Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/88db2ec8-651c-4bdc-bf38-97fe38702609/e44dfe4f-2667-34d4-bf61-05659f9c77ad.roa
File:                     e44dfe4f-2667-34d4-bf61-05659f9c77ad.roa (raw, json)
Hash identifier:          9C0Pn3YX9Q/J/q8wcA5sSc8r+csogEyo3CeHAHZJnQU=
Subject key identifier:   EE:0D:B4:67:59:88:C7:2C:42:70:5B:B6:D8:F4:C8:64:9F:DD:64:85
Certificate issuer:       /CN=88db2ec8-651c-4bdc-bf38-97fe38702609
Certificate serial:       010D0C9F4328584E6F3A4D048032ADF981087480
Authority key identifier: 78:E5:8B:03:25:A9:5A:F6:BF:DD:70:79:BD:52:50:E6:03:FE:B0:00
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/88db2ec8-651c-4bdc-bf38-97fe38702609.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/88db2ec8-651c-4bdc-bf38-97fe38702609/e44dfe4f-2667-34d4-bf61-05659f9c77ad.roa
Signing time:             Wed 08 Jul 2026 21:00:12 +0000
ROA not before:           Wed 08 Jul 2026 21:00:12 +0000
ROA not after:            Tue 06 Oct 2026 21:00:12 +0000
asID:                     4637
IP address blocks:        121.91.208.0/20 maxlen: 24
                          121.91.224.0/19 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/88db2ec8-651c-4bdc-bf38-97fe38702609/88db2ec8-651c-4bdc-bf38-97fe38702609.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/88db2ec8-651c-4bdc-bf38-97fe38702609/88db2ec8-651c-4bdc-bf38-97fe38702609.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/88db2ec8-651c-4bdc-bf38-97fe38702609.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 26 Jul 2026 05:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:6f:3a:4d:04:80:32:ad:f9:81:08:74:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=88db2ec8-651c-4bdc-bf38-97fe38702609
        Validity
            Not Before: Jul  8 21:00:12 2026 GMT
            Not After : Oct  6 21:00:12 2026 GMT
        Subject: CN=e1c45927-dd3d-4b6d-8e92-8d6806bef5e5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:9f:f5:70:e4:1e:0d:e0:8a:28:1f:5e:cd:27:
                    f4:73:78:8d:d5:3a:67:2c:9f:ae:c9:0c:76:49:a6:
                    fb:65:cf:74:cb:26:cc:2a:2b:27:29:dc:98:1a:49:
                    36:97:86:23:ec:82:f5:a6:d7:16:5e:f2:91:24:4f:
                    a2:ba:30:b0:06:d0:f9:da:56:a2:a8:cc:f2:83:97:
                    3c:9e:eb:c7:75:36:54:f8:2a:ac:9c:13:ff:e6:9a:
                    47:a3:77:50:c7:1d:39:e7:be:0d:15:bf:44:be:05:
                    db:cf:36:e9:b5:ad:72:01:f0:b6:28:b8:4f:93:6a:
                    77:36:51:9c:be:fe:c7:e1:2d:3d:8f:d2:74:14:f0:
                    57:19:71:27:f0:ab:bb:d9:05:15:fe:d7:0c:aa:2e:
                    f3:46:33:3d:1f:24:e3:d7:bd:88:f3:4d:c1:ec:1f:
                    83:5d:be:cc:72:69:1a:e5:ab:3b:02:68:4d:e4:cc:
                    bf:b2:64:8b:b9:7f:ba:ab:eb:b3:70:64:a7:5d:b4:
                    ee:30:47:e6:96:ce:b6:a5:f8:72:5c:90:9f:b0:1e:
                    dd:dc:67:c7:95:65:09:96:31:73:60:c9:2d:21:1e:
                    93:1f:65:21:9e:48:ca:70:56:01:11:b1:5b:a1:bb:
                    bc:8b:08:fa:a2:be:05:1c:f2:95:a1:27:95:7a:37:
                    34:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EE:0D:B4:67:59:88:C7:2C:42:70:5B:B6:D8:F4:C8:64:9F:DD:64:85
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/88db2ec8-651c-4bdc-bf38-97fe38702609/e44dfe4f-2667-34d4-bf61-05659f9c77ad.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/88db2ec8-651c-4bdc-bf38-97fe38702609/88db2ec8-651c-4bdc-bf38-97fe38702609.crl

            X509v3 Authority Key Identifier:
                keyid:78:E5:8B:03:25:A9:5A:F6:BF:DD:70:79:BD:52:50:E6:03:FE:B0:00

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/88db2ec8-651c-4bdc-bf38-97fe38702609.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  121.91.208.0-121.91.255.255

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         64:53:ec:93:fc:33:86:31:db:3a:a5:31:f1:10:72:c6:2e:b6:
         73:36:5c:14:ef:bf:1a:aa:d0:3e:c1:bc:00:dc:70:74:12:26:
         10:b6:26:3d:fb:48:54:48:bf:bd:8e:1a:18:f3:5b:bd:80:b4:
         0f:90:d0:1c:64:e1:6f:d4:8b:2b:e3:49:f6:14:1f:2c:3c:0a:
         a3:9f:c3:73:42:57:bc:59:8c:3e:85:68:40:13:2b:7c:7e:a4:
         67:c3:d8:fb:51:9d:1f:69:70:d6:da:c8:e5:a6:f6:fd:0b:4b:
         2e:16:73:af:4b:5a:35:59:ad:73:68:b1:d3:a9:4a:bc:6f:5d:
         26:7d:60:c0:ac:c1:16:17:62:20:62:d8:e8:0a:83:3d:94:ac:
         31:4b:9d:bf:93:db:b9:da:af:38:30:01:8c:39:9e:76:15:7b:
         50:63:b9:9e:52:78:10:24:3d:71:0d:d9:2c:4c:61:c6:f9:21:
         c2:ea:c2:18:b4:87:71:be:7e:8f:10:1c:b1:c2:a0:32:e8:75:
         b3:9b:95:6f:6a:c5:9e:51:1d:19:93:a6:fd:df:37:c1:18:44:
         c3:77:7e:be:25:f7:3f:1c:ec:8d:0a:ad:2b:e4:82:0d:fd:98:
         89:a9:b6:50:dc:99:13:16:9c:8e:96:ac:61:75:7a:42:b1:96:
         75:63:ae:01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 06:44:02 2026 by rpki-client