Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/88e1646b-e1b3-42e7-8591-3a57fd436369/e90d9b34-0e52-3478-9736-6aea0ceacb55.roa
File:                     e90d9b34-0e52-3478-9736-6aea0ceacb55.roa (raw, json)
Hash identifier:          /izBn88By3wvc+k14M+GmmVHroUY2bVZFSxHGDeoSW4=
Subject key identifier:   E1:80:3E:F7:0C:42:C4:51:53:AB:F7:D2:9A:CE:57:84:1B:7C:82:4D
Certificate issuer:       /CN=88e1646b-e1b3-42e7-8591-3a57fd436369
Certificate serial:       010D0C9F4328584D67DFC66322F5C20DA7BC1A80
Authority key identifier: BA:43:23:72:BB:F7:97:E5:F2:B4:13:EB:EC:BF:20:32:5C:2D:85:99
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/88e1646b-e1b3-42e7-8591-3a57fd436369.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/88e1646b-e1b3-42e7-8591-3a57fd436369/e90d9b34-0e52-3478-9736-6aea0ceacb55.roa
Signing time:             Sun 05 Apr 2026 13:00:31 +0000
ROA not before:           Sun 05 Apr 2026 13:00:31 +0000
ROA not after:            Sat 04 Jul 2026 13:00:31 +0000
asID:                     27316
IP address blocks:        216.159.78.0/23 maxlen: 24
                          216.159.80.0/23 maxlen: 24
                          216.159.82.0/24 maxlen: 24
                          216.159.176.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/88e1646b-e1b3-42e7-8591-3a57fd436369/88e1646b-e1b3-42e7-8591-3a57fd436369.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/88e1646b-e1b3-42e7-8591-3a57fd436369/88e1646b-e1b3-42e7-8591-3a57fd436369.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/88e1646b-e1b3-42e7-8591-3a57fd436369.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 08 Apr 2026 15:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:67:df:c6:63:22:f5:c2:0d:a7:bc:1a:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=88e1646b-e1b3-42e7-8591-3a57fd436369
        Validity
            Not Before: Apr  5 13:00:31 2026 GMT
            Not After : Jul  4 13:00:31 2026 GMT
        Subject: CN=81a68726-91f1-4dd8-a8a8-0eda211d1792
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:38:d5:28:55:94:3c:91:2d:fc:6e:c1:03:93:
                    b7:1f:0c:41:28:bf:d6:55:8b:19:d0:58:fe:1f:68:
                    83:e6:d6:59:87:94:33:c1:fd:a8:f5:77:42:11:79:
                    c9:45:9e:67:09:12:c5:bc:20:39:0a:47:82:36:00:
                    ec:8f:02:33:5e:81:a5:d6:17:a7:4b:d6:f6:04:12:
                    aa:e6:82:07:36:ce:eb:62:c5:a9:c6:08:60:d2:f9:
                    10:43:24:fa:02:69:82:78:bf:ca:31:af:35:09:cb:
                    29:1b:bd:c1:4f:04:ff:fb:92:1c:e5:e3:36:30:8d:
                    06:f5:44:51:a9:37:80:39:ff:32:9a:f1:47:3f:cb:
                    bb:39:b6:16:8d:ac:e0:81:e8:d6:d2:52:b4:ad:5e:
                    2a:65:f7:79:2c:a6:39:0e:c5:de:7b:c1:8a:0d:e5:
                    62:d7:c8:29:77:6a:38:43:fe:aa:02:0a:59:33:4a:
                    dc:62:3a:03:75:f4:f3:5f:3b:7d:cd:f0:ad:25:a0:
                    8b:13:a3:df:30:a7:bd:ef:03:51:dc:b2:33:74:81:
                    23:b6:b9:b8:45:05:1a:1f:ea:76:f8:1c:7b:bc:b8:
                    c5:bf:1c:f3:38:a8:28:f9:60:f5:f4:09:fc:cc:31:
                    d5:f4:ab:7f:05:10:5f:b7:4a:91:a7:7a:de:8c:02:
                    8e:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E1:80:3E:F7:0C:42:C4:51:53:AB:F7:D2:9A:CE:57:84:1B:7C:82:4D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/88e1646b-e1b3-42e7-8591-3a57fd436369/e90d9b34-0e52-3478-9736-6aea0ceacb55.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/88e1646b-e1b3-42e7-8591-3a57fd436369/88e1646b-e1b3-42e7-8591-3a57fd436369.crl

            X509v3 Authority Key Identifier:
                keyid:BA:43:23:72:BB:F7:97:E5:F2:B4:13:EB:EC:BF:20:32:5C:2D:85:99

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/88e1646b-e1b3-42e7-8591-3a57fd436369.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  216.159.78.0-216.159.82.255
                  216.159.176.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         b5:63:ce:f2:80:d9:13:47:ca:51:45:37:04:cf:6b:d3:5c:cc:
         45:44:25:cc:ca:39:1b:f1:4c:c6:c9:1f:ce:6a:83:33:12:5e:
         7b:94:0b:ea:7c:93:a1:bb:30:ae:ae:32:cd:f0:53:35:3c:d1:
         f6:4c:bb:dc:5c:a0:a2:89:8f:63:40:c3:f3:ee:4a:0b:b8:a9:
         8d:1e:27:d5:5b:c9:a7:d3:81:2d:3e:8b:67:f2:8f:65:1b:5a:
         9e:58:b1:29:2e:ee:10:58:87:3d:e8:6d:13:47:66:06:11:ec:
         54:97:2d:de:33:9b:1a:ea:90:00:12:c6:f8:8d:1b:87:f1:5b:
         68:58:7c:32:3e:d1:0e:35:e3:3e:fa:fb:85:6f:44:ad:a2:57:
         0a:91:fd:fb:c5:d0:e4:75:20:96:76:09:96:cd:6d:95:bc:d5:
         0e:e1:40:91:b0:fa:7c:42:d5:27:62:f6:2a:57:79:79:bd:55:
         eb:a0:c9:14:17:53:3f:08:34:56:2f:da:a7:15:b3:50:bf:16:
         98:b4:27:b4:af:06:ec:da:21:63:98:6f:96:50:5d:a6:0d:6a:
         42:e6:7a:13:2e:ab:46:d7:00:d1:28:8f:60:88:bf:0d:3d:4d:
         cf:a8:2c:09:21:71:fd:a4:bc:b3:29:41:a3:29:52:ae:40:7a:
         07:b2:39:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 7 16:32:46 2026 by rpki-client