Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/11111c75-ef67-41bd-b074-4c401bf74ccd/38d528e1-192e-368d-aa5e-b9ae9e2edab9.roa
File:                     38d528e1-192e-368d-aa5e-b9ae9e2edab9.roa (raw, json)
Hash identifier:          3Gyw8wPoHH35WTeBToFbdz//9ITm9oXhZ94vweQYCkQ=
Subject key identifier:   A7:01:75:5E:DD:84:B9:04:E6:EF:84:91:16:82:19:E4:E8:08:FF:D0
Certificate issuer:       /CN=11111c75-ef67-41bd-b074-4c401bf74ccd
Certificate serial:       010D0C9F4328584C93D2122DA6B23F5F28132310
Authority key identifier: 29:B8:F7:05:F8:67:60:30:DB:26:B9:66:F3:69:B3:C3:BF:59:90:FE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/11111c75-ef67-41bd-b074-4c401bf74ccd.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/11111c75-ef67-41bd-b074-4c401bf74ccd/38d528e1-192e-368d-aa5e-b9ae9e2edab9.roa
Signing time:             Mon 19 Jan 2026 14:00:38 +0000
ROA not before:           Mon 19 Jan 2026 14:00:38 +0000
ROA not after:            Sun 19 Apr 2026 13:00:38 +0000
asID:                     8047
IP address blocks:        199.190.64.0/18 maxlen: 18
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/11111c75-ef67-41bd-b074-4c401bf74ccd/11111c75-ef67-41bd-b074-4c401bf74ccd.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/11111c75-ef67-41bd-b074-4c401bf74ccd/11111c75-ef67-41bd-b074-4c401bf74ccd.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/11111c75-ef67-41bd-b074-4c401bf74ccd.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 04 Mar 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:93:d2:12:2d:a6:b2:3f:5f:28:13:23:10
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=11111c75-ef67-41bd-b074-4c401bf74ccd
        Validity
            Not Before: Jan 19 14:00:38 2026 GMT
            Not After : Apr 19 13:00:38 2026 GMT
        Subject: CN=62011948-e985-4e92-ae8e-e3f5074f11da
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:66:e3:33:38:d8:54:d5:6c:5c:36:ba:f9:3e:
                    21:b4:56:09:c2:9e:21:79:16:1e:3d:5c:e1:7e:8d:
                    93:81:9b:5d:4d:99:5b:a2:63:d9:1b:a8:e1:05:97:
                    95:71:e3:31:2a:1f:34:20:9b:07:ef:6c:ec:13:5c:
                    fd:23:15:c8:35:75:50:eb:c0:0b:d3:ba:dd:ba:c1:
                    97:59:f8:26:dc:4a:87:8f:3d:7a:a2:d1:0a:e0:7d:
                    20:e9:b0:4c:4b:3c:36:7f:98:73:73:a5:3b:fe:a6:
                    7e:ca:dc:ba:be:6e:0a:b2:63:e8:3c:f7:c1:91:b5:
                    be:ba:67:1a:66:50:c4:80:26:e6:4f:92:2a:15:10:
                    78:31:55:3b:4c:b0:83:91:ca:02:91:b5:61:cc:22:
                    00:b2:94:67:27:6b:3e:ac:67:0a:0e:2f:f6:1a:f8:
                    cb:2e:14:2a:39:ef:04:15:0c:c1:54:e5:9a:e3:6a:
                    05:0f:07:83:4b:f4:68:03:9b:d3:df:37:e2:c7:9b:
                    22:93:80:86:d2:7f:7c:e2:18:ab:db:dd:03:57:88:
                    1e:07:0a:3e:ea:f9:69:ce:3c:02:c0:d8:02:d5:41:
                    98:c6:3e:d4:73:72:12:81:76:8b:63:70:8b:60:dd:
                    37:3b:32:57:c0:ca:50:47:88:c5:60:00:bc:89:36:
                    26:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A7:01:75:5E:DD:84:B9:04:E6:EF:84:91:16:82:19:E4:E8:08:FF:D0
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/11111c75-ef67-41bd-b074-4c401bf74ccd/38d528e1-192e-368d-aa5e-b9ae9e2edab9.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/11111c75-ef67-41bd-b074-4c401bf74ccd/11111c75-ef67-41bd-b074-4c401bf74ccd.crl

            X509v3 Authority Key Identifier:
                keyid:29:B8:F7:05:F8:67:60:30:DB:26:B9:66:F3:69:B3:C3:BF:59:90:FE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/11111c75-ef67-41bd-b074-4c401bf74ccd.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.190.64.0/18

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         04:bc:14:e8:f0:91:60:94:01:75:70:e6:0b:f0:c6:49:c7:35:
         1c:c6:a8:43:33:8f:ad:b3:24:15:6f:df:e5:f8:9e:f0:1c:ec:
         97:8c:ce:e7:f6:40:ee:88:fc:ce:d4:a5:df:4b:89:6b:f4:d2:
         fd:05:c4:6d:5e:ed:40:65:85:25:9d:e0:a9:26:fc:34:7c:19:
         89:21:12:84:75:57:78:cf:76:8c:66:ce:3e:cc:fb:a9:39:70:
         2f:04:08:78:b7:27:1a:ff:fc:e4:50:c5:02:e6:2d:d0:46:c4:
         ea:30:de:cf:1e:cc:75:02:36:33:1d:a2:db:9b:1f:87:dc:ba:
         6c:82:f9:3a:7a:71:04:37:f1:85:74:eb:3a:61:50:0e:5e:0f:
         db:91:92:1b:74:7a:c4:06:6b:0e:04:5e:75:a9:b9:20:7e:aa:
         74:b2:9c:1d:80:05:f8:91:ce:c3:9d:dd:a6:59:81:6e:64:7f:
         0f:2c:d8:a5:47:62:be:2a:ff:15:ac:7a:06:50:a9:9f:c5:ba:
         6a:10:35:74:a0:eb:62:de:97:15:ba:d6:ac:1d:80:49:04:78:
         69:10:7c:25:bf:d5:cc:9b:58:60:ad:86:63:a9:56:e4:17:62:
         1f:4e:c4:74:86:70:27:ce:fd:d4:f7:fa:88:0a:fe:80:69:0e:
         4d:09:77:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 09:56:58 2026 by rpki-client