Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/cc9383e4-2c51-4ffd-bfe9-69e9fd6c5b58/88e8ac82-36b4-37a5-b462-616b45ade786.roa
File:                     88e8ac82-36b4-37a5-b462-616b45ade786.roa (raw, json)
Hash identifier:          70zu2ESg2e27EFSq3L8Jhtp3eGKlV4mAgpdp7gHE5xc=
Subject key identifier:   ED:8A:86:D6:63:AA:AD:2B:B2:41:3B:73:57:F2:88:08:4C:B8:64:4D
Certificate issuer:       /CN=cc9383e4-2c51-4ffd-bfe9-69e9fd6c5b58
Certificate serial:       010D0C9F4328584D2A74E94F962F394EAF7F8480
Authority key identifier: 26:D1:9B:B5:02:FD:CB:75:4D:60:A0:BB:6A:8F:47:07:E2:4C:17:3B
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/cc9383e4-2c51-4ffd-bfe9-69e9fd6c5b58.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/cc9383e4-2c51-4ffd-bfe9-69e9fd6c5b58/88e8ac82-36b4-37a5-b462-616b45ade786.roa
Signing time:             Sat 14 Mar 2026 13:00:40 +0000
ROA not before:           Sat 14 Mar 2026 13:00:40 +0000
ROA not after:            Fri 12 Jun 2026 13:00:40 +0000
asID:                     55293
IP address blocks:        216.137.176.0/20 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/cc9383e4-2c51-4ffd-bfe9-69e9fd6c5b58/cc9383e4-2c51-4ffd-bfe9-69e9fd6c5b58.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/cc9383e4-2c51-4ffd-bfe9-69e9fd6c5b58/cc9383e4-2c51-4ffd-bfe9-69e9fd6c5b58.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/cc9383e4-2c51-4ffd-bfe9-69e9fd6c5b58.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 27 Mar 2026 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:2a:74:e9:4f:96:2f:39:4e:af:7f:84:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cc9383e4-2c51-4ffd-bfe9-69e9fd6c5b58
        Validity
            Not Before: Mar 14 13:00:40 2026 GMT
            Not After : Jun 12 13:00:40 2026 GMT
        Subject: CN=e3f25100-3b73-4b3c-8134-71a278e253b2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:d1:02:57:d1:62:7b:3e:10:85:56:fb:2c:30:
                    75:51:d3:a4:c1:f2:b9:e1:f1:69:78:eb:ce:5e:1c:
                    ff:0c:da:be:4b:ea:fc:f1:19:13:fc:bf:ce:c2:9b:
                    55:00:2e:6a:58:b1:db:7d:5d:17:29:bb:18:10:26:
                    42:41:c0:4e:37:12:2f:d2:38:87:8f:8f:11:4a:fd:
                    1f:f3:2e:4c:0d:48:5c:94:4c:35:13:22:69:da:1b:
                    73:31:d9:d7:e4:4b:60:28:8b:ca:d6:07:59:48:86:
                    88:de:e9:7d:16:31:5c:e7:c2:d8:9e:ec:b3:0b:a9:
                    a2:23:be:c7:2a:88:82:6b:f2:dd:f9:82:b5:82:8b:
                    1e:ea:95:00:a7:c8:9e:16:e0:43:ae:45:e6:80:2c:
                    f7:10:3b:62:1d:a1:5b:3e:ef:35:f4:69:e7:e7:e2:
                    46:75:ca:d9:97:71:ea:ce:42:72:63:78:4a:ab:2a:
                    63:da:48:c4:42:99:9d:0e:bd:1d:03:d1:52:b9:9c:
                    70:84:7a:82:07:88:f0:59:db:b9:db:fd:bc:f4:b4:
                    a4:1b:de:c3:5d:e8:50:3a:05:b2:f4:4e:df:3d:1d:
                    53:3f:1b:53:c5:b1:9b:62:a5:e5:ac:f5:98:c9:b3:
                    d0:9f:75:4c:63:b5:d8:cc:6a:78:31:56:f5:f5:e0:
                    96:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                ED:8A:86:D6:63:AA:AD:2B:B2:41:3B:73:57:F2:88:08:4C:B8:64:4D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/cc9383e4-2c51-4ffd-bfe9-69e9fd6c5b58/88e8ac82-36b4-37a5-b462-616b45ade786.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/cc9383e4-2c51-4ffd-bfe9-69e9fd6c5b58/cc9383e4-2c51-4ffd-bfe9-69e9fd6c5b58.crl

            X509v3 Authority Key Identifier:
                keyid:26:D1:9B:B5:02:FD:CB:75:4D:60:A0:BB:6A:8F:47:07:E2:4C:17:3B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/cc9383e4-2c51-4ffd-bfe9-69e9fd6c5b58.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  216.137.176.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a0:d9:e3:12:2c:c7:a4:7f:9d:2d:1d:42:57:b5:4f:4f:cd:39:
         cc:07:8c:2d:ec:70:fe:aa:3c:25:52:c8:2b:49:f2:7a:b9:2a:
         85:47:7e:cd:e4:91:14:f6:57:99:8b:ed:bb:c6:a2:9b:a1:98:
         e2:ad:07:28:ac:9a:8b:bb:fd:55:48:0a:07:0e:26:92:ae:9b:
         1a:83:f2:f2:08:c9:fc:c7:48:d3:43:f6:d5:2e:58:c8:d8:b4:
         9b:53:05:be:10:d0:7f:e7:0a:b5:65:e0:ec:87:66:59:bf:9c:
         d9:3f:7f:09:9f:62:3b:a9:09:94:72:37:82:6f:dd:3e:d1:96:
         f7:ac:a8:49:03:84:77:c7:d4:1e:ca:c2:39:bc:b8:20:46:99:
         83:2e:07:31:42:8f:a7:92:3f:b8:bc:0d:ed:b8:fa:0b:bd:71:
         87:7e:de:3f:2f:d4:9d:95:dd:3a:c0:bb:1a:c2:7d:11:f8:ec:
         a5:06:a0:12:9b:d8:ee:f9:e9:40:5f:c2:8e:78:6c:a5:b9:c2:
         69:5c:90:d7:48:94:bb:20:c6:8b:cc:1a:e3:70:70:47:05:a7:
         fb:20:e6:0c:e7:a5:f4:39:67:ff:a1:c8:7d:a7:c1:e5:76:13:
         51:ae:51:37:68:c1:0c:ed:77:d3:af:71:30:89:96:c2:13:13:
         f7:8e:ec:bd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 16:11:00 2026 by rpki-client