Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/b38f5b7a-6c56-4279-aa50-3499b1fb606b/2051c8ea-7621-3a10-ba3f-9404c1267467.roa
File:                     2051c8ea-7621-3a10-ba3f-9404c1267467.roa (raw, json)
Hash identifier:          kiQNm4+wPnbxc8yEiRf81Bf5O48zt8qz2ZuJOBz3d88=
Subject key identifier:   5A:D5:32:A6:43:29:D1:19:F1:71:57:11:05:2B:54:5B:45:05:E3:96
Certificate issuer:       /CN=b38f5b7a-6c56-4279-aa50-3499b1fb606b
Certificate serial:       010D0C9F4328584F6F22E9D017D00BA15F7381C0
Authority key identifier: 04:13:C3:E2:D5:03:AC:7D:22:1A:21:48:5A:DC:22:8B:A4:87:B2:D5
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/b38f5b7a-6c56-4279-aa50-3499b1fb606b.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/b38f5b7a-6c56-4279-aa50-3499b1fb606b/2051c8ea-7621-3a10-ba3f-9404c1267467.roa
Signing time:             Thu 08 Oct 2026 13:00:12 +0000
ROA not before:           Thu 08 Oct 2026 13:00:12 +0000
ROA not after:            Wed 06 Jan 2027 14:00:12 +0000
asID:                     40628
IP address blocks:        199.184.200.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/b38f5b7a-6c56-4279-aa50-3499b1fb606b/b38f5b7a-6c56-4279-aa50-3499b1fb606b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/b38f5b7a-6c56-4279-aa50-3499b1fb606b/b38f5b7a-6c56-4279-aa50-3499b1fb606b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/b38f5b7a-6c56-4279-aa50-3499b1fb606b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 13 Oct 2026 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:6f:22:e9:d0:17:d0:0b:a1:5f:73:81:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b38f5b7a-6c56-4279-aa50-3499b1fb606b
        Validity
            Not Before: Oct  8 13:00:12 2026 GMT
            Not After : Jan  6 14:00:12 2027 GMT
        Subject: CN=e1ccebe9-a437-4af0-af46-ef0eb3eb2255
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:82:3d:1d:72:1a:f9:c3:c0:03:19:d9:36:2a:db:
                    87:8b:e9:c1:dd:33:31:94:c2:75:6e:39:e8:df:70:
                    53:c2:e2:91:01:a1:89:83:6a:b0:35:2d:9e:9b:1f:
                    b6:3a:66:1f:50:91:60:3b:21:f4:63:c6:8d:22:47:
                    a3:b1:f0:87:98:7c:c9:de:45:e2:13:92:a1:29:e6:
                    0f:0d:bb:8b:e8:fd:6e:5b:fc:12:7c:85:3d:b4:09:
                    a4:9f:59:e3:a0:71:75:fe:46:67:5b:b4:dd:74:a7:
                    c9:56:7a:b3:91:5a:39:ca:5c:97:0f:d7:b7:24:09:
                    e4:35:6f:e8:a9:b3:1b:17:70:41:6f:86:5b:d0:05:
                    cb:c6:55:73:71:ef:15:65:a2:4a:c2:0a:2f:d5:6b:
                    43:78:d3:9e:3d:21:21:fe:84:ef:2b:42:60:a0:00:
                    ca:e7:2a:c6:64:f4:bf:05:98:b2:99:b2:b9:dc:83:
                    52:7d:b9:a3:e6:72:89:04:19:b1:a9:29:d3:20:59:
                    8c:c2:5f:53:18:b4:b7:57:55:7d:77:82:28:cc:47:
                    67:1d:ab:1f:3c:e1:ef:22:81:db:8b:e5:9d:3b:cf:
                    3b:06:6d:67:eb:85:95:e0:0b:66:53:cd:75:c0:22:
                    68:c3:9a:ae:bd:d1:c6:1b:98:64:1f:d7:a4:f9:f5:
                    5d:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5A:D5:32:A6:43:29:D1:19:F1:71:57:11:05:2B:54:5B:45:05:E3:96
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/b38f5b7a-6c56-4279-aa50-3499b1fb606b/2051c8ea-7621-3a10-ba3f-9404c1267467.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/b38f5b7a-6c56-4279-aa50-3499b1fb606b/b38f5b7a-6c56-4279-aa50-3499b1fb606b.crl

            X509v3 Authority Key Identifier:
                keyid:04:13:C3:E2:D5:03:AC:7D:22:1A:21:48:5A:DC:22:8B:A4:87:B2:D5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/b38f5b7a-6c56-4279-aa50-3499b1fb606b.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.184.200.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         47:dd:6a:46:b4:6a:4d:5c:6f:a8:4c:2d:98:bb:51:95:f3:cf:
         fe:c3:fe:a5:84:41:80:95:ee:fd:a6:6c:08:d4:92:05:e8:14:
         e0:44:e5:95:16:27:e5:cd:07:af:98:e4:1b:35:af:ee:0f:be:
         96:b2:3b:f4:a9:4a:bd:4c:c8:22:69:e9:0c:c1:37:1f:ea:1d:
         e7:45:f4:44:c8:85:71:ff:80:f0:1b:b1:f3:95:eb:97:42:05:
         24:0e:c6:f5:c0:7a:be:1a:85:cd:92:98:ea:e1:22:a4:d0:b9:
         1a:af:bc:c7:e5:98:58:f2:e8:ef:71:6f:21:c1:dc:4e:52:c5:
         94:ef:40:4a:fd:c4:e5:e9:fb:b2:1e:e9:01:1b:25:44:9d:d0:
         1f:8e:40:80:77:25:4d:ae:a1:a9:3d:76:7b:3d:ac:d7:77:ae:
         5d:13:7b:9b:9f:61:e6:cd:01:53:c4:04:a2:91:2e:cb:7f:97:
         30:dc:06:9b:6d:66:6b:b2:ce:cd:25:77:da:f7:a0:8d:49:6a:
         63:42:ac:c4:5e:07:d0:4b:2e:08:c5:ee:51:ac:47:3e:74:87:
         25:71:9a:9c:cf:b4:89:3b:20:39:5d:ac:57:a6:6a:0f:88:72:
         17:45:aa:99:66:6a:60:a5:cc:b0:d8:50:23:bb:c7:03:0c:52:
         0a:4a:e7:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 11 20:18:32 2026 by rpki-client