Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7e463b2c-538a-4f93-bfa3-fe1643a77085/88e45ceb-f509-38b6-9aef-25a138621966.roa
File:                     88e45ceb-f509-38b6-9aef-25a138621966.roa (raw, json)
Hash identifier:          EkkyUjLje8m+0G7Y9ha2P5xKNXhErIIVF8U1SmuPN0Y=
Subject key identifier:   2D:28:78:E0:22:CF:3F:00:C0:CA:A2:CD:35:4F:24:20:B4:F5:AA:99
Certificate issuer:       /CN=7e463b2c-538a-4f93-bfa3-fe1643a77085
Certificate serial:       010D0C9F4328584DD4C08469F40071E34923CDC0
Authority key identifier: 29:30:ED:0F:85:A6:01:7A:2F:42:BD:40:9C:E0:C7:90:94:14:17:42
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7e463b2c-538a-4f93-bfa3-fe1643a77085.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7e463b2c-538a-4f93-bfa3-fe1643a77085/88e45ceb-f509-38b6-9aef-25a138621966.roa
Signing time:             Thu 14 May 2026 13:00:31 +0000
ROA not before:           Thu 14 May 2026 13:00:31 +0000
ROA not after:            Wed 12 Aug 2026 13:00:31 +0000
asID:                     11232
IP address blocks:        64.140.176.0/20 maxlen: 20
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7e463b2c-538a-4f93-bfa3-fe1643a77085/7e463b2c-538a-4f93-bfa3-fe1643a77085.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7e463b2c-538a-4f93-bfa3-fe1643a77085/7e463b2c-538a-4f93-bfa3-fe1643a77085.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7e463b2c-538a-4f93-bfa3-fe1643a77085.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 30 May 2026 23:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:d4:c0:84:69:f4:00:71:e3:49:23:cd:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7e463b2c-538a-4f93-bfa3-fe1643a77085
        Validity
            Not Before: May 14 13:00:31 2026 GMT
            Not After : Aug 12 13:00:31 2026 GMT
        Subject: CN=6345eee5-ac93-4ba3-819a-f5d7bf68a3cd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:85:1d:bd:54:ec:3b:c5:5f:49:81:c7:02:59:66:
                    dc:05:e3:46:fb:a8:1a:8d:f0:ee:ba:a8:48:f9:8c:
                    4d:c7:d3:27:2f:52:0d:0e:6c:e4:0f:d1:b3:7e:8c:
                    4b:29:f8:76:87:ed:cb:fc:f2:63:f0:ba:1d:fa:a8:
                    ad:61:f8:4b:ea:87:9a:03:c3:c8:d4:17:40:38:c2:
                    08:56:3d:c8:1d:bb:ce:52:ea:0d:2c:9a:9b:35:f4:
                    c5:83:9c:e9:be:d6:0e:aa:eb:7d:b8:35:32:cc:ff:
                    24:63:17:03:45:28:20:c6:88:09:46:85:3d:85:87:
                    a9:ec:59:d5:1e:f7:27:e4:c2:34:58:68:6c:45:50:
                    f0:74:81:9d:b8:cb:70:c6:9b:a8:c9:46:f9:ec:8e:
                    10:65:c2:e0:3b:dd:09:ba:67:00:ee:2c:78:af:b8:
                    0b:9e:0d:e1:24:fe:da:df:ad:a9:5e:3c:85:30:65:
                    1d:c1:10:c3:d4:08:10:19:bf:db:0f:aa:cd:c6:9b:
                    00:23:d1:fc:f9:2a:14:20:ca:33:a2:8d:75:b2:8e:
                    17:ed:0f:7d:0d:7b:db:00:0e:1c:fc:81:7a:95:c7:
                    b7:1f:ed:81:b8:cb:c4:ca:90:ec:3d:15:53:af:1c:
                    74:6c:87:47:49:67:b8:97:68:bb:a3:52:d8:b8:cf:
                    7a:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2D:28:78:E0:22:CF:3F:00:C0:CA:A2:CD:35:4F:24:20:B4:F5:AA:99
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7e463b2c-538a-4f93-bfa3-fe1643a77085/88e45ceb-f509-38b6-9aef-25a138621966.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7e463b2c-538a-4f93-bfa3-fe1643a77085/7e463b2c-538a-4f93-bfa3-fe1643a77085.crl

            X509v3 Authority Key Identifier:
                keyid:29:30:ED:0F:85:A6:01:7A:2F:42:BD:40:9C:E0:C7:90:94:14:17:42

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7e463b2c-538a-4f93-bfa3-fe1643a77085.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  64.140.176.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         85:28:a5:a7:83:8a:cb:6e:22:99:f0:93:07:f3:f9:67:ef:a3:
         07:f4:27:5e:42:34:81:d6:40:1b:26:4a:f0:13:02:a1:8c:33:
         95:95:9f:3a:8f:78:0b:83:67:d1:6b:b9:9d:8f:59:8f:f8:c3:
         7d:98:d4:01:f9:67:87:bf:0e:2e:93:0b:54:e3:37:a1:b9:5f:
         50:ff:1e:9a:88:3b:7a:b5:3d:7e:ec:f3:f6:af:fe:50:af:35:
         e1:24:bf:6c:fb:5c:19:fa:d5:e6:a7:1f:f8:10:71:63:1a:9a:
         13:0d:86:90:e2:7a:74:de:1e:99:8a:23:96:34:6b:61:4c:0c:
         78:8f:c7:96:57:ee:bd:56:7b:2d:87:99:1c:34:55:65:67:47:
         8a:e6:5d:31:fd:2c:ee:ec:df:46:28:98:9c:ec:cb:05:82:1a:
         ce:4d:ec:67:de:ac:20:6e:5a:50:fa:ec:90:b6:9d:56:a3:8a:
         2c:5a:aa:4a:c5:26:bf:03:5d:dc:d4:79:73:6f:d2:69:06:db:
         f7:dd:29:4b:e7:a2:82:e9:ed:62:88:c8:60:be:46:9c:63:f0:
         bc:21:1b:35:63:ca:4a:9a:f7:74:1c:d5:0b:68:8b:82:d0:36:
         b0:11:e9:8b:10:c3:c5:fc:08:32:1d:73:49:26:20:5b:07:0d:
         c2:50:5c:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 29 16:14:53 2026 by rpki-client