Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/cd00198f-a530-490c-8ef5-5c31ac9b88ee/51fb0e07-26e9-31dd-a08f-08635cee94c7.roa
File:                     51fb0e07-26e9-31dd-a08f-08635cee94c7.roa (raw, json)
Hash identifier:          OmVfxLfsl2Hp2QnCv9WOrcXN7qmzQJyL52JPptHFgU0=
Subject key identifier:   4F:4E:17:AA:96:53:12:7F:F7:E9:52:77:73:1D:7E:2E:AF:3A:D2:D8
Certificate issuer:       /CN=cd00198f-a530-490c-8ef5-5c31ac9b88ee
Certificate serial:       010D0C9F4328584EA7879738538709BEF797C3C0
Authority key identifier: EE:B2:E7:54:17:4E:31:C9:7A:0D:15:E5:72:45:5D:67:1D:F3:92:BF
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/cd00198f-a530-490c-8ef5-5c31ac9b88ee.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/cd00198f-a530-490c-8ef5-5c31ac9b88ee/51fb0e07-26e9-31dd-a08f-08635cee94c7.roa
Signing time:             Wed 29 Jul 2026 01:00:12 +0000
ROA not before:           Wed 29 Jul 2026 01:00:12 +0000
ROA not after:            Tue 27 Oct 2026 01:00:12 +0000
asID:                     18540
IP address blocks:        199.16.32.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/cd00198f-a530-490c-8ef5-5c31ac9b88ee/cd00198f-a530-490c-8ef5-5c31ac9b88ee.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/cd00198f-a530-490c-8ef5-5c31ac9b88ee/cd00198f-a530-490c-8ef5-5c31ac9b88ee.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/cd00198f-a530-490c-8ef5-5c31ac9b88ee.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 30 Jul 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:a7:87:97:38:53:87:09:be:f7:97:c3:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cd00198f-a530-490c-8ef5-5c31ac9b88ee
        Validity
            Not Before: Jul 29 01:00:12 2026 GMT
            Not After : Oct 27 01:00:12 2026 GMT
        Subject: CN=2417d9a8-cacc-4585-9bc4-5bdbb8f94459
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:5c:09:95:3e:2e:95:ca:0b:f1:a7:2d:d1:2a:
                    60:92:27:d3:a6:fc:4c:e6:f5:8c:de:1a:15:94:ff:
                    dc:84:87:b7:38:88:1a:cf:bf:e1:11:d5:9a:d1:e7:
                    57:88:32:1b:5e:3a:c5:9f:e9:4b:56:1b:9f:4c:a8:
                    53:eb:9d:d6:ad:cc:5c:7f:b9:9b:3c:b5:a6:ad:29:
                    6d:37:96:02:22:f0:72:0b:45:57:07:fe:15:ee:bd:
                    2b:7f:f9:00:ac:bb:a4:82:80:cb:ec:67:8b:c4:55:
                    27:73:4b:56:c2:6c:02:a6:92:c0:30:ac:b7:02:1b:
                    e2:80:6a:8b:21:6e:9a:23:a7:bf:60:4c:96:65:bb:
                    36:a7:6a:5f:9f:bf:3f:cb:6e:cb:c7:95:3f:1b:61:
                    1e:6a:eb:a6:9b:76:e8:1a:0e:38:ed:5e:c0:ee:35:
                    fa:3a:cf:03:b2:84:35:6c:47:04:b3:32:85:c2:cc:
                    e0:1d:f8:9b:9c:ea:fc:1d:3d:48:20:96:84:76:50:
                    37:89:08:40:42:dd:8b:31:1b:84:e5:b4:39:34:2d:
                    6a:ff:f2:85:a8:6a:59:dc:e4:d0:61:f6:34:84:7b:
                    f1:03:c4:29:8f:d1:a5:4f:8f:f6:e1:2b:ef:f6:67:
                    de:d7:15:4d:0d:f1:fa:98:79:62:08:99:c4:70:0b:
                    12:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4F:4E:17:AA:96:53:12:7F:F7:E9:52:77:73:1D:7E:2E:AF:3A:D2:D8
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/cd00198f-a530-490c-8ef5-5c31ac9b88ee/51fb0e07-26e9-31dd-a08f-08635cee94c7.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/cd00198f-a530-490c-8ef5-5c31ac9b88ee/cd00198f-a530-490c-8ef5-5c31ac9b88ee.crl

            X509v3 Authority Key Identifier:
                keyid:EE:B2:E7:54:17:4E:31:C9:7A:0D:15:E5:72:45:5D:67:1D:F3:92:BF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/cd00198f-a530-490c-8ef5-5c31ac9b88ee.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.16.32.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3e:8c:8a:85:df:29:0e:51:01:a3:f0:52:77:02:d1:a7:1d:ae:
         8a:35:ce:8b:a7:0f:fb:97:05:b1:d0:8c:0d:9e:dc:e6:1b:ed:
         f2:5b:7a:3b:13:fa:8a:dd:84:6b:70:f1:f0:f5:d7:07:8c:26:
         c2:ea:ae:2f:45:74:62:2a:1b:34:ff:83:43:c5:af:1a:d3:0a:
         f8:8b:40:7d:8f:cf:93:64:33:4c:ed:39:e8:11:b7:8b:1b:36:
         3b:13:73:64:3c:6e:b2:06:d2:2a:3a:79:38:d3:82:56:7a:7e:
         3e:a3:75:90:63:3b:0f:08:a5:8e:22:d3:b9:45:84:98:1d:2b:
         36:c8:98:0b:03:6c:b9:f5:01:3d:c1:09:bf:dc:b1:5d:0e:54:
         b8:11:5f:71:ee:f7:d8:bd:7b:9a:d2:27:32:2c:ca:ba:e7:68:
         87:5c:5c:3f:c9:4d:13:5f:98:81:a6:a1:84:e6:fd:93:31:c4:
         f7:c6:3e:74:6e:32:c5:d9:54:90:a8:a0:ad:f5:36:8c:99:1e:
         07:11:fe:bd:c9:8b:6a:5b:95:06:be:bb:02:91:2f:98:6f:57:
         e0:c9:72:7d:cf:47:ce:12:34:bb:b5:37:7c:48:a2:a8:3c:ab:
         ba:ad:f4:a2:e5:ea:f4:d0:a1:81:ea:77:ad:90:c1:be:73:d5:
         00:e3:cf:a6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 04:38:20 2026 by rpki-client