Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/e4439eac-1efa-397b-9ae2-4f5a6445bdc9.roa
File:                     e4439eac-1efa-397b-9ae2-4f5a6445bdc9.roa (raw, json)
Hash identifier:          +c+cAGwo7J5BzoukpyhxzySsNYet72y09QcrXr/5DWs=
Subject key identifier:   8C:BA:04:A4:79:8F:D1:24:67:D5:5B:7C:5E:10:5B:80:7F:32:66:34
Certificate issuer:       /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
Certificate serial:       010D0C9F4328584EA78717B275F1D089E9907D20
Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/e4439eac-1efa-397b-9ae2-4f5a6445bdc9.roa
Signing time:             Wed 29 Jul 2026 01:00:12 +0000
ROA not before:           Wed 29 Jul 2026 01:00:12 +0000
ROA not after:            Tue 27 Oct 2026 01:00:12 +0000
asID:                     19905
IP address blocks:        150.195.112.0/20 maxlen: 20
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 30 Jul 2026 07:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:a7:87:17:b2:75:f1:d0:89:e9:90:7d:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
        Validity
            Not Before: Jul 29 01:00:12 2026 GMT
            Not After : Oct 27 01:00:12 2026 GMT
        Subject: CN=56086b98-272d-4993-baea-823e4eeaec46
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:6d:07:60:5e:28:ec:7a:e7:9c:bf:09:6c:9c:
                    b5:77:e7:4e:8c:c4:60:18:46:6f:7d:72:40:7f:62:
                    a1:6b:7f:0e:57:b7:0f:04:e5:54:56:c0:5a:32:ec:
                    36:c9:37:2b:0d:dd:c5:61:06:d0:0e:0a:b6:d5:96:
                    1e:0c:79:30:b3:28:c3:ca:a6:78:38:75:f6:4a:18:
                    57:af:c2:8c:72:dd:bd:12:00:b5:54:39:73:e1:2a:
                    20:72:66:4a:05:1b:17:62:f0:05:bd:7c:e4:09:ed:
                    02:9f:61:7f:95:6c:41:de:62:61:51:a8:9b:74:d5:
                    9a:e8:b8:5e:6c:66:29:6d:e9:7d:d9:51:d8:c3:39:
                    fa:ab:2e:8b:89:50:3f:9a:2e:15:32:0f:60:b0:2c:
                    30:33:a1:55:9b:6d:5e:0e:7c:fe:dc:c0:88:45:13:
                    f5:c7:62:f8:71:9e:97:12:71:97:89:36:0b:77:84:
                    b6:f1:6f:e6:db:73:8a:b2:2b:a8:80:6e:ae:a5:8c:
                    66:4c:d1:68:ed:33:23:9c:c7:f4:56:9b:51:15:ff:
                    70:88:c6:12:46:cf:88:e2:d5:1d:e5:58:e1:e3:76:
                    fd:47:39:75:94:f7:1b:a2:a8:b3:be:d4:9d:3c:36:
                    42:79:39:01:31:23:3a:d6:f9:73:c6:15:24:84:38:
                    71:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8C:BA:04:A4:79:8F:D1:24:67:D5:5B:7C:5E:10:5B:80:7F:32:66:34
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/e4439eac-1efa-397b-9ae2-4f5a6445bdc9.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl

            X509v3 Authority Key Identifier:
                keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  150.195.112.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5a:e7:ed:2b:9a:77:c1:25:ab:78:6a:7e:90:6e:74:e6:55:21:
         f9:b1:a0:f9:29:99:b7:19:83:81:a3:23:23:18:82:4e:c1:5e:
         1c:ca:a5:f5:f4:4b:0d:e9:4a:54:14:59:a7:8c:26:35:8a:c2:
         d7:91:ef:ee:28:6a:67:5f:ba:87:37:6f:21:1a:42:0f:a4:28:
         2f:8d:f1:07:0a:7f:3b:d9:ea:9d:c4:11:ad:75:aa:3e:b4:47:
         70:58:f4:94:01:aa:bc:e3:25:3c:df:1a:66:e6:64:c6:2d:07:
         b7:c7:7a:ab:03:c3:39:21:e0:68:09:3c:be:fc:48:eb:7b:5e:
         26:09:b7:67:88:93:42:01:70:2d:13:6d:61:cb:01:ad:bf:62:
         40:80:cc:be:b1:f4:b8:76:f7:e9:96:ab:c2:09:ea:2f:92:bd:
         ad:cc:5a:01:eb:ca:8e:15:3d:a4:8c:ae:6e:73:e2:4b:3f:1a:
         37:79:76:9c:16:39:07:45:f3:a3:ee:eb:4d:da:06:57:79:76:
         e7:86:bb:da:83:12:f5:ca:7a:48:de:a5:6f:2d:60:a2:29:a5:
         40:a9:d5:b2:67:b2:30:5c:89:c4:88:da:d3:6e:e2:00:73:68:
         a7:a3:04:0c:bd:cf:07:ae:66:ef:07:9e:d9:73:3d:77:f6:ab:
         d6:62:00:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 07:05:57 2026 by rpki-client