Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4be51e82-7cc5-4500-a0ff-cc3a9d5e3fb7/2938d50c-8e48-36b6-993b-1b4431994e3b.roa
File:                     2938d50c-8e48-36b6-993b-1b4431994e3b.roa (raw, json)
Hash identifier:          TlAA/aQYWjWQpJu9pllzuDmkL2Bdb9AEEpIhilyD23c=
Subject key identifier:   39:B3:73:5A:4A:A5:B1:E7:0C:AE:67:CF:29:41:3A:2D:25:86:57:8C
Certificate issuer:       /CN=4be51e82-7cc5-4500-a0ff-cc3a9d5e3fb7
Certificate serial:       010D0C9F4328584D7B6A83FB9BFA53949BB9B898
Authority key identifier: F7:C8:46:F1:D6:FE:04:68:EA:AC:40:E7:0B:41:CA:28:F8:25:DA:59
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4be51e82-7cc5-4500-a0ff-cc3a9d5e3fb7.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4be51e82-7cc5-4500-a0ff-cc3a9d5e3fb7/2938d50c-8e48-36b6-993b-1b4431994e3b.roa
Signing time:             Sun 12 Apr 2026 13:00:30 +0000
ROA not before:           Sun 12 Apr 2026 13:00:30 +0000
ROA not after:            Sat 11 Jul 2026 13:00:30 +0000
asID:                     53589
IP address blocks:        199.188.220.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4be51e82-7cc5-4500-a0ff-cc3a9d5e3fb7/4be51e82-7cc5-4500-a0ff-cc3a9d5e3fb7.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4be51e82-7cc5-4500-a0ff-cc3a9d5e3fb7/4be51e82-7cc5-4500-a0ff-cc3a9d5e3fb7.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4be51e82-7cc5-4500-a0ff-cc3a9d5e3fb7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 18 Apr 2026 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:7b:6a:83:fb:9b:fa:53:94:9b:b9:b8:98
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4be51e82-7cc5-4500-a0ff-cc3a9d5e3fb7
        Validity
            Not Before: Apr 12 13:00:30 2026 GMT
            Not After : Jul 11 13:00:30 2026 GMT
        Subject: CN=4349bdaa-0909-4b66-aca2-2cd902ba6bc2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e2:b3:54:f4:1a:69:74:db:dd:c4:eb:36:6a:fa:
                    3e:f2:90:d7:de:94:f8:1c:f1:39:ac:0f:9b:a3:64:
                    b6:a4:15:6b:e6:f7:be:dd:74:04:41:18:22:ca:d5:
                    fd:6a:a6:eb:c4:47:18:c2:ed:01:99:1b:66:f6:2c:
                    6c:b4:9f:74:46:67:9a:08:91:d0:eb:72:87:a3:77:
                    5b:0c:53:86:de:a5:8d:7a:3f:fb:c7:93:dc:a8:4f:
                    8e:81:c2:ce:6c:4a:dc:c8:82:82:a5:1d:dd:5a:82:
                    f0:4e:ab:61:7e:ba:79:3d:56:0e:bf:b3:0a:71:4d:
                    b4:bc:e8:e9:8f:25:96:4e:42:06:f3:3d:a6:5d:b8:
                    83:ee:05:03:fe:4a:5b:e2:0f:c2:73:92:d8:c5:14:
                    7c:05:5a:45:60:43:7f:3e:69:59:87:e0:0b:65:55:
                    6e:d9:39:f1:6f:8f:35:35:d9:89:b2:51:84:5c:49:
                    bf:f3:a2:a3:fe:47:02:cc:f8:f4:6b:65:55:b7:da:
                    df:33:93:52:67:53:90:20:b5:b7:16:ea:08:6f:a7:
                    57:07:68:2f:d2:a4:19:85:90:06:8c:0c:0f:0f:c2:
                    69:7f:9e:1c:ac:29:ae:b5:1c:18:0c:93:35:20:12:
                    2f:a2:0a:f9:b1:0f:dc:72:d2:d3:b6:10:21:5a:24:
                    53:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                39:B3:73:5A:4A:A5:B1:E7:0C:AE:67:CF:29:41:3A:2D:25:86:57:8C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4be51e82-7cc5-4500-a0ff-cc3a9d5e3fb7/2938d50c-8e48-36b6-993b-1b4431994e3b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4be51e82-7cc5-4500-a0ff-cc3a9d5e3fb7/4be51e82-7cc5-4500-a0ff-cc3a9d5e3fb7.crl

            X509v3 Authority Key Identifier:
                keyid:F7:C8:46:F1:D6:FE:04:68:EA:AC:40:E7:0B:41:CA:28:F8:25:DA:59

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4be51e82-7cc5-4500-a0ff-cc3a9d5e3fb7.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.188.220.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         c6:79:07:e8:8b:43:d9:92:c3:8d:8a:b3:b5:bc:9d:89:08:9d:
         d8:54:12:47:26:65:eb:2d:16:cb:1f:47:6e:4e:33:2e:ee:6c:
         70:75:39:89:0d:3c:54:99:78:23:04:74:70:9a:33:ae:f5:e6:
         7d:a5:fc:f9:bb:e0:f9:52:13:3f:0e:e6:74:28:eb:91:a0:44:
         2f:06:b7:61:10:ac:48:e8:ab:bd:1c:ac:5c:3a:29:27:da:b3:
         22:cf:b4:44:be:2e:b5:ec:15:4e:d1:a0:05:e2:39:d5:a0:3c:
         8a:cf:07:38:b6:64:b1:22:8a:88:b3:84:23:2d:2b:fc:cc:11:
         92:b4:6d:ed:a7:fc:a3:6b:f6:9c:84:17:d4:46:5b:2f:2e:dc:
         af:71:22:f9:a9:3b:31:ee:c2:d3:c9:bc:7c:e4:ba:ac:1c:b5:
         af:4c:a9:11:c9:02:87:f5:33:25:41:de:78:fb:d5:19:a0:da:
         05:03:97:a8:96:8f:56:31:32:3a:17:63:05:7a:0c:39:5c:f1:
         56:e4:8d:70:fa:32:82:d3:4c:b1:93:2a:a5:3e:9b:8c:ae:e8:
         25:51:8f:0d:4b:ba:c6:c8:93:46:47:5e:81:60:46:ba:fb:ca:
         00:03:c3:ec:44:95:db:d4:06:1e:42:1c:7e:03:20:28:62:e5:
         78:62:66:20
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 15:17:04 2026 by rpki-client