Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9/88a2969f-7abc-3c1c-af89-6b29fda18bf6.roa
File:                     88a2969f-7abc-3c1c-af89-6b29fda18bf6.roa (raw, json)
Hash identifier:          mu8gOVCPjLoxGZoobARQDEIW8XskFLyvQAhjvxDQap0=
Subject key identifier:   82:E1:25:D5:0C:C3:04:A0:D0:D5:E5:88:8E:C5:94:68:37:CF:F6:9F
Certificate issuer:       /CN=a340834d-d728-405c-95f1-caa6810aa7d9
Certificate serial:       010D0C9F4328584EF181FF0E255CF34FC31162F0
Authority key identifier: 83:C6:E8:CD:02:CF:5F:C7:0A:7E:12:DB:6C:32:83:E3:4C:35:F7:21
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9/88a2969f-7abc-3c1c-af89-6b29fda18bf6.roa
Signing time:             Mon 24 Aug 2026 13:00:12 +0000
ROA not before:           Mon 24 Aug 2026 13:00:12 +0000
ROA not after:            Sun 22 Nov 2026 14:00:12 +0000
asID:                     59210
IP address blocks:        131.153.48.0/22 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9/a340834d-d728-405c-95f1-caa6810aa7d9.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9/a340834d-d728-405c-95f1-caa6810aa7d9.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 27 Sep 2026 17:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:f1:81:ff:0e:25:5c:f3:4f:c3:11:62:f0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a340834d-d728-405c-95f1-caa6810aa7d9
        Validity
            Not Before: Aug 24 13:00:12 2026 GMT
            Not After : Nov 22 14:00:12 2026 GMT
        Subject: CN=d3afb3de-51a5-4a16-9199-187a165e034e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:db:f0:73:06:82:ba:42:a6:e1:a5:5a:57:09:
                    79:87:36:ed:5b:9c:36:03:30:60:65:16:a7:09:a6:
                    22:62:39:e9:57:c8:15:a5:8e:34:e8:bc:f1:92:ff:
                    d6:a0:34:17:97:ae:be:76:e3:9c:57:a4:71:5f:cc:
                    e3:78:99:de:1a:96:32:7f:ab:cb:18:8a:4d:32:08:
                    9c:c8:1a:d1:74:7b:eb:77:4c:ec:39:2c:f5:13:c3:
                    99:ae:dd:f0:f0:3d:40:a0:10:84:c3:51:e6:04:04:
                    2b:da:3a:28:6b:40:aa:d9:b1:ae:cf:25:10:3e:3c:
                    be:c6:6b:25:53:41:78:c2:ff:17:eb:d0:03:0a:65:
                    a8:da:b0:ae:45:77:ba:f9:94:a8:4b:05:90:01:9b:
                    63:49:4f:78:61:6b:03:d6:14:72:10:35:77:7e:88:
                    60:17:a5:73:e4:8f:ea:7e:00:d0:c9:1e:42:f8:d2:
                    7e:e5:26:3f:c2:16:11:d1:06:d5:ef:dd:65:93:98:
                    3d:60:00:ab:fc:48:39:ce:56:99:44:f8:37:b1:c2:
                    da:9a:c7:bb:50:48:36:82:de:80:64:3e:0b:4a:87:
                    df:5e:45:ba:48:42:56:61:3c:9d:ca:47:7a:ed:f0:
                    29:34:85:1a:76:d8:f8:aa:32:fb:4d:10:5e:62:89:
                    e2:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                82:E1:25:D5:0C:C3:04:A0:D0:D5:E5:88:8E:C5:94:68:37:CF:F6:9F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9/88a2969f-7abc-3c1c-af89-6b29fda18bf6.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9/a340834d-d728-405c-95f1-caa6810aa7d9.crl

            X509v3 Authority Key Identifier:
                keyid:83:C6:E8:CD:02:CF:5F:C7:0A:7E:12:DB:6C:32:83:E3:4C:35:F7:21

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  131.153.48.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         64:5e:8e:05:70:88:66:24:4f:84:0b:bf:7c:76:17:5d:4c:4b:
         a4:a9:0e:a6:2a:e8:09:82:eb:a6:16:d0:e0:e7:27:d5:0c:a5:
         c9:75:83:04:0e:1b:14:5d:4c:1e:71:bc:0f:c5:06:26:52:eb:
         86:90:ac:9b:fd:27:c0:b8:64:3f:47:8c:ed:9a:7f:77:d7:21:
         49:2f:dd:35:2b:52:00:fc:45:9f:37:de:c0:b0:7c:ad:b7:3e:
         9a:90:ab:94:ef:dc:02:4a:43:9a:f9:9e:10:c0:2d:48:20:6d:
         c1:16:99:52:58:2b:a8:89:f8:68:e9:05:05:e9:5b:ba:64:c2:
         67:7f:9a:5a:ef:6a:4c:4a:7e:97:75:3e:a2:10:ab:9a:8b:86:
         9e:d2:ac:93:eb:de:4f:b6:10:86:0f:1e:77:ac:3f:23:d0:bd:
         08:61:50:81:1a:63:83:31:71:53:d8:b8:30:8a:12:d3:0f:35:
         c2:d8:a6:6d:fe:80:24:88:42:5e:22:93:36:6f:cd:94:8b:7d:
         cc:e0:36:aa:6c:2f:f9:a9:61:f2:a8:29:2a:34:69:28:ff:de:
         15:af:64:71:78:fb:e0:41:28:5b:54:55:31:c5:6a:7e:db:2e:
         b4:9d:3d:f8:47:55:9e:ef:64:54:76:97:7d:13:fc:db:f9:89:
         3f:f7:59:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 25 22:28:42 2026 by rpki-client