Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/911afcc4-db22-4282-acca-e1e676a5ae20/88b07938-2ee8-301e-ac41-06cbf7074ab9.roa
File:                     88b07938-2ee8-301e-ac41-06cbf7074ab9.roa (raw, json)
Hash identifier:          00nchrDj2arJQ/WM207aJ8eE8Bw25lQlBqJ+wqMBQh8=
Subject key identifier:   77:6A:D1:41:8A:B6:B8:E7:C1:EB:5B:4E:74:71:10:92:C7:33:3C:44
Certificate issuer:       /CN=911afcc4-db22-4282-acca-e1e676a5ae20
Certificate serial:       010D0C9F4328584D6DBF0B5B00550553F25ECD80
Authority key identifier: 69:1A:B6:E8:3E:67:94:46:39:E2:EF:D1:4C:D5:E4:75:69:36:90:EB
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/911afcc4-db22-4282-acca-e1e676a5ae20.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/911afcc4-db22-4282-acca-e1e676a5ae20/88b07938-2ee8-301e-ac41-06cbf7074ab9.roa
Signing time:             Tue 07 Apr 2026 15:29:37 +0000
ROA not before:           Tue 07 Apr 2026 15:29:37 +0000
ROA not after:            Mon 06 Jul 2026 15:29:37 +0000
asID:                     14618
IP address blocks:        199.68.83.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/911afcc4-db22-4282-acca-e1e676a5ae20/911afcc4-db22-4282-acca-e1e676a5ae20.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/911afcc4-db22-4282-acca-e1e676a5ae20/911afcc4-db22-4282-acca-e1e676a5ae20.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/911afcc4-db22-4282-acca-e1e676a5ae20.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 15 Apr 2026 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:6d:bf:0b:5b:00:55:05:53:f2:5e:cd:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=911afcc4-db22-4282-acca-e1e676a5ae20
        Validity
            Not Before: Apr  7 15:29:37 2026 GMT
            Not After : Jul  6 15:29:37 2026 GMT
        Subject: CN=c6811678-53cd-410d-a8f2-df108aa20b6f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:88:2e:98:05:76:8b:17:fa:e4:12:df:38:bb:a0:
                    8c:f4:5e:b9:05:e7:99:bc:7a:f0:df:12:1b:3d:ab:
                    82:79:84:8d:62:bd:a1:3c:05:27:dc:ee:14:e5:80:
                    76:fc:92:de:2d:b1:61:ec:9c:2b:81:69:1c:38:48:
                    e9:64:7d:19:79:03:f1:02:f4:a1:44:c5:22:f8:47:
                    95:74:dc:1f:c4:4a:38:64:25:9b:04:9c:21:d4:d6:
                    73:1b:c5:30:4c:35:e5:83:d2:1a:98:21:68:cd:2b:
                    73:08:4d:76:22:ab:63:3a:14:cd:65:9e:03:b9:bd:
                    a5:35:55:0a:4e:2b:1f:db:71:4a:ff:32:fc:ea:b3:
                    8e:64:a5:f5:a0:7e:eb:91:8c:16:f1:46:55:cb:80:
                    94:8a:0e:bc:53:fa:61:71:ef:49:71:5d:c0:74:89:
                    0b:a2:d0:92:c7:e9:cc:40:4d:2b:bd:5d:8b:8b:4f:
                    f2:2d:9c:5a:80:56:23:49:9f:00:56:1e:c1:49:59:
                    e4:67:2e:c7:6c:02:bc:87:80:93:7e:6a:e7:a4:81:
                    97:a4:3e:e4:a0:c3:3b:96:22:4f:60:a8:ca:b8:b0:
                    c2:fa:ea:5d:9c:28:56:96:b5:c0:22:7e:96:ee:c8:
                    20:be:c9:b8:0f:2e:bf:e0:19:d3:9d:1f:6c:b2:b9:
                    0e:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                77:6A:D1:41:8A:B6:B8:E7:C1:EB:5B:4E:74:71:10:92:C7:33:3C:44
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/911afcc4-db22-4282-acca-e1e676a5ae20/88b07938-2ee8-301e-ac41-06cbf7074ab9.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/911afcc4-db22-4282-acca-e1e676a5ae20/911afcc4-db22-4282-acca-e1e676a5ae20.crl

            X509v3 Authority Key Identifier:
                keyid:69:1A:B6:E8:3E:67:94:46:39:E2:EF:D1:4C:D5:E4:75:69:36:90:EB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/911afcc4-db22-4282-acca-e1e676a5ae20.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.68.83.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         85:cb:39:5e:c5:77:0a:23:d7:34:44:a8:f9:63:5e:1f:ca:ed:
         7a:80:f6:a3:60:8a:c6:fd:43:6d:11:d9:5e:22:ff:a5:8a:ed:
         55:34:8b:d5:8b:58:98:bc:50:a9:1c:fb:d1:e6:80:d6:e1:6e:
         2d:bc:7b:74:ea:ca:c6:54:b2:48:53:cb:6e:2a:7b:5b:b6:78:
         4f:b6:6f:42:bf:23:7d:78:1f:1a:e0:39:f6:ff:43:1d:4a:bd:
         8b:a1:77:ee:78:48:e6:f1:46:c5:13:bf:f8:d1:82:a1:d4:e1:
         27:27:40:e7:ed:23:eb:06:8b:72:d2:d2:7e:bc:c2:c8:36:73:
         94:66:93:13:29:f6:bf:10:1c:12:63:e2:38:d5:67:f0:39:e9:
         dc:12:d4:3b:37:25:81:de:4c:5f:61:24:33:dc:98:e1:89:ce:
         ab:53:71:90:44:ad:25:36:0a:13:e7:a8:7e:bd:94:df:d5:35:
         bc:8d:4d:c9:b1:23:56:ab:88:b1:72:8b:42:b4:48:fb:66:27:
         f1:80:0c:18:2c:10:55:dc:b4:12:4f:f8:c1:50:44:36:bd:c3:
         fa:33:c7:0c:8a:2b:06:a8:1e:78:7e:47:2d:e8:9a:d4:96:fa:
         0d:8c:63:97:c3:5f:87:f2:b3:73:7b:c4:a9:cc:e7:e0:62:8d:
         8a:b2:cb:de
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 13 18:45:23 2026 by rpki-client