Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/88db2ec8-651c-4bdc-bf38-97fe38702609/e44dfe4f-2667-34d4-bf61-05659f9c77ad.roa
File:                     e44dfe4f-2667-34d4-bf61-05659f9c77ad.roa (raw, json)
Hash identifier:          W6si8rWDqFnggh4P0YABUjLHgppWcFKYPrUfRT/tuFY=
Subject key identifier:   7B:08:61:05:27:27:21:91:EB:FD:8A:7C:72:AC:E0:94:03:4A:38:60
Certificate issuer:       /CN=88db2ec8-651c-4bdc-bf38-97fe38702609
Certificate serial:       010D0C9F4328584D8EF58AD1370B90CCC6EDF4A0
Authority key identifier: 78:E5:8B:03:25:A9:5A:F6:BF:DD:70:79:BD:52:50:E6:03:FE:B0:00
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/88db2ec8-651c-4bdc-bf38-97fe38702609.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/88db2ec8-651c-4bdc-bf38-97fe38702609/e44dfe4f-2667-34d4-bf61-05659f9c77ad.roa
Signing time:             Sun 19 Apr 2026 13:00:31 +0000
ROA not before:           Sun 19 Apr 2026 13:00:31 +0000
ROA not after:            Sat 18 Jul 2026 13:00:31 +0000
asID:                     4637
IP address blocks:        121.91.208.0/20 maxlen: 24
                          121.91.224.0/19 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/88db2ec8-651c-4bdc-bf38-97fe38702609/88db2ec8-651c-4bdc-bf38-97fe38702609.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/88db2ec8-651c-4bdc-bf38-97fe38702609/88db2ec8-651c-4bdc-bf38-97fe38702609.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/88db2ec8-651c-4bdc-bf38-97fe38702609.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 29 Apr 2026 05:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:8e:f5:8a:d1:37:0b:90:cc:c6:ed:f4:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=88db2ec8-651c-4bdc-bf38-97fe38702609
        Validity
            Not Before: Apr 19 13:00:31 2026 GMT
            Not After : Jul 18 13:00:31 2026 GMT
        Subject: CN=85e93d06-b845-4304-982e-ad878ac06352
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:aa:80:bd:10:b0:87:93:92:eb:1e:6b:a0:5f:
                    03:9f:51:e0:c5:9b:5a:40:e8:7a:be:5a:bd:5e:75:
                    8a:59:e8:05:2b:82:b0:9d:9b:79:e9:be:f6:6b:65:
                    6a:66:d5:fe:1b:fd:78:6f:c0:9b:d8:d7:6f:48:d3:
                    4c:c9:3c:43:49:14:c2:33:a8:44:e4:84:e0:e3:9d:
                    56:da:e8:7f:2c:6c:53:25:84:9b:74:5c:39:88:ea:
                    2a:29:8a:0a:0c:90:56:9d:24:03:60:e6:5f:4f:2b:
                    69:2d:76:6a:cc:d0:6b:cb:a8:89:76:16:22:35:d4:
                    3c:9e:a0:1a:64:29:ce:75:a2:35:ef:95:39:00:89:
                    87:25:b9:5a:60:91:18:17:6a:43:bf:f4:ae:57:64:
                    e2:0b:5a:9d:e5:c1:3f:8a:9c:7a:9c:18:5f:44:68:
                    e6:17:35:1b:72:27:68:e4:0a:93:8b:ab:00:cf:90:
                    49:c7:f2:29:2c:dd:c2:7b:71:55:07:1d:92:67:0d:
                    0a:c5:59:d5:da:92:c5:b0:f7:5e:a0:86:c1:8d:f1:
                    36:c9:ba:82:7c:a7:28:1f:a5:38:93:cc:c1:0b:81:
                    37:62:b3:bd:17:2d:f5:2c:d3:bf:2d:1d:e3:83:a9:
                    d9:bc:b4:a1:89:b7:ad:bf:9a:0d:de:9b:7a:5e:8f:
                    25:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7B:08:61:05:27:27:21:91:EB:FD:8A:7C:72:AC:E0:94:03:4A:38:60
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/88db2ec8-651c-4bdc-bf38-97fe38702609/e44dfe4f-2667-34d4-bf61-05659f9c77ad.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/88db2ec8-651c-4bdc-bf38-97fe38702609/88db2ec8-651c-4bdc-bf38-97fe38702609.crl

            X509v3 Authority Key Identifier:
                keyid:78:E5:8B:03:25:A9:5A:F6:BF:DD:70:79:BD:52:50:E6:03:FE:B0:00

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/88db2ec8-651c-4bdc-bf38-97fe38702609.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  121.91.208.0-121.91.255.255

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2e:32:cd:80:12:a6:06:fb:9a:78:04:cd:29:bc:73:66:c7:3a:
         ee:a4:8e:ee:44:a8:29:4f:b3:80:48:93:d0:be:4d:9b:ab:5b:
         3e:51:06:68:19:9e:02:22:b6:6d:c2:3b:3c:bb:7f:4f:05:0e:
         58:f1:a9:db:a3:aa:e9:27:4e:9a:b4:7f:81:17:5f:35:41:2a:
         3d:bc:5d:ad:5c:fd:d9:f8:4a:d5:8a:b4:2d:d9:c7:0b:fa:89:
         91:02:cf:92:31:68:2a:32:c0:3b:80:0e:b4:f1:a2:27:63:f4:
         3a:7b:52:5b:63:f8:1e:f0:f7:16:0a:6f:cd:45:da:8c:3f:b3:
         14:31:cd:af:7e:63:0e:4d:b0:8e:5f:c4:51:a2:41:c8:72:06:
         b4:75:ea:f1:7b:14:26:bc:e5:ed:f6:25:56:3e:9d:bd:48:ab:
         fb:73:f2:9b:8c:50:bd:df:26:05:c9:07:0a:37:99:c6:34:4f:
         7c:e7:32:98:89:8a:39:16:a2:5e:c4:0d:cd:5a:39:4a:7e:36:
         ef:e0:44:be:c6:d0:f0:e5:3d:e1:65:3d:4b:a6:9a:fd:11:72:
         60:28:99:40:e2:df:c8:0f:04:eb:d2:06:35:2f:c1:bb:06:16:
         31:14:b8:b2:ba:19:24:49:0b:26:79:21:c9:a6:32:14:a6:be:
         ee:8b:bd:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 27 12:40:17 2026 by rpki-client