Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/88e058e6-ff68-4d5d-b7b8-04d1661ec235/6638f874-6d79-393c-8793-4fb63bc1f4dc.roa
File:                     6638f874-6d79-393c-8793-4fb63bc1f4dc.roa (raw, json)
Hash identifier:          tufA5f9DnrWdv5d5bKfuP/EoQwu0hWMa3JTTaAjj2xw=
Subject key identifier:   D4:6F:03:12:2D:49:C9:F0:2D:E4:1B:6A:94:B8:83:A7:CB:AA:6E:13
Certificate issuer:       /CN=88e058e6-ff68-4d5d-b7b8-04d1661ec235
Certificate serial:       010D0C9F4328584DA97AB3954588394563B5C800
Authority key identifier: 7F:1F:72:F4:8D:1D:D7:6F:87:2D:2D:EA:F2:15:9E:CA:D3:6A:2D:42
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/88e058e6-ff68-4d5d-b7b8-04d1661ec235.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/88e058e6-ff68-4d5d-b7b8-04d1661ec235/6638f874-6d79-393c-8793-4fb63bc1f4dc.roa
Signing time:             Wed 29 Apr 2026 01:00:23 +0000
ROA not before:           Wed 29 Apr 2026 01:00:23 +0000
ROA not after:            Tue 28 Jul 2026 01:00:23 +0000
asID:                     20
IP address blocks:        192.5.53.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/88e058e6-ff68-4d5d-b7b8-04d1661ec235/88e058e6-ff68-4d5d-b7b8-04d1661ec235.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/88e058e6-ff68-4d5d-b7b8-04d1661ec235/88e058e6-ff68-4d5d-b7b8-04d1661ec235.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/88e058e6-ff68-4d5d-b7b8-04d1661ec235.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 14 May 2026 17:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:a9:7a:b3:95:45:88:39:45:63:b5:c8:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=88e058e6-ff68-4d5d-b7b8-04d1661ec235
        Validity
            Not Before: Apr 29 01:00:23 2026 GMT
            Not After : Jul 28 01:00:23 2026 GMT
        Subject: CN=e38a0d5e-2425-4dab-ba32-4429a648f9d1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:1f:02:59:51:a4:4d:25:e5:0c:62:52:3d:8c:
                    b5:29:be:4c:88:03:63:61:7c:6c:f6:09:ad:d4:03:
                    78:78:6e:b7:c7:8b:7c:0b:f2:ef:7d:0a:06:fa:78:
                    30:97:f3:58:f9:97:41:97:fc:15:49:75:3a:3d:6c:
                    e3:6e:ff:61:a1:36:35:b8:6d:df:70:b9:5f:2f:00:
                    56:00:37:c0:44:5b:13:67:1e:b3:2c:a9:a3:80:e2:
                    ca:3d:d3:a6:89:35:a9:67:d4:68:07:ee:db:20:0d:
                    d2:d3:fb:e3:6a:a2:98:74:18:ab:23:bd:c6:ee:7b:
                    13:19:6f:03:ff:50:ee:46:b8:2a:41:6e:06:87:75:
                    f9:3d:74:e3:4f:38:70:30:a3:82:28:aa:1f:4f:c5:
                    6a:8c:22:6e:eb:91:48:8f:4b:31:81:2b:1a:2a:9b:
                    f6:12:61:03:f8:65:b9:5e:b8:df:ea:15:7f:1b:c8:
                    56:97:da:60:1c:aa:c9:52:89:d6:b9:10:2e:0d:24:
                    b1:20:90:64:39:c2:ce:67:dc:6a:da:a3:84:96:81:
                    05:0b:f0:cf:02:e9:96:73:f7:97:e3:2d:01:56:e8:
                    e2:c9:70:f5:cd:ef:fe:d0:9c:ed:ce:2f:90:54:c3:
                    ae:74:66:77:b6:55:ac:d5:a8:2c:a4:f0:19:8b:c9:
                    5e:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D4:6F:03:12:2D:49:C9:F0:2D:E4:1B:6A:94:B8:83:A7:CB:AA:6E:13
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/88e058e6-ff68-4d5d-b7b8-04d1661ec235/6638f874-6d79-393c-8793-4fb63bc1f4dc.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/88e058e6-ff68-4d5d-b7b8-04d1661ec235/88e058e6-ff68-4d5d-b7b8-04d1661ec235.crl

            X509v3 Authority Key Identifier:
                keyid:7F:1F:72:F4:8D:1D:D7:6F:87:2D:2D:EA:F2:15:9E:CA:D3:6A:2D:42

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/88e058e6-ff68-4d5d-b7b8-04d1661ec235.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.5.53.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1c:5a:5e:2f:3b:4b:4a:93:09:9e:fc:d5:fd:b9:0a:b9:6e:3b:
         7a:29:bc:e0:d7:9e:a2:4e:22:f6:78:4a:09:fe:e8:0e:85:c5:
         3c:0c:4e:a5:29:16:13:39:95:19:3d:a6:d9:57:e7:af:a6:0e:
         a7:ec:07:bb:e2:52:45:40:23:d4:34:60:07:00:06:8b:4f:14:
         81:de:86:e6:3b:d5:07:57:0f:ec:02:6b:51:62:d6:bd:09:1b:
         a0:d6:e2:1b:0a:e4:75:9f:c5:c9:a0:76:38:2d:5f:c0:ba:b9:
         e5:6d:a8:e0:fc:d3:fe:61:8d:21:7d:89:df:fd:e3:00:75:e3:
         53:f0:53:e7:07:8e:dc:63:f1:82:f6:bc:d9:b2:67:b1:dc:74:
         59:01:a1:5b:6f:8f:06:b6:27:85:a4:4b:9f:01:27:1e:e0:3e:
         b0:e5:c0:f1:ef:bd:db:ca:ff:43:c4:57:b4:30:93:32:24:a2:
         ac:35:52:67:45:6b:ee:52:dc:7c:f6:e0:70:28:bd:f5:90:d1:
         3b:a6:ec:42:bd:83:b5:1b:57:bd:27:b9:d0:cb:99:87:51:a6:
         1b:98:27:31:45:51:c0:0b:d5:ed:fd:19:4b:ea:f7:66:54:09:
         be:e5:4f:78:9e:20:1e:87:83:7d:55:df:1e:78:63:3d:24:3c:
         da:1d:35:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 12:16:45 2026 by rpki-client