Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/7b8994b8-8426-3cdb-84ec-894afbaf4419.roa
File:                     7b8994b8-8426-3cdb-84ec-894afbaf4419.roa (raw, json)
Hash identifier:          czaibq/mFtaVYZcMm/7I+MH6idXozFPqT3DiUr3NVd0=
Subject key identifier:   EA:F2:90:10:22:0C:9B:8D:CB:09:A2:FA:C6:E8:29:65:80:04:44:A4
Certificate issuer:       /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45
Certificate serial:       010D0C9F4328584DFA706CBE831E043CD981BB00
Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/7b8994b8-8426-3cdb-84ec-894afbaf4419.roa
Signing time:             Thu 28 May 2026 01:00:10 +0000
ROA not before:           Thu 28 May 2026 01:00:10 +0000
ROA not after:            Wed 26 Aug 2026 01:00:10 +0000
asID:                     396561
IP address blocks:        198.41.0.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 14 Jun 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:fa:70:6c:be:83:1e:04:3c:d9:81:bb:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45
        Validity
            Not Before: May 28 01:00:10 2026 GMT
            Not After : Aug 26 01:00:10 2026 GMT
        Subject: CN=f56055af-d364-456e-a8ae-69dc229484db
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:86:f1:15:47:94:7f:dd:1e:bf:b8:2c:9b:3b:
                    c6:d0:65:fd:49:90:65:81:29:7e:c4:24:59:53:67:
                    c4:2d:2e:f2:64:97:e0:41:3e:f4:36:76:12:50:b3:
                    be:94:02:fd:e6:a9:96:44:f9:d3:dc:10:5f:34:cd:
                    29:25:63:9f:51:a4:a1:84:c3:d9:79:70:74:5a:05:
                    1c:9a:ee:3a:0c:cf:2a:9c:16:32:49:7e:e6:af:15:
                    25:61:5b:2e:4d:b4:f7:04:f2:25:e7:7f:2b:63:8c:
                    8b:ff:a3:e4:99:ae:43:17:65:a9:b0:4a:e8:b6:94:
                    2a:71:16:f3:e4:1e:e5:7d:5f:22:e7:5c:17:49:89:
                    57:b0:81:69:57:d2:04:39:85:d1:bb:c6:29:69:b2:
                    ac:dd:66:07:65:90:f9:55:e1:e7:80:d6:12:0e:5b:
                    9a:a6:6f:61:13:0a:03:49:88:c5:ec:fa:86:b9:60:
                    99:72:ca:7b:47:e0:c2:c2:a5:a1:6b:46:9b:45:58:
                    59:ab:a5:3b:a6:10:6c:07:bf:e0:54:f2:14:21:80:
                    2b:a6:f8:46:6d:e2:5b:0d:2c:60:c2:2f:a7:ba:d3:
                    cb:a4:dc:bd:9e:f0:38:43:6d:be:78:9f:df:fa:a0:
                    f2:45:3c:ec:78:38:38:56:d3:f8:1a:b9:1f:13:a7:
                    a4:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EA:F2:90:10:22:0C:9B:8D:CB:09:A2:FA:C6:E8:29:65:80:04:44:A4
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/7b8994b8-8426-3cdb-84ec-894afbaf4419.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl

            X509v3 Authority Key Identifier:
                keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  198.41.0.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4c:7c:0b:62:b3:62:bb:88:74:b7:35:88:31:86:eb:38:05:16:
         b6:50:c2:74:e3:cc:dd:94:da:af:ac:63:df:3a:c3:d7:8a:60:
         5e:5e:29:06:1f:b2:96:bf:aa:36:72:e6:29:4d:3a:d4:40:db:
         c0:25:73:cd:d3:f9:0c:38:59:39:31:cb:60:8b:9b:d3:7f:93:
         39:2b:14:a0:b5:94:9f:33:e5:52:c7:f2:b3:d7:46:b4:65:ca:
         6d:4b:fb:28:54:6f:6a:bb:16:aa:9c:f7:3b:d5:b8:f6:cd:b0:
         6b:a3:5c:0a:d3:b1:65:df:50:3c:c5:e0:7b:55:c0:39:23:4c:
         10:0e:f8:8e:ab:77:0c:55:ff:ae:fc:58:fd:43:07:69:d3:2a:
         56:43:a2:0e:f5:a3:af:ec:bd:dd:d7:d2:5f:39:a5:e2:13:67:
         ca:55:ea:fd:cf:a0:93:99:02:4b:15:4a:4f:7d:c3:59:54:2f:
         9e:4f:2f:58:f2:a9:a0:1d:5f:87:32:ea:10:56:31:45:c0:9f:
         b8:d9:57:96:d0:a2:30:13:56:a1:39:62:75:6c:1d:aa:bf:d6:
         3f:c9:10:ee:5b:be:f7:27:52:5e:9d:e8:9b:7f:21:1d:67:d4:
         79:77:dc:db:b7:24:2d:93:ac:b2:ec:89:3b:40:ee:a3:e5:82:
         41:91:a1:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 15:54:14 2026 by rpki-client