Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/1c6fc533-f46c-474e-9480-56c3b0fb1938/77ffd4d2-faa9-3c8e-a5c0-c99699f833f4.roa
File:                     77ffd4d2-faa9-3c8e-a5c0-c99699f833f4.roa (raw, json)
Hash identifier:          KExK8J5tfq361f22wHHpecliMtRJMS7FQeR8yj/6hf4=
Subject key identifier:   EE:D9:25:13:BA:E9:13:81:98:6D:E4:C2:A4:C6:DE:A0:10:2D:38:B4
Certificate issuer:       /CN=1c6fc533-f46c-474e-9480-56c3b0fb1938
Certificate serial:       010D0C9F4328584D9E501BB107352C3672D7D240
Authority key identifier: 45:48:C6:E8:F8:ED:19:15:49:2A:5E:2C:E5:BE:FE:5E:11:2E:B5:E5
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/1c6fc533-f46c-474e-9480-56c3b0fb1938.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/1c6fc533-f46c-474e-9480-56c3b0fb1938/77ffd4d2-faa9-3c8e-a5c0-c99699f833f4.roa
Signing time:             Sat 25 Apr 2026 01:00:24 +0000
ROA not before:           Sat 25 Apr 2026 01:00:24 +0000
ROA not after:            Fri 24 Jul 2026 01:00:24 +0000
asID:                     16509
IP address blocks:        195.85.88.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/1c6fc533-f46c-474e-9480-56c3b0fb1938/1c6fc533-f46c-474e-9480-56c3b0fb1938.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/1c6fc533-f46c-474e-9480-56c3b0fb1938/1c6fc533-f46c-474e-9480-56c3b0fb1938.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/1c6fc533-f46c-474e-9480-56c3b0fb1938.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 30 Apr 2026 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:9e:50:1b:b1:07:35:2c:36:72:d7:d2:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1c6fc533-f46c-474e-9480-56c3b0fb1938
        Validity
            Not Before: Apr 25 01:00:24 2026 GMT
            Not After : Jul 24 01:00:24 2026 GMT
        Subject: CN=18be514c-c584-4c89-aa1f-becd85ca2833
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:e7:dc:29:ff:69:a0:90:d4:80:e0:4e:5d:50:
                    3f:e6:e6:20:a8:9b:2d:83:ae:91:4d:17:a8:28:c8:
                    7a:48:0f:05:c7:1d:ab:33:b5:85:36:9a:1c:d1:2c:
                    80:e1:63:67:25:71:81:55:b0:b6:04:bc:1e:36:e9:
                    68:3e:c6:b8:75:f7:92:a8:f7:b0:e3:c5:fe:f7:6f:
                    fd:95:73:95:f0:e1:8d:a3:1f:4f:4f:53:69:40:06:
                    78:fb:39:cf:f8:3a:0f:f0:fc:ff:e2:a3:13:dc:6a:
                    26:8d:92:bd:b3:41:32:a6:d8:f8:9c:18:7f:c5:a4:
                    e4:38:4d:c3:49:3c:e3:2d:93:ea:a3:72:58:50:99:
                    3e:66:60:0d:4b:84:e5:82:02:8f:4f:df:cb:4b:19:
                    f8:6d:1f:58:fc:9a:e8:d9:44:b4:a6:17:2b:9a:d5:
                    ec:00:35:5c:5f:da:29:3a:0a:a1:38:cf:ce:c9:22:
                    fc:5c:e1:c2:3d:45:27:fc:c2:37:c7:b7:7e:62:03:
                    ef:d0:9e:62:10:c7:68:d0:29:1e:b2:2e:8a:64:d9:
                    ba:65:ee:66:7b:d0:d4:e2:ef:8a:6a:50:a0:00:10:
                    54:bd:69:ce:19:d4:fd:e4:03:06:14:a9:b7:3f:db:
                    c9:42:50:e4:bf:cb:e1:e6:7a:e7:ab:0c:a5:96:e6:
                    5b:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EE:D9:25:13:BA:E9:13:81:98:6D:E4:C2:A4:C6:DE:A0:10:2D:38:B4
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/1c6fc533-f46c-474e-9480-56c3b0fb1938/77ffd4d2-faa9-3c8e-a5c0-c99699f833f4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/1c6fc533-f46c-474e-9480-56c3b0fb1938/1c6fc533-f46c-474e-9480-56c3b0fb1938.crl

            X509v3 Authority Key Identifier:
                keyid:45:48:C6:E8:F8:ED:19:15:49:2A:5E:2C:E5:BE:FE:5E:11:2E:B5:E5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/1c6fc533-f46c-474e-9480-56c3b0fb1938.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  195.85.88.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         15:97:5c:3f:8d:1b:bd:9f:b3:2b:46:e3:f5:c6:c9:eb:fe:c6:
         cd:0c:9d:41:e6:6f:8d:93:d8:a7:cc:76:11:44:8e:e1:fc:f1:
         5a:bf:b3:66:7b:4e:a3:4c:78:7e:d2:e9:e8:92:d4:46:8a:92:
         d6:e4:1f:f3:28:d9:db:7f:06:b3:ed:f7:9d:ec:82:d6:46:29:
         89:30:9b:34:d5:7e:7e:f5:1f:2e:51:6b:be:42:a4:1c:c2:32:
         2d:d7:51:a8:7a:ce:63:33:a1:f1:59:65:b6:34:aa:ee:16:c5:
         28:e0:5f:ab:c2:17:9c:3e:d0:ef:ea:b8:9d:d9:3f:1e:d6:ed:
         7e:35:70:ad:70:25:c4:79:4b:ea:46:c6:77:70:f0:31:51:1c:
         ef:5c:5a:23:19:89:f2:26:11:5b:06:24:88:2c:34:8d:2a:2a:
         be:82:13:63:dc:7d:82:b7:c9:09:38:25:a3:6a:2d:16:a3:e7:
         cf:bc:84:f2:b9:67:d1:f6:c1:07:77:12:36:67:11:e6:7a:92:
         2b:0b:ad:f4:ba:55:83:a6:c1:33:cf:d4:06:0c:fc:ec:a9:e8:
         59:32:bc:16:1f:96:ac:b4:f9:82:99:c5:90:c4:9f:fc:a8:95:
         9d:8c:84:d0:7b:44:2a:9c:c8:41:52:0f:d9:f4:8e:cc:b9:a7:
         ca:da:08:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 29 15:28:44 2026 by rpki-client