Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/02df9026-5ea2-4718-a55c-d46da7505348/82b37df1-93f0-3188-8623-5e9929affac6.roa
File:                     82b37df1-93f0-3188-8623-5e9929affac6.roa (raw, json)
Hash identifier:          XFhNYy7tfsEYNU3ojY40CzVnesYmpRbXvf45glTeweM=
Subject key identifier:   A5:95:BD:E8:99:3A:B9:A7:EC:21:B1:9A:CD:A0:00:DC:11:08:C2:63
Certificate issuer:       /CN=02df9026-5ea2-4718-a55c-d46da7505348
Certificate serial:       010D0C9F4328584DF640A5C423E458CAE3D75580
Authority key identifier: C8:1B:76:3A:5E:A5:33:7E:00:1A:D8:D9:F9:90:DA:F6:CD:64:5E:A5
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/02df9026-5ea2-4718-a55c-d46da7505348.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/02df9026-5ea2-4718-a55c-d46da7505348/82b37df1-93f0-3188-8623-5e9929affac6.roa
Signing time:             Tue 26 May 2026 13:00:31 +0000
ROA not before:           Tue 26 May 2026 13:00:31 +0000
ROA not after:            Mon 24 Aug 2026 13:00:31 +0000
asID:                     14291
IP address blocks:        69.88.32.0/20 maxlen: 21
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/02df9026-5ea2-4718-a55c-d46da7505348/02df9026-5ea2-4718-a55c-d46da7505348.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/02df9026-5ea2-4718-a55c-d46da7505348/02df9026-5ea2-4718-a55c-d46da7505348.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/02df9026-5ea2-4718-a55c-d46da7505348.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 29 May 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:f6:40:a5:c4:23:e4:58:ca:e3:d7:55:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=02df9026-5ea2-4718-a55c-d46da7505348
        Validity
            Not Before: May 26 13:00:31 2026 GMT
            Not After : Aug 24 13:00:31 2026 GMT
        Subject: CN=2687f17e-f593-41ec-8e35-44346707f149
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8b:25:fd:19:94:04:b5:10:06:6d:9c:7a:73:80:
                    9a:77:8f:54:a7:73:18:54:31:2a:96:f5:e8:ba:a2:
                    1c:7a:1d:43:47:51:11:d3:d3:43:7c:5a:98:8b:d9:
                    b1:90:30:74:8b:5b:d8:bf:d1:ab:68:9e:29:59:fd:
                    a2:62:1a:09:77:00:b3:04:8c:4e:f6:97:1c:63:1c:
                    eb:d1:92:8e:f3:82:3c:41:b0:fa:d4:77:82:9e:8e:
                    aa:b1:2a:31:4e:ea:6d:55:2c:61:1e:b1:33:fd:90:
                    07:e0:26:bb:ad:57:7e:e4:d9:1d:27:25:d2:09:26:
                    a8:26:28:a3:2b:4b:f5:3f:3a:3a:10:9e:9b:59:37:
                    35:de:56:fb:d6:3f:d1:63:0b:78:e2:39:63:66:d5:
                    2a:5d:5e:51:b8:ab:08:4c:7b:22:80:42:b3:36:ff:
                    7c:fc:68:f5:d3:ed:d8:95:b5:fe:85:eb:0b:60:ca:
                    be:a3:25:21:51:4a:8a:fb:46:86:70:84:61:d7:1b:
                    d6:55:a2:65:d7:6c:f5:07:c6:fd:9e:e2:65:c6:d4:
                    4b:66:0c:2d:87:6b:81:d8:19:09:e8:45:5e:4a:f4:
                    09:0d:44:51:91:f8:6b:c5:98:18:9d:37:b4:30:8a:
                    55:8c:d8:91:8e:f5:57:33:ef:33:1e:91:30:4d:75:
                    ce:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A5:95:BD:E8:99:3A:B9:A7:EC:21:B1:9A:CD:A0:00:DC:11:08:C2:63
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/02df9026-5ea2-4718-a55c-d46da7505348/82b37df1-93f0-3188-8623-5e9929affac6.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/02df9026-5ea2-4718-a55c-d46da7505348/02df9026-5ea2-4718-a55c-d46da7505348.crl

            X509v3 Authority Key Identifier:
                keyid:C8:1B:76:3A:5E:A5:33:7E:00:1A:D8:D9:F9:90:DA:F6:CD:64:5E:A5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/02df9026-5ea2-4718-a55c-d46da7505348.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  69.88.32.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         81:6d:50:7d:8d:51:5c:18:cd:6e:cb:db:1d:29:42:44:85:f3:
         d7:3e:6a:a7:ad:e3:03:fc:50:1c:7a:63:67:29:a3:60:52:96:
         ba:09:97:4c:3c:b6:17:e8:24:cf:39:6a:2f:f2:b0:54:c7:c1:
         5d:a3:b7:e2:6e:22:9c:f6:cd:21:6c:6c:67:1b:b1:6e:cd:60:
         52:cd:89:b1:20:18:72:92:e1:81:85:89:55:19:13:31:a8:61:
         b8:bc:6e:44:fd:6a:5a:e5:0c:94:90:49:9f:95:06:6f:90:c6:
         24:2e:94:3f:84:8f:12:17:90:e8:88:f5:38:ed:25:b7:e5:22:
         f7:ab:cc:0a:ab:df:d1:94:f7:57:5b:ad:8a:f4:97:f8:85:da:
         05:ba:bf:17:09:23:bb:39:ae:c2:46:dd:7c:52:90:65:a5:91:
         90:14:f6:df:f6:63:79:aa:e3:6a:a9:29:b1:7a:4b:45:55:61:
         80:22:61:52:11:51:00:bd:28:c6:e6:ad:ff:e5:be:36:cf:a5:
         85:3d:d3:59:f7:e6:49:d9:3c:ff:25:1b:5d:f3:53:50:3e:5a:
         39:34:9d:e5:9a:5f:46:0f:9c:da:61:1f:c0:5a:35:84:20:1d:
         23:2e:40:a4:2d:98:5b:5c:26:c3:bf:9d:d2:e7:42:f8:e3:16:
         e0:ec:aa:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 28 13:42:06 2026 by rpki-client