Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/01f0ccb4-1b15-3ed8-baf1-e8601cf9c895.roa
File:                     01f0ccb4-1b15-3ed8-baf1-e8601cf9c895.roa (raw, json)
Hash identifier:          3TIzZDyFCGTvbCjfSR8YWT20bJRLUF/2WVa9EGnO1Vw=
Subject key identifier:   36:A4:CA:57:48:87:B6:CE:E3:CD:9D:FE:6B:C1:BC:F5:B0:07:5F:D7
Certificate issuer:       /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45
Certificate serial:       010D0C9F4328584DE2B5DA4B395E6D56029C7220
Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/01f0ccb4-1b15-3ed8-baf1-e8601cf9c895.roa
Signing time:             Tue 19 May 2026 13:00:32 +0000
ROA not before:           Tue 19 May 2026 13:00:32 +0000
ROA not after:            Mon 17 Aug 2026 13:00:32 +0000
asID:                     396571
IP address blocks:        198.41.0.4/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 14 Jun 2026 13:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:e2:b5:da:4b:39:5e:6d:56:02:9c:72:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45
        Validity
            Not Before: May 19 13:00:32 2026 GMT
            Not After : Aug 17 13:00:32 2026 GMT
        Subject: CN=e498fa5a-4cf5-4506-8ca1-ff67b1d27468
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:25:81:cd:a5:97:75:61:b1:c5:fc:6d:33:18:
                    50:3b:bb:10:60:17:e6:c8:8c:04:a0:63:9f:f5:2a:
                    84:a7:95:92:2e:b8:c6:18:7c:e3:62:e6:f2:7b:64:
                    be:7e:52:18:ef:67:ad:c1:e8:0a:cc:c9:d0:2d:09:
                    ab:7c:c5:75:6c:d7:40:99:be:c4:16:ca:bf:34:9c:
                    75:bc:65:6f:87:74:d8:e2:83:26:60:10:dc:33:f3:
                    a6:dd:9e:19:a6:5d:ab:6a:d5:9a:09:c1:4a:69:f5:
                    ad:8c:7f:7d:a4:9f:2b:69:7f:4f:14:d1:48:ce:b8:
                    98:3e:20:e0:1c:99:9a:26:76:a6:72:a0:70:08:fa:
                    bc:95:d2:2b:9a:2d:bf:58:f4:02:91:00:2c:f8:d8:
                    98:a0:39:fd:18:20:01:d3:ae:52:5b:2d:72:2d:61:
                    a0:be:50:a7:40:39:f2:54:84:8e:37:31:a6:a0:7a:
                    40:1f:dd:c1:6e:90:94:ed:c3:fd:79:93:2b:24:ac:
                    5a:78:55:3a:86:19:3e:65:50:d7:a5:3a:2f:09:8e:
                    b6:f4:53:65:14:ed:38:da:0e:ed:6a:26:28:62:08:
                    75:6b:33:9a:cf:9c:00:b9:71:cc:82:5d:51:79:80:
                    40:46:58:a3:c6:de:c3:d1:0d:d3:d0:21:4d:44:b5:
                    63:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                36:A4:CA:57:48:87:B6:CE:E3:CD:9D:FE:6B:C1:BC:F5:B0:07:5F:D7
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/01f0ccb4-1b15-3ed8-baf1-e8601cf9c895.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl

            X509v3 Authority Key Identifier:
                keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  198.41.0.4/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         12:6a:ad:be:b3:f6:3c:8f:bf:9c:22:e5:32:46:43:48:85:21:
         db:5d:93:44:8c:79:96:89:c2:9f:8a:b1:1b:3d:d1:71:fc:68:
         03:7c:bd:54:ee:bc:17:25:18:d0:08:23:61:28:0e:36:15:af:
         ca:a3:df:ea:0b:01:62:3b:e7:04:23:91:12:3b:5b:fa:14:7a:
         17:80:a6:c4:01:bd:36:d2:38:cd:c1:ad:65:a0:15:57:53:f6:
         49:f5:bf:31:ad:98:1e:4e:69:ec:10:24:fe:4c:23:f6:41:83:
         f8:e3:06:0a:e1:98:8f:d1:b8:4a:ca:58:a8:ab:6a:1d:77:fe:
         00:46:4f:f4:79:b3:a2:24:9a:a5:67:3e:57:87:08:0f:82:53:
         fb:8d:be:8b:24:a0:2b:fc:35:c2:bb:5d:91:b4:a0:7f:f2:76:
         20:8c:c8:b4:3c:58:a3:d8:02:b6:02:c7:67:23:84:02:16:aa:
         7f:46:46:d4:f1:97:3c:73:71:c0:96:b9:3e:06:4e:87:e2:07:
         50:05:d7:7a:98:3f:24:69:3d:27:e0:ab:3f:1f:f4:2d:64:11:
         49:c4:47:f3:6e:2f:52:63:8c:22:bd:20:4b:df:34:02:26:9a:
         6c:03:bf:fa:25:fe:35:75:df:7b:81:85:c6:01:cb:8a:df:da:
         9c:d6:b1:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 13:07:06 2026 by rpki-client