ee:1e:ad:3b:b3:
         bd:bc:ea:a6:3d:39:aa:22:86:ba:e9:b2:4d:8b:eb:e5:4f:50:
         4c:87:86:7f:ed:36:db:e7:50:bf:ef:2c:fb:fa:84:69:36:70:
         8e:61:3a:dd:95:c7:3d:46:62:09:15:63:25:62:de:8e:4b:82:
         05:b7:a3:b3:ca:f1:63:e4:bd:5b:c2:ec:3d:b1:5c:bf:5d:07:
         98:33:ea:fc:8b:1d:10:a6:7e:f4:0f:84:f0:05:43:28:90:32:
         9a:62:b6:85:c5:16:35:a4:8a:d8:93:ac:bb:8a:2f:f1:2a:56:
         e1:77:d4:6b:de:07:47:ce:40:31:49:e2:d2:ff:cb:a4:09:b6:
         ea:ad:e6:e0:28:e0:bc:64:74:bf:1c:e7:79:48:a1:25:0a:87:
         76:55:ee:8b:21:70:14:ce:fe:ab:d1:17:4e:0d:0a:62:8c:0d:
         8d:08:60:af:6c:84:f1:3e:11:46:89:0f:22:f9:f7:a5:d4:1e:
         ec:86:c0:f5:3a:4d:59:63:fa:e8:ce:e9:52:b7:fe:15:26:a4:
         f5:62:fb:ff:d0:da:df:1f:cb:50:05:c6:b3:f3:f9:31:db:03:
         ce:d1:f0:2e:43:73:c4:77:93:ee:55:9d:84:f4:7e:f9:8a:15:
         70:1d:26:05
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 12:53:18 2026 by rpki-client