Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/0407bc30-a500-36bb-8d65-948441a8aafa.roa
File:                     0407bc30-a500-36bb-8d65-948441a8aafa.roa (raw, json)
Hash identifier:          ZD4+1JGqQBO0ecKTDAs67xKWfGJJGISQ9bhjABd0F94=
Subject key identifier:   FD:27:F1:85:27:42:C5:76:75:AE:51:ED:B2:C0:71:07:5E:0D:D8:EB
Certificate issuer:       /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45
Certificate serial:       010D0C9F4328584DE2B5D2DF2AE024C030A64FC0
Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/0407bc30-a500-36bb-8d65-948441a8aafa.roa
Signing time:             Tue 19 May 2026 13:00:32 +0000
ROA not before:           Tue 19 May 2026 13:00:32 +0000
ROA not after:            Mon 17 Aug 2026 13:00:32 +0000
asID:                     36625
IP address blocks:        198.41.0.10/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 14 Jun 2026 13:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:e2:b5:d2:df:2a:e0:24:c0:30:a6:4f:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45
        Validity
            Not Before: May 19 13:00:32 2026 GMT
            Not After : Aug 17 13:00:32 2026 GMT
        Subject: CN=4fbafb5f-50d5-476d-8016-4ab45f1a64e6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:53:26:a4:a9:23:17:cb:f8:ae:9d:e0:b4:7c:
                    d8:fe:78:55:ec:e9:66:a8:9b:67:8a:7d:33:c1:a7:
                    5f:d8:b8:d6:12:6b:8b:16:73:0d:5c:ac:86:3d:01:
                    19:ae:e6:bb:b7:17:0f:c4:51:e9:b6:1a:ee:dd:1e:
                    fe:c2:dd:7e:1b:9e:87:8a:e0:8b:b3:a7:61:e2:bc:
                    82:b7:d2:73:56:81:78:78:8a:71:15:36:7a:0c:6c:
                    ab:2c:e6:9b:3c:fa:af:d3:be:ff:6b:a0:43:f2:ef:
                    a9:48:96:f0:6f:f2:15:58:e8:57:86:f5:12:c8:e5:
                    77:67:8d:6d:b0:9d:c3:a9:04:3f:b8:86:6e:a5:bc:
                    98:a4:0f:a5:be:71:03:ef:64:21:a5:7b:eb:2e:5e:
                    ae:f6:93:e8:55:06:b2:1e:24:f9:39:b6:e0:d7:ea:
                    6d:b2:27:3a:25:4c:ed:50:d1:e6:d5:cf:ad:d4:09:
                    a0:25:64:94:35:cd:c9:f5:8c:99:77:3c:b3:36:7b:
                    da:a1:57:ee:51:b2:07:59:f3:37:8a:b1:e8:5c:58:
                    0c:6c:1f:72:d3:6a:c6:8c:a7:1b:38:43:c5:b5:9d:
                    e3:a7:b8:f7:62:e3:a0:9d:2e:ea:8a:c7:52:1e:5d:
                    aa:92:92:83:0d:d0:3f:25:bd:68:12:16:0a:6f:d7:
                    5b:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FD:27:F1:85:27:42:C5:76:75:AE:51:ED:B2:C0:71:07:5E:0D:D8:EB
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/0407bc30-a500-36bb-8d65-948441a8aafa.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl

            X509v3 Authority Key Identifier:
                keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  198.41.0.10/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         78:ae:43:66:28:0c:5f:a1:f7:76:c1:cf:b6:dd:c0:b4:32:67:
         9e:7a:03:09:7b:2c:0e:f3:63:9c:b5:8b:83:1f:3f:d2:df:5c:
         c1:7d:99:41:93:88:43:45:e5:91:ab:00:c1:99:85:97:42:0c:
         bb:01:22:a8:26:2a:f9:c9:ce:39:2f:f1:e3:0a:c7:bd:a9:61:
         ef:02:11:8a:39:2a:4b:fb:31:9d:3b:6c:17:e4:3a:96:9a:fe:
         bb:d0:62:4d:43:e4:11:a5:01:76:71:d7:a6:b3:1d:a1:88:97:
         c5:d4:ee:3e:4b:2d:c9:05:b8:51:3c:06:3a:d1:38:31:a2:e8:
         ce:8f:0b:5d:94:46:7b:d4:30:53:c8:a6:09:41:35:e5:41:07:
         f4:41:b4:4a:e6:3f:9b:e1:9b:29:b2:ea:33:59:72:06:79:d3:
         5b:9f:d0:51:4a:55:b9:37:bc:f7:25:38:26:e7:99:ff:69:ec:
         80:05:75:22:88:cc:c0:f1:b9:fb:d9:66:c4:fd:5d:20:7c:6b:
         d7:11:01:5d:c8:5e:a9:0e:99:57:1c:0f:58:ce:1a:9e:a9:c2:
         13:b2:c3:64:59:cf:44:7d:b8:1b:22:3d:ca:aa:d6:ad:69:17:
         cc:3b:f0:34:4b:0f:d2:45:46:7d:9f:26:53:70:a6:0f:04:f7:
         e8:a3:81:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 14:26:15 2026 by rpki-client