Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d5ebadbb-b63c-4e95-8e76-fd22cc861311/88fbe284-82b8-3e50-9540-cbc896e974e0.roa
File:                     88fbe284-82b8-3e50-9540-cbc896e974e0.roa (raw, json)
Hash identifier:          ohB7FANrc3Zii28RiZZyaM3PduzSwyi/r6WlhsferEw=
Subject key identifier:   A4:4F:AC:1A:BD:F0:71:C7:2D:48:85:BD:D9:9D:25:A2:8C:19:7C:10
Certificate issuer:       /CN=d5ebadbb-b63c-4e95-8e76-fd22cc861311
Certificate serial:       010D0C9F4328584EA7877374C629C60A4AABC1E8
Authority key identifier: 0A:5D:E7:3A:9A:58:CA:C5:9D:F6:05:BC:E3:F2:1E:CC:23:F8:D7:94
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d5ebadbb-b63c-4e95-8e76-fd22cc861311.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d5ebadbb-b63c-4e95-8e76-fd22cc861311/88fbe284-82b8-3e50-9540-cbc896e974e0.roa
Signing time:             Wed 29 Jul 2026 01:00:12 +0000
ROA not before:           Wed 29 Jul 2026 01:00:12 +0000
ROA not after:            Tue 27 Oct 2026 01:00:12 +0000
asID:                     25697
IP address blocks:        209.94.60.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d5ebadbb-b63c-4e95-8e76-fd22cc861311/d5ebadbb-b63c-4e95-8e76-fd22cc861311.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d5ebadbb-b63c-4e95-8e76-fd22cc861311/d5ebadbb-b63c-4e95-8e76-fd22cc861311.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d5ebadbb-b63c-4e95-8e76-fd22cc861311.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 12 Sep 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:a7:87:73:74:c6:29:c6:0a:4a:ab:c1:e8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d5ebadbb-b63c-4e95-8e76-fd22cc861311
        Validity
            Not Before: Jul 29 01:00:12 2026 GMT
            Not After : Oct 27 01:00:12 2026 GMT
        Subject: CN=773dfe3a-2426-4689-ae95-a47a7626f4bd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:80:8a:42:dc:4e:02:9d:96:77:93:0b:1c:97:40:
                    68:2d:55:bb:da:8d:6f:29:62:ee:1a:df:72:20:60:
                    5f:0b:3a:9c:da:68:0d:1a:4f:6f:46:5b:ab:89:33:
                    0b:c1:31:ae:fc:21:2a:02:bb:13:fd:02:9f:3e:15:
                    75:65:5c:56:56:88:34:a6:4a:22:1a:a3:ee:aa:8f:
                    b9:99:ed:3d:93:c7:e7:1a:2b:98:94:1c:0e:fe:4a:
                    e4:df:ef:bf:7d:48:45:4d:06:2e:ec:e6:39:69:f6:
                    d2:a7:8f:b0:a0:43:48:bb:6f:1e:8f:95:ad:44:91:
                    35:c0:d9:9c:ad:a1:1b:7e:c4:6b:40:73:c1:34:4c:
                    17:b4:2d:b4:8a:d2:f3:a6:03:eb:af:fa:c4:9b:9e:
                    f9:53:06:50:9c:eb:85:54:f8:6d:cf:c4:a5:93:9a:
                    49:04:c5:8d:36:a5:9b:9a:40:5f:f0:69:6c:fd:b2:
                    59:73:22:6a:8f:29:65:28:88:82:b4:9f:1b:90:db:
                    13:76:46:ec:a6:ce:c6:08:18:a2:a4:61:b1:e0:ec:
                    8f:e5:fc:25:f6:50:48:e3:73:62:9b:06:27:63:a5:
                    e3:04:83:7d:ab:99:aa:48:5c:f0:a8:bf:db:f3:22:
                    b5:e8:d8:05:c9:91:52:81:c8:62:18:89:e7:c9:cf:
                    00:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A4:4F:AC:1A:BD:F0:71:C7:2D:48:85:BD:D9:9D:25:A2:8C:19:7C:10
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d5ebadbb-b63c-4e95-8e76-fd22cc861311/88fbe284-82b8-3e50-9540-cbc896e974e0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d5ebadbb-b63c-4e95-8e76-fd22cc861311/d5ebadbb-b63c-4e95-8e76-fd22cc861311.crl

            X509v3 Authority Key Identifier:
                keyid:0A:5D:E7:3A:9A:58:CA:C5:9D:F6:05:BC:E3:F2:1E:CC:23:F8:D7:94

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d5ebadbb-b63c-4e95-8e76-fd22cc861311.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  209.94.60.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         46:c5:af:52:3f:10:ad:ee:56:17:ff:ec:94:75:84:93:7b:82:
         70:01:83:56:d5:98:59:00:1e:c1:04:38:eb:3e:ad:67:9f:f3:
         0a:91:fc:1d:8c:ef:c3:ef:a2:76:98:6f:eb:fe:cb:ee:2e:82:
         ea:3d:9d:1b:06:8d:29:4c:e1:be:82:1d:57:3d:e4:c8:07:16:
         29:04:33:36:24:d2:a0:2b:c7:45:29:d9:bd:66:7a:2c:ef:31:
         58:b3:f1:1d:bb:f0:f6:1c:d8:a4:e5:d3:df:18:35:1a:c3:05:
         0f:a5:61:a0:94:fe:06:db:3c:34:e0:0d:25:74:cf:49:49:e2:
         2a:53:30:7c:ea:73:f6:ba:bc:01:8c:c3:c9:05:59:e5:1f:24:
         14:22:11:dc:5f:18:20:b2:76:4e:86:8a:61:7a:01:b0:15:cc:
         82:39:70:90:65:78:99:82:88:7d:91:2a:87:2d:99:3e:cc:a6:
         5f:2e:8c:8b:4f:74:61:4c:09:00:17:ae:96:e3:2d:48:6d:2e:
         cc:5b:68:36:fe:e2:47:41:f9:a2:c4:a3:10:84:c2:8b:bb:8a:
         89:31:52:a5:49:a2:e2:c3:db:3e:89:a3:ce:47:31:7a:34:c1:
         eb:bb:3a:27:2b:3b:39:91:4a:88:be:4c:be:6d:50:36:38:c5:
         06:ea:b4:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 10 20:17:55 2026 by rpki-client