Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/88db2ec8-651c-4bdc-bf38-97fe38702609/80f80673-82b0-3880-8bfe-1f7cd6d0251e.roa
File:                     80f80673-82b0-3880-8bfe-1f7cd6d0251e.roa (raw, json)
Hash identifier:          Upn1ear+uI6SpMGFJoU+O1hzBeR3kID+pTgM+8/xKjk=
Subject key identifier:   19:50:72:AE:10:AC:B4:CA:8F:3D:05:B3:72:E5:79:86:EC:4A:8F:7C
Certificate issuer:       /CN=88db2ec8-651c-4bdc-bf38-97fe38702609
Certificate serial:       010D0C9F4328584E5D14AFF9D12B162BC9676D20
Authority key identifier: 78:E5:8B:03:25:A9:5A:F6:BF:DD:70:79:BD:52:50:E6:03:FE:B0:00
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/88db2ec8-651c-4bdc-bf38-97fe38702609.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/88db2ec8-651c-4bdc-bf38-97fe38702609/80f80673-82b0-3880-8bfe-1f7cd6d0251e.roa
Signing time:             Thu 02 Jul 2026 09:00:12 +0000
ROA not before:           Thu 02 Jul 2026 09:00:12 +0000
ROA not after:            Wed 30 Sep 2026 09:00:12 +0000
asID:                     6079
IP address blocks:        121.91.208.0/20 maxlen: 24
                          121.91.224.0/19 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/88db2ec8-651c-4bdc-bf38-97fe38702609/88db2ec8-651c-4bdc-bf38-97fe38702609.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/88db2ec8-651c-4bdc-bf38-97fe38702609/88db2ec8-651c-4bdc-bf38-97fe38702609.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/88db2ec8-651c-4bdc-bf38-97fe38702609.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 26 Jul 2026 05:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:5d:14:af:f9:d1:2b:16:2b:c9:67:6d:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=88db2ec8-651c-4bdc-bf38-97fe38702609
        Validity
            Not Before: Jul  2 09:00:12 2026 GMT
            Not After : Sep 30 09:00:12 2026 GMT
        Subject: CN=06ac3e52-3900-47ba-b803-b37b6d542481
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:86:aa:4b:86:13:e9:67:8d:3f:f5:6e:1c:1b:a8:
                    c3:70:51:4a:ab:21:be:bb:4b:48:fe:13:03:36:cc:
                    94:69:f4:a0:26:ac:e4:27:7a:e4:69:f8:05:f0:a3:
                    78:c0:d1:20:5f:c1:2c:2e:42:d6:b2:59:e8:37:ce:
                    dc:b1:4a:b1:5d:f4:a7:b3:a3:b8:69:cf:01:5d:02:
                    5e:10:c5:c1:36:df:73:3f:94:ea:78:8b:f1:4c:87:
                    76:a9:94:06:b6:ad:b6:9f:49:66:f6:c9:02:03:0c:
                    59:f8:e4:46:c0:f7:2a:a3:c7:34:59:58:dc:26:06:
                    bd:91:44:38:66:4c:60:e9:87:7d:ed:26:08:5b:83:
                    b5:50:af:71:38:ec:11:8d:53:fe:93:64:fd:87:f6:
                    45:04:93:77:4a:7c:e0:cd:f4:c7:25:ba:6c:c9:4d:
                    7a:2b:c0:f4:6c:78:d7:82:d6:ff:64:a7:1e:ec:ae:
                    72:c3:f6:f9:b8:9a:02:91:2a:13:e1:da:9a:94:1e:
                    0c:90:61:d7:f6:45:e6:75:31:77:7d:e3:5f:fd:fc:
                    55:2e:56:a9:57:af:39:a5:c7:50:3f:fe:d3:31:da:
                    5b:19:0d:34:e0:86:18:c9:17:b2:e6:94:af:53:6d:
                    54:bd:8a:94:a7:4e:22:85:f3:54:b4:2d:74:a0:e9:
                    c6:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                19:50:72:AE:10:AC:B4:CA:8F:3D:05:B3:72:E5:79:86:EC:4A:8F:7C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/88db2ec8-651c-4bdc-bf38-97fe38702609/80f80673-82b0-3880-8bfe-1f7cd6d0251e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/88db2ec8-651c-4bdc-bf38-97fe38702609/88db2ec8-651c-4bdc-bf38-97fe38702609.crl

            X509v3 Authority Key Identifier:
                keyid:78:E5:8B:03:25:A9:5A:F6:BF:DD:70:79:BD:52:50:E6:03:FE:B0:00

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/88db2ec8-651c-4bdc-bf38-97fe38702609.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  121.91.208.0-121.91.255.255

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2b:56:b2:bb:39:ca:19:43:66:09:02:00:3e:1d:9e:98:72:49:
         45:a3:1a:84:09:4d:88:d3:a4:be:24:30:d4:83:39:61:b6:af:
         da:69:d1:95:8a:a1:9c:d5:ba:6d:97:b3:ad:e4:a7:50:1b:19:
         81:52:5b:ea:1f:07:04:1a:ab:f3:a5:aa:07:54:bc:ef:ea:fd:
         a1:9d:ed:96:f2:74:f0:30:1f:a5:ea:3b:aa:fc:44:35:6c:4a:
         3c:06:a9:93:86:21:5f:ed:78:b7:7a:db:2f:44:65:72:43:6f:
         0d:fc:57:ae:9b:d0:ee:da:98:fd:54:2b:c2:c3:8d:54:1a:0e:
         3b:d1:4d:e1:09:b1:e6:8a:14:a5:30:a7:86:7c:fc:b6:9c:6f:
         67:66:f6:03:3f:67:ef:f8:10:5e:a9:c5:99:76:7d:c9:16:c2:
         5d:cc:35:ae:62:62:10:22:33:e0:fb:82:cb:d2:fe:24:6d:dc:
         7c:5c:f2:29:44:94:a0:2c:3e:6b:84:e3:73:14:3d:1c:31:8b:
         25:f5:2a:27:8b:c5:3f:26:d7:82:d1:d2:23:75:b8:ef:92:02:
         d6:ec:e4:0e:05:24:27:86:59:78:ed:f8:a4:cb:ac:3a:21:a0:
         ec:98:b3:9b:57:80:3a:d3:ac:6d:70:46:65:ab:9b:59:fb:0b:
         e7:46:63:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 03:53:56 2026 by rpki-client