Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/88c44af4-f264-3f2d-9cdf-49b94251ba1e.roa
File:                     88c44af4-f264-3f2d-9cdf-49b94251ba1e.roa (raw, json)
Hash identifier:          F5hWsnTmfhY/yo9DWMqtTvD+Ccgwh+n2G62xVj8eKc4=
Subject key identifier:   9B:27:84:39:4E:0F:4D:78:EF:30:27:AB:FE:34:3B:3A:F3:0D:86:DC
Certificate issuer:       /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45
Certificate serial:       010D0C9F4328584DC29AF933D07609F01CA91D80
Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/88c44af4-f264-3f2d-9cdf-49b94251ba1e.roa
Signing time:             Fri 08 May 2026 01:00:24 +0000
ROA not before:           Fri 08 May 2026 01:00:24 +0000
ROA not after:            Thu 06 Aug 2026 01:00:24 +0000
asID:                     20431
IP address blocks:        2620:74:2c::30/128 maxlen: 128
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 14 May 2026 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:c2:9a:f9:33:d0:76:09:f0:1c:a9:1d:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45
        Validity
            Not Before: May  8 01:00:24 2026 GMT
            Not After : Aug  6 01:00:24 2026 GMT
        Subject: CN=5354744c-4588-4414-9d2d-ff13da5d12e2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:82:1d:ea:00:b7:38:65:f9:d9:e8:be:4b:cd:4e:
                    06:40:64:eb:c8:8d:68:1c:40:b6:49:3c:bc:e7:d9:
                    5a:ad:e6:a2:1a:6b:2c:8b:b3:3c:bc:0e:6a:ef:72:
                    57:f4:2d:c2:fa:b2:59:a1:3e:e3:f0:e3:03:aa:1e:
                    60:b1:2a:2b:27:ab:be:72:6e:db:93:6e:bf:4b:5a:
                    1b:dc:96:d5:ff:e2:ac:2b:51:d3:af:02:20:60:59:
                    ad:04:c4:b0:b5:44:7a:54:98:a1:e7:65:7e:ab:5d:
                    3b:6b:ef:88:9b:f4:78:e4:f8:69:79:b4:4f:f1:4d:
                    ab:cc:00:85:e9:b6:ef:62:12:6d:7f:ca:e1:b0:cf:
                    f0:93:14:d0:93:8c:e3:4f:78:74:df:20:3c:5c:e4:
                    81:da:05:80:48:b6:5b:d4:6f:80:c5:50:05:35:f5:
                    43:eb:1c:a9:d6:da:7b:94:ed:79:4a:68:fc:a4:23:
                    5e:04:ef:b2:44:d1:8c:e7:2b:54:08:3a:90:47:6b:
                    bf:7d:c5:17:bd:91:a8:b7:7f:ad:c9:c0:25:7c:ba:
                    27:27:0b:bf:bf:ca:49:69:54:c6:0b:0a:a0:b1:cf:
                    67:00:c9:29:79:60:60:7e:40:d1:bf:09:56:45:c6:
                    18:9a:e2:f9:8a:fd:38:72:9a:6f:d5:e7:ab:63:c9:
                    61:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9B:27:84:39:4E:0F:4D:78:EF:30:27:AB:FE:34:3B:3A:F3:0D:86:DC
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/88c44af4-f264-3f2d-9cdf-49b94251ba1e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl

            X509v3 Authority Key Identifier:
                keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2620:74:2c:0:0:0:0:30/128

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1a:39:ee:0e:ec:85:6d:ba:55:25:12:67:73:e4:2f:75:92:70:
         72:65:3d:26:da:65:02:1d:ab:6d:d5:93:88:15:58:bb:c8:65:
         cf:30:02:3d:f6:c1:c9:90:f1:a9:32:94:ed:f0:38:6b:1c:c2:
         37:06:41:21:55:52:f4:f1:53:92:c8:b0:89:02:00:d0:68:6f:
         c1:0e:58:ce:f9:b6:cb:43:09:c6:2a:92:d6:4b:ea:12:58:46:
         8b:7a:ee:f1:ea:e9:3b:a2:b4:a2:14:e1:aa:aa:36:bc:87:3b:
         40:0e:0a:d9:23:13:f2:ed:29:fe:84:85:42:1c:6f:4e:5d:d9:
         90:fe:65:ea:43:b8:93:23:52:32:34:b1:d7:87:7a:cc:6d:49:
         9a:a5:55:62:6a:d4:d8:c0:26:3c:88:a2:c1:9c:bf:ae:c7:eb:
         b6:cd:ad:02:8d:84:43:94:70:f8:85:cc:04:b0:29:f4:58:5c:
         1e:4d:67:b7:40:3e:35:5a:fe:96:35:7b:92:ec:e4:39:e0:0d:
         7c:4d:e7:2c:d5:52:fb:73:5d:1f:7e:27:8f:c7:d4:fa:17:48:
         43:17:55:d3:9e:3f:9d:64:19:fd:d1:3d:d6:b4:76:04:92:51:
         3b:94:3a:7e:8f:66:bc:9b:bc:f7:89:a2:2f:b7:ad:b0:e7:b6:
         25:e6:22:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 07:24:54 2026 by rpki-client