Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/78f63286-5cf2-388a-a7e8-9fc3bfc0816e.roa
File:                     78f63286-5cf2-388a-a7e8-9fc3bfc0816e.roa (raw, json)
Hash identifier:          oilG1uT1SqGFGZLt+zexl4tB0hKmrOmd5MRTyMhnB1I=
Subject key identifier:   17:9E:2F:1D:76:29:7E:1A:56:02:B1:EA:69:91:A7:2F:2E:82:10:07
Certificate issuer:       /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45
Certificate serial:       010D0C9F4328584DFA70A3E0A0A7DC80990C2FA0
Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/78f63286-5cf2-388a-a7e8-9fc3bfc0816e.roa
Signing time:             Thu 28 May 2026 01:00:10 +0000
ROA not before:           Thu 28 May 2026 01:00:10 +0000
ROA not after:            Wed 26 Aug 2026 01:00:10 +0000
asID:                     397196
IP address blocks:        198.41.0.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 14 Jun 2026 13:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:fa:70:a3:e0:a0:a7:dc:80:99:0c:2f:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45
        Validity
            Not Before: May 28 01:00:10 2026 GMT
            Not After : Aug 26 01:00:10 2026 GMT
        Subject: CN=435ee811-f4e8-4a0c-849a-41da0a7970f3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:3c:50:e7:b6:4f:db:70:e5:c6:5b:0a:fd:7a:
                    ab:d9:0f:04:af:ba:c8:0d:d7:1d:7f:3c:6f:c8:b3:
                    75:f8:20:35:30:cd:ba:aa:48:e3:91:0e:8c:e5:b8:
                    47:73:db:c0:48:9d:30:95:24:3e:b9:76:0e:d4:df:
                    6c:80:97:49:ca:c3:7a:01:75:7c:ea:d6:f7:7e:2e:
                    91:72:c8:d3:32:be:81:f8:12:17:de:77:f0:6c:0f:
                    78:4d:55:ea:f8:0d:3b:db:1c:4e:08:11:c4:e2:c7:
                    17:8b:85:7a:cb:3e:ef:22:ef:89:98:03:e2:b1:8c:
                    6e:45:15:4e:a9:b3:fb:2f:b2:17:f1:97:50:10:39:
                    43:0c:80:c8:a3:4d:3c:cf:73:a9:b8:ce:07:87:87:
                    fe:05:4f:52:16:42:65:95:e7:ec:69:a6:13:3f:a4:
                    8f:fc:f4:ce:c9:fa:85:15:ea:c4:3c:1b:8e:5a:d5:
                    37:c8:e3:78:c0:45:34:e0:be:11:81:e4:0a:8c:05:
                    3e:91:0a:b9:67:73:8f:4c:fc:a6:17:4b:ad:5a:72:
                    55:a3:37:27:d8:9a:96:15:11:9f:31:34:23:e2:be:
                    56:22:00:b3:4b:59:36:83:58:b3:85:48:ee:60:ae:
                    86:10:0e:34:7c:15:f6:c2:d4:bc:cd:c0:dc:6a:61:
                    67:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                17:9E:2F:1D:76:29:7E:1A:56:02:B1:EA:69:91:A7:2F:2E:82:10:07
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/78f63286-5cf2-388a-a7e8-9fc3bfc0816e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl

            X509v3 Authority Key Identifier:
                keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  198.41.0.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         11:6d:2e:33:35:53:f3:db:9e:1d:78:40:1e:a2:50:d0:ef:a3:
         77:61:27:0a:4f:3b:2c:b2:ac:ff:78:d1:34:0b:2e:7a:4a:df:
         af:16:9a:cf:3a:d0:f7:84:b4:0a:c3:9c:75:9c:40:3f:46:23:
         ec:8a:5f:00:a5:01:1f:e8:6c:23:42:a1:09:6b:27:52:0a:f8:
         00:9a:7b:1f:07:e6:30:fc:ac:b8:84:89:1b:56:7f:c8:60:9c:
         bd:ad:f4:c5:6d:5a:68:fd:26:d6:dd:a9:62:9e:29:54:bf:4e:
         4c:18:31:e7:7d:3c:c4:7e:27:7f:60:a6:34:4d:ee:20:a7:6e:
         bc:55:b1:85:63:4c:82:9f:88:19:b4:5c:aa:8c:01:3e:a5:17:
         33:04:f1:58:2f:e2:49:95:6b:01:c6:5c:1b:cd:01:fe:83:9d:
         43:93:7a:3a:60:5e:86:3a:f5:2f:3f:b5:ba:77:3b:6a:f9:4c:
         50:58:4b:9d:e7:91:1e:a2:c1:29:49:9f:74:3f:95:03:de:e8:
         7c:57:95:7b:86:bb:69:cc:9f:34:1e:ca:8d:1f:0a:df:90:68:
         7f:93:50:80:88:3d:ad:36:9c:2e:fe:1f:d1:49:71:a3:d8:9b:
         df:1e:94:36:e4:90:93:bb:ed:25:da:40:e6:d8:fd:f9:9e:55:
         71:5e:de:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 14:27:17 2026 by rpki-client