Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d0e9c2ef-4579-4a7d-bf20-8cdfad4ba1a0/88f16770-79cb-31a3-a635-4b9256702cdb.roa
File:                     88f16770-79cb-31a3-a635-4b9256702cdb.roa (raw, json)
Hash identifier:          0z/9hb+Bn0QEUO9GnQxtYForg4+BKm8zALLV3q+Uo68=
Subject key identifier:   34:F2:50:91:AD:CF:08:31:13:CD:AA:57:D2:2D:3C:7F:D7:EE:CE:01
Certificate issuer:       /CN=d0e9c2ef-4579-4a7d-bf20-8cdfad4ba1a0
Certificate serial:       010D0C9F4328584DE41B2202297F39E53B42DE00
Authority key identifier: 9E:18:65:13:C3:42:32:FD:AF:A4:60:79:8A:B1:74:6F:7A:B0:E0:B5
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d0e9c2ef-4579-4a7d-bf20-8cdfad4ba1a0.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d0e9c2ef-4579-4a7d-bf20-8cdfad4ba1a0/88f16770-79cb-31a3-a635-4b9256702cdb.roa
Signing time:             Wed 20 May 2026 01:00:25 +0000
ROA not before:           Wed 20 May 2026 01:00:25 +0000
ROA not after:            Tue 18 Aug 2026 01:00:25 +0000
asID:                     10794
IP address blocks:        171.162.3.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d0e9c2ef-4579-4a7d-bf20-8cdfad4ba1a0/d0e9c2ef-4579-4a7d-bf20-8cdfad4ba1a0.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d0e9c2ef-4579-4a7d-bf20-8cdfad4ba1a0/d0e9c2ef-4579-4a7d-bf20-8cdfad4ba1a0.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d0e9c2ef-4579-4a7d-bf20-8cdfad4ba1a0.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 May 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:e4:1b:22:02:29:7f:39:e5:3b:42:de:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d0e9c2ef-4579-4a7d-bf20-8cdfad4ba1a0
        Validity
            Not Before: May 20 01:00:25 2026 GMT
            Not After : Aug 18 01:00:25 2026 GMT
        Subject: CN=4acaece1-1916-44b8-adb6-3f09d8b239aa
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:c7:fc:1b:f6:64:7b:40:86:99:48:b1:c2:05:
                    79:b3:41:93:66:93:46:26:94:33:6b:d1:d0:61:9d:
                    96:e5:23:7b:21:b0:5e:de:a5:97:05:f6:02:d3:40:
                    9e:79:66:89:9d:4a:4c:08:6c:1f:38:7d:b4:27:00:
                    df:85:48:ef:d0:15:a9:17:5e:af:3c:66:4c:30:fa:
                    2a:ae:2a:17:8c:a6:90:1b:1c:de:d1:14:ba:11:e9:
                    52:dd:73:0d:36:24:5e:e0:11:3c:4f:a5:20:54:27:
                    f5:63:7d:21:15:e4:61:30:6b:99:56:3d:e4:1f:a6:
                    e7:3e:6e:40:b2:e7:3a:90:48:9f:e4:a5:f2:6c:ae:
                    f6:6c:db:2e:5b:6f:ba:69:71:e8:f1:99:6c:39:75:
                    24:61:29:d5:1c:c5:87:67:f1:64:08:d0:ca:4a:c0:
                    0a:44:cb:e2:2e:94:b6:5a:e2:77:95:2c:33:d3:3a:
                    b1:79:bc:1d:18:6c:c1:f5:68:1f:d9:39:8d:32:ed:
                    b3:8c:0e:0a:ef:13:73:8f:5d:cb:12:89:26:da:b4:
                    e1:0b:a5:d3:07:51:35:d5:15:aa:81:b6:77:84:f9:
                    c3:82:20:bf:86:b4:59:39:be:60:7e:ad:f3:6c:5b:
                    ad:df:ae:92:d8:af:99:4b:43:25:6b:9e:98:78:90:
                    3d:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                34:F2:50:91:AD:CF:08:31:13:CD:AA:57:D2:2D:3C:7F:D7:EE:CE:01
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d0e9c2ef-4579-4a7d-bf20-8cdfad4ba1a0/88f16770-79cb-31a3-a635-4b9256702cdb.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d0e9c2ef-4579-4a7d-bf20-8cdfad4ba1a0/d0e9c2ef-4579-4a7d-bf20-8cdfad4ba1a0.crl

            X509v3 Authority Key Identifier:
                keyid:9E:18:65:13:C3:42:32:FD:AF:A4:60:79:8A:B1:74:6F:7A:B0:E0:B5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d0e9c2ef-4579-4a7d-bf20-8cdfad4ba1a0.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  171.162.3.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5c:22:35:1a:79:9b:29:36:fa:87:31:d7:d3:5e:37:98:05:93:
         a7:d7:d1:26:0b:a5:72:c3:cc:b9:59:3d:b1:b5:b6:0d:0e:ac:
         be:99:7a:57:8c:1c:cc:1c:83:0e:1b:51:6b:52:c1:a7:b2:40:
         10:d6:04:4f:47:d7:41:1d:01:98:b8:ea:17:df:7b:9d:7d:d0:
         9b:69:95:1b:58:c6:0c:23:33:cc:b3:5f:17:5c:e7:ed:75:3c:
         e6:a2:bb:b8:d6:d4:d2:7d:a9:11:6a:0f:6f:c5:fd:7a:7c:47:
         e4:82:70:9c:73:cf:c1:cc:90:8d:42:d4:53:d1:6c:d6:c1:9b:
         03:cc:36:19:8b:b3:9a:53:01:9c:0a:85:cc:ce:e5:71:ee:ca:
         d2:42:25:bc:3f:dd:8d:6f:59:96:d2:fb:57:40:49:e3:e8:22:
         db:cd:0e:f3:66:27:60:f0:04:9f:0d:56:fa:e2:38:d7:26:84:
         d6:39:29:3d:ca:36:01:64:f7:67:0d:6a:d6:6a:6e:40:87:bb:
         8b:0a:4a:a6:b8:ee:99:1a:15:e1:64:60:25:48:f1:a5:96:33:
         de:33:20:41:03:2e:e9:ac:32:8e:d4:2e:59:51:0e:cb:18:24:
         32:da:32:a4:6a:09:e8:61:00:fd:f5:24:62:8c:0f:7b:80:3b:
         f3:c9:fa:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 21 18:33:32 2026 by rpki-client