Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d48adb2e-2ac1-4d2c-9445-29c27f527e84/cafc629d-bfcd-3f04-9ea0-55c37ea7a701.roa
File:                     cafc629d-bfcd-3f04-9ea0-55c37ea7a701.roa (raw, json)
Hash identifier:          jtiiPu5xSWZz8yR/t3jbhbu8D/xeURruHDnMcTFsmPI=
Subject key identifier:   75:66:EE:5E:FD:57:0B:5E:74:CD:FC:A2:29:34:BF:1B:00:AD:DD:09
Certificate issuer:       /CN=d48adb2e-2ac1-4d2c-9445-29c27f527e84
Certificate serial:       010D0C9F4328584E9D4A61B859EE905B756C5B00
Authority key identifier: 91:06:36:31:C7:11:93:34:4A:CB:C5:7D:C3:2A:DB:C7:53:7B:ED:18
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d48adb2e-2ac1-4d2c-9445-29c27f527e84.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d48adb2e-2ac1-4d2c-9445-29c27f527e84/cafc629d-bfcd-3f04-9ea0-55c37ea7a701.roa
Signing time:             Sat 25 Jul 2026 09:00:11 +0000
ROA not before:           Sat 25 Jul 2026 09:00:11 +0000
ROA not after:            Fri 23 Oct 2026 09:00:11 +0000
asID:                     396982
IP address blocks:        199.244.98.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d48adb2e-2ac1-4d2c-9445-29c27f527e84/d48adb2e-2ac1-4d2c-9445-29c27f527e84.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d48adb2e-2ac1-4d2c-9445-29c27f527e84/d48adb2e-2ac1-4d2c-9445-29c27f527e84.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d48adb2e-2ac1-4d2c-9445-29c27f527e84.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 01 Aug 2026 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:9d:4a:61:b8:59:ee:90:5b:75:6c:5b:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d48adb2e-2ac1-4d2c-9445-29c27f527e84
        Validity
            Not Before: Jul 25 09:00:11 2026 GMT
            Not After : Oct 23 09:00:11 2026 GMT
        Subject: CN=a37cf3ab-48d7-4b7a-bef9-bb6fe1f4688f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:87:fb:de:b3:e5:49:b1:0e:12:19:5c:da:20:9d:
                    3a:dc:3a:f1:01:1c:86:cd:72:13:ba:72:20:4f:df:
                    ed:a2:7d:14:8b:04:d3:9e:45:1a:ad:b0:de:02:ce:
                    51:86:a9:fa:dd:bc:4f:15:c4:9f:fa:25:73:1e:04:
                    47:86:36:ea:b6:8d:dc:4a:8c:97:f8:dc:77:2e:5c:
                    6c:a3:72:2f:9d:e8:45:b0:ab:00:0c:8b:e8:3e:79:
                    67:9f:61:20:da:4c:d5:26:4e:0a:3e:42:4d:63:4b:
                    9f:e4:8c:21:71:aa:c8:0a:4f:61:47:60:ae:be:8e:
                    13:86:b2:a4:0a:65:b9:0c:50:9e:23:6b:77:a1:70:
                    5c:84:81:1f:fc:36:15:83:56:be:91:8e:72:3a:2e:
                    44:9b:9f:86:5c:97:a4:5f:07:39:80:f4:f9:99:a2:
                    70:0a:46:5d:e2:cc:dd:84:c2:db:7c:d0:1e:c4:7d:
                    f2:36:d9:a3:71:bb:ab:f3:47:b3:e4:1e:6e:70:1a:
                    72:a7:c5:fe:4a:7e:87:f1:39:bf:6c:b0:4a:9b:03:
                    79:a6:db:72:34:bb:66:4b:a0:bd:f9:9a:11:d0:27:
                    73:a1:10:2d:be:8f:ef:31:f6:63:f1:2a:6c:74:5b:
                    7b:bc:f9:95:83:b2:a4:d7:f1:4c:26:91:2c:e2:20:
                    74:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                75:66:EE:5E:FD:57:0B:5E:74:CD:FC:A2:29:34:BF:1B:00:AD:DD:09
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d48adb2e-2ac1-4d2c-9445-29c27f527e84/cafc629d-bfcd-3f04-9ea0-55c37ea7a701.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d48adb2e-2ac1-4d2c-9445-29c27f527e84/d48adb2e-2ac1-4d2c-9445-29c27f527e84.crl

            X509v3 Authority Key Identifier:
                keyid:91:06:36:31:C7:11:93:34:4A:CB:C5:7D:C3:2A:DB:C7:53:7B:ED:18

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d48adb2e-2ac1-4d2c-9445-29c27f527e84.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.244.98.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4d:06:18:90:4f:e4:1b:2e:8c:93:e4:cf:02:1a:b8:2a:ef:e3:
         9f:e8:21:30:b8:40:34:da:f9:56:7e:c1:4a:9b:fa:f9:c6:b6:
         3e:9e:55:5f:46:c3:5c:17:e6:43:47:24:f5:a1:83:0a:20:de:
         ec:d9:ba:57:46:70:56:00:0b:62:cf:9a:4b:cb:a5:63:f2:2d:
         20:14:be:59:f4:ac:f2:f4:11:97:f6:45:64:5e:a0:52:2b:ae:
         c2:a3:50:5d:ad:38:54:8a:72:66:96:57:20:29:12:5a:6f:85:
         9f:85:15:ab:ab:51:4d:56:dc:96:2c:cf:ef:f4:c4:ac:ff:c1:
         fe:a7:a4:48:2a:84:a5:58:61:06:df:2b:29:79:68:c9:e7:da:
         2f:04:0e:28:00:6f:b9:c6:de:4b:13:8e:73:5f:9d:a6:51:be:
         03:dc:2a:a9:fe:9a:c8:5e:7d:0c:03:0c:a9:26:a7:98:88:a9:
         79:c4:4f:3e:04:8d:1b:77:ab:58:25:d0:29:bd:23:2d:39:aa:
         24:09:69:e5:20:04:c2:de:de:a3:9c:33:0d:c4:27:5f:55:42:
         29:dd:f6:44:8f:81:4c:9b:94:a3:7d:da:fa:b7:48:7a:86:d6:
         ad:0b:c8:a6:99:e5:a1:09:94:ad:b8:11:fe:a4:f9:01:99:3e:
         28:c1:ca:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 30 06:51:50 2026 by rpki-client