Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/88ab4e91-e06e-4a0d-9b7e-99559f17fa2b/b97f6a94-daae-3a7c-bc8c-ba9525de39cd.roa
File:                     b97f6a94-daae-3a7c-bc8c-ba9525de39cd.roa (raw, json)
Hash identifier:          hGjcfSOW5Ay5I3yQF5W8mZwRjg8r8J0JCbi4oRsjqiU=
Subject key identifier:   D7:48:C7:6F:96:8C:25:05:05:C4:7D:24:20:E8:C0:7F:C3:F3:08:DD
Certificate issuer:       /CN=88ab4e91-e06e-4a0d-9b7e-99559f17fa2b
Certificate serial:       010D0C9F4328584DA11AEB11398F3FA792C8AC60
Authority key identifier: 30:F3:7D:73:28:DE:5B:F8:A8:C9:89:6B:F2:3E:C1:42:A0:E9:EC:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/88ab4e91-e06e-4a0d-9b7e-99559f17fa2b.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/88ab4e91-e06e-4a0d-9b7e-99559f17fa2b/b97f6a94-daae-3a7c-bc8c-ba9525de39cd.roa
Signing time:             Sun 26 Apr 2026 01:00:25 +0000
ROA not before:           Sun 26 Apr 2026 01:00:25 +0000
ROA not after:            Sat 25 Jul 2026 01:00:25 +0000
asID:                     393278
IP address blocks:        64.45.168.0/23 maxlen: 24
                          72.46.92.0/22 maxlen: 24
                          141.193.192.0/23 maxlen: 24
                          152.117.48.0/20 maxlen: 24
                          208.79.112.0/22 maxlen: 24
                          2605:33c0::/32 maxlen: 64
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/88ab4e91-e06e-4a0d-9b7e-99559f17fa2b/88ab4e91-e06e-4a0d-9b7e-99559f17fa2b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/88ab4e91-e06e-4a0d-9b7e-99559f17fa2b/88ab4e91-e06e-4a0d-9b7e-99559f17fa2b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/88ab4e91-e06e-4a0d-9b7e-99559f17fa2b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 14 May 2026 17:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:a1:1a:eb:11:39:8f:3f:a7:92:c8:ac:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=88ab4e91-e06e-4a0d-9b7e-99559f17fa2b
        Validity
            Not Before: Apr 26 01:00:25 2026 GMT
            Not After : Jul 25 01:00:25 2026 GMT
        Subject: CN=336f1994-cfc6-4552-8b10-0aeed22b647b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:e6:c8:f3:1f:b5:16:c7:78:da:3b:b7:11:bc:
                    0a:7b:63:ab:6e:ab:19:fe:8b:7d:04:7c:56:e2:5f:
                    5b:0a:e3:34:a7:b5:73:c6:ec:4e:85:0b:cb:65:7f:
                    b7:2e:78:30:35:e3:5a:96:eb:7a:de:fb:30:90:64:
                    5d:76:b7:a1:ae:04:2d:fd:62:e9:9e:6f:1f:7a:67:
                    e1:43:06:92:80:11:24:b3:08:d5:4d:92:26:82:e1:
                    50:48:b4:94:a2:45:d7:0d:34:a4:ff:ff:01:57:a1:
                    79:4a:5f:12:90:50:22:f5:4f:97:2d:72:7b:15:95:
                    2f:c6:a5:4c:03:eb:95:0d:78:ac:16:e6:b6:4a:07:
                    25:d2:d5:1f:79:d4:8c:18:0c:cd:c0:23:2a:ed:60:
                    da:44:b3:c8:9a:9e:42:4b:00:9f:7b:8e:b5:17:8a:
                    ce:1e:cf:38:c5:77:61:98:3b:0f:f2:ed:ea:a7:01:
                    c7:03:eb:17:a3:12:0a:95:bd:84:62:1a:a3:13:84:
                    5e:cc:ce:29:76:01:6b:4b:ca:7e:69:a4:d9:37:ff:
                    2c:a2:63:5e:99:af:80:49:dc:11:af:6a:86:6c:f2:
                    25:78:ef:ee:4c:cb:27:59:ed:02:fb:7a:44:5a:81:
                    ca:b6:81:29:32:8d:5e:f1:85:a4:ed:c0:cf:88:54:
                    1c:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D7:48:C7:6F:96:8C:25:05:05:C4:7D:24:20:E8:C0:7F:C3:F3:08:DD
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/88ab4e91-e06e-4a0d-9b7e-99559f17fa2b/b97f6a94-daae-3a7c-bc8c-ba9525de39cd.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/88ab4e91-e06e-4a0d-9b7e-99559f17fa2b/88ab4e91-e06e-4a0d-9b7e-99559f17fa2b.crl

            X509v3 Authority Key Identifier:
                keyid:30:F3:7D:73:28:DE:5B:F8:A8:C9:89:6B:F2:3E:C1:42:A0:E9:EC:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/88ab4e91-e06e-4a0d-9b7e-99559f17fa2b.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  64.45.168.0/23
                  72.46.92.0/22
                  141.193.192.0/23
                  152.117.48.0/20
                  208.79.112.0/22
                IPv6:
                  2605:33c0::/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6a:ac:4e:a2:23:4d:3a:89:8d:7f:fa:c5:da:c7:a9:5f:7d:f1:
         c9:b9:e5:77:b9:a4:7d:3d:83:0c:44:90:19:bf:88:0c:9c:95:
         8f:00:54:28:46:45:ac:b3:9d:4a:a5:fd:22:2a:a5:81:58:13:
         32:4f:64:bb:ea:7a:41:56:36:39:12:b5:41:21:10:6e:a8:5d:
         9b:15:f1:73:28:3c:43:2b:df:71:84:9e:93:31:ba:3e:14:c4:
         56:50:3f:f1:c2:32:78:0a:54:08:86:0a:ef:9d:66:d5:a5:00:
         f4:b1:ab:4e:f4:75:f2:ba:ab:22:e9:66:50:38:c1:1f:e3:14:
         08:ff:a5:31:51:ef:1a:85:85:3b:a1:83:a9:5a:5d:71:1b:64:
         1e:76:f5:a2:76:88:c1:a3:85:b5:9b:2e:bf:19:8b:93:40:db:
         32:99:81:3e:c6:3b:67:cc:31:4f:f7:b0:2a:31:f7:75:e2:39:
         da:5b:fe:13:ba:83:41:93:ab:70:e1:46:33:fe:c7:9a:3c:e1:
         98:dc:95:d6:bc:d9:03:a9:f1:6f:03:68:79:35:b3:78:3d:45:
         ba:3e:e1:48:9b:fe:ce:51:4c:b9:52:ba:d5:d0:82:31:9c:00:
         de:dc:bc:00:9e:10:5b:06:ee:63:81:8e:a7:81:50:d1:83:b4:
         dd:8f:dd:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 12 21:50:42 2026 by rpki-client