Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/88e1646b-e1b3-42e7-8591-3a57fd436369/dc4a5d58-3571-3549-b66e-bc9038a5a256.roa
File:                     dc4a5d58-3571-3549-b66e-bc9038a5a256.roa (raw, json)
Hash identifier:          7u+HT4cyaJq3AiQvegxYF9GyAqjo2NlKOGBXlDymSVk=
Subject key identifier:   64:29:00:45:75:14:5E:55:2E:FB:4C:42:C6:06:11:03:9B:51:34:91
Certificate issuer:       /CN=88e1646b-e1b3-42e7-8591-3a57fd436369
Certificate serial:       010D0C9F4328584DE9B084776196DEC0255DEA00
Authority key identifier: BA:43:23:72:BB:F7:97:E5:F2:B4:13:EB:EC:BF:20:32:5C:2D:85:99
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/88e1646b-e1b3-42e7-8591-3a57fd436369.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/88e1646b-e1b3-42e7-8591-3a57fd436369/dc4a5d58-3571-3549-b66e-bc9038a5a256.roa
Signing time:             Fri 22 May 2026 01:00:24 +0000
ROA not before:           Fri 22 May 2026 01:00:24 +0000
ROA not after:            Thu 20 Aug 2026 01:00:24 +0000
asID:                     6122
IP address blocks:        2610:130::/32 maxlen: 64
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/88e1646b-e1b3-42e7-8591-3a57fd436369/88e1646b-e1b3-42e7-8591-3a57fd436369.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/88e1646b-e1b3-42e7-8591-3a57fd436369/88e1646b-e1b3-42e7-8591-3a57fd436369.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/88e1646b-e1b3-42e7-8591-3a57fd436369.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 24 May 2026 15:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:e9:b0:84:77:61:96:de:c0:25:5d:ea:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=88e1646b-e1b3-42e7-8591-3a57fd436369
        Validity
            Not Before: May 22 01:00:24 2026 GMT
            Not After : Aug 20 01:00:24 2026 GMT
        Subject: CN=8820175c-eb87-43c9-81e1-129e0b3ca1e2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:de:d6:e2:a6:52:d9:bc:a4:59:05:cf:bf:88:67:
                    ff:1c:16:de:52:ef:e4:4e:70:b2:45:c1:e7:89:be:
                    c9:15:c9:ce:68:6f:4e:a1:ac:4f:de:0d:23:9f:34:
                    68:bf:49:c3:90:a0:c6:24:d9:05:bd:1b:36:f1:30:
                    bc:22:65:a8:af:21:13:03:de:a3:9b:ba:e2:69:d4:
                    49:c3:4a:45:40:57:4f:a1:5e:0d:df:74:fb:ad:7d:
                    90:0e:e8:e1:44:c8:1a:58:47:4e:16:fe:cf:d7:79:
                    cb:a8:1d:65:1f:02:3f:a6:a8:25:9f:8b:49:70:60:
                    46:8e:a6:f8:87:34:83:c1:8d:89:76:71:1d:27:2d:
                    d0:93:24:89:4a:af:91:c8:b8:ed:88:c9:4d:2d:af:
                    7c:4a:0f:e3:bb:33:4c:49:e3:aa:25:f6:d7:96:53:
                    77:76:35:a9:2f:ce:46:04:dc:43:79:55:47:d8:d4:
                    08:00:35:41:f6:a9:a9:cd:96:10:e6:24:75:33:0f:
                    1c:19:5b:8b:b1:3c:b5:43:64:83:0d:ee:d9:d9:ad:
                    7b:8b:3f:50:c8:48:90:15:2f:49:c9:d0:79:0d:c9:
                    91:92:b4:fe:53:32:ea:23:4c:93:a2:b2:5a:6c:eb:
                    21:27:e9:08:c6:fb:ae:16:11:c2:21:ae:12:45:15:
                    90:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                64:29:00:45:75:14:5E:55:2E:FB:4C:42:C6:06:11:03:9B:51:34:91
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/88e1646b-e1b3-42e7-8591-3a57fd436369/dc4a5d58-3571-3549-b66e-bc9038a5a256.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/88e1646b-e1b3-42e7-8591-3a57fd436369/88e1646b-e1b3-42e7-8591-3a57fd436369.crl

            X509v3 Authority Key Identifier:
                keyid:BA:43:23:72:BB:F7:97:E5:F2:B4:13:EB:EC:BF:20:32:5C:2D:85:99

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/88e1646b-e1b3-42e7-8591-3a57fd436369.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2610:130::/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         33:1b:3c:83:a2:4e:cf:4c:a6:8f:b8:b5:1d:a8:e0:44:45:ad:
         d9:da:7d:bb:89:37:6b:41:f2:d0:e9:a1:7e:e9:3e:c2:10:b4:
         d2:e3:a4:6d:0f:bb:a1:53:2b:33:f3:3d:e7:25:04:e1:1f:58:
         00:c0:b5:6e:eb:c9:e9:22:40:a7:ce:d5:e8:c3:55:72:be:3f:
         32:d6:e7:85:ea:f0:61:dc:9d:17:67:3e:8e:c7:0d:e1:40:48:
         40:35:b7:a7:36:4b:02:d2:2f:7e:e5:f7:20:4b:2b:fa:bd:03:
         83:75:95:eb:94:30:ef:b5:a0:ed:56:d2:fa:ab:63:6f:47:46:
         a7:c2:1e:a6:9d:7d:b4:38:ed:91:6c:7d:73:e6:c4:9e:9e:1b:
         2b:50:c6:4a:2b:b6:5a:06:d2:24:08:f7:bd:b7:cb:b2:fb:d1:
         c4:89:4d:f6:cc:cb:49:d9:3e:6d:d2:c3:f7:16:89:4e:7c:2c:
         5b:84:28:54:e7:5b:9c:fd:b5:56:43:5b:14:55:46:c9:a2:97:
         f0:43:8a:62:bb:ae:1e:b5:63:b2:6e:09:68:75:b0:97:1f:ce:
         86:de:8d:e4:e4:92:69:57:77:d8:fb:33:7c:c2:22:17:b6:67:
         cd:80:e1:1f:0b:25:ec:8e:bb:db:8d:1a:0a:3f:39:53:07:29:
         23:db:d8:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 22 18:31:02 2026 by rpki-client