Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/91b4095e-904f-3943-ab28-8bc6e597a5ce.roa
File:                     91b4095e-904f-3943-ab28-8bc6e597a5ce.roa (raw, json)
Hash identifier:          3INqE7xskpcoTDvs+sFoxycT4HbRqwb7Cw371tvYNBA=
Subject key identifier:   38:0A:E9:96:A3:CC:47:58:F4:A9:8D:00:3F:3D:A9:91:18:4C:B3:C2
Certificate issuer:       /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45
Certificate serial:       010D0C9F4328584DE2B5F13B497C6AC3BF572780
Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/91b4095e-904f-3943-ab28-8bc6e597a5ce.roa
Signing time:             Tue 19 May 2026 13:00:32 +0000
ROA not before:           Tue 19 May 2026 13:00:32 +0000
ROA not after:            Mon 17 Aug 2026 13:00:32 +0000
asID:                     397195
IP address blocks:        198.41.0.10/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 14 Jun 2026 13:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:e2:b5:f1:3b:49:7c:6a:c3:bf:57:27:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45
        Validity
            Not Before: May 19 13:00:32 2026 GMT
            Not After : Aug 17 13:00:32 2026 GMT
        Subject: CN=6540db12-a4e7-4944-afdf-04f04efabbd7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:fd:cf:cd:ab:fe:83:79:7c:1c:fa:7f:93:30:
                    95:a3:11:90:1f:73:2f:4c:1b:d2:d9:6d:9c:24:7e:
                    70:6f:1e:d8:bf:ee:f1:b1:0b:91:a4:85:1c:19:9f:
                    e3:0c:ef:5d:e5:8e:f2:2e:84:7d:86:db:46:78:3d:
                    25:39:92:e1:b6:46:e3:ca:06:06:7d:58:7f:39:8b:
                    9b:e6:3f:66:03:58:ed:d1:26:f7:2a:e2:6f:39:25:
                    c0:d2:9c:bc:6e:f9:8f:53:ea:67:a4:a0:01:95:fe:
                    d6:bc:5e:04:1a:c7:d6:3c:8b:e4:ca:27:a8:e7:4b:
                    c8:07:0f:64:34:d5:f2:c7:af:05:9c:13:e0:36:08:
                    c1:ea:23:41:0e:79:20:6d:ce:2e:a6:97:b6:06:39:
                    cd:73:22:ca:b1:50:4c:93:6a:a5:a4:4e:ac:1f:d8:
                    7c:c2:e4:16:d0:75:5b:e2:4e:ab:4f:47:89:1a:2e:
                    ba:45:8f:b2:16:79:ef:a0:38:c0:c5:c2:9c:5b:ab:
                    18:f4:5a:56:83:17:ac:16:b0:87:b7:6c:e4:50:8a:
                    84:fe:c6:75:8d:5a:77:2b:43:8b:96:41:30:97:7f:
                    e6:54:af:24:19:d7:14:f9:b2:d6:50:01:7e:54:d6:
                    64:3c:ea:73:12:80:9b:49:06:c0:b1:e8:26:61:20:
                    fc:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                38:0A:E9:96:A3:CC:47:58:F4:A9:8D:00:3F:3D:A9:91:18:4C:B3:C2
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/91b4095e-904f-3943-ab28-8bc6e597a5ce.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl

            X509v3 Authority Key Identifier:
                keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  198.41.0.10/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         88:73:13:f5:dc:48:99:ee:33:31:62:4e:9a:a3:79:8a:68:a7:
         06:22:28:e5:f7:aa:5c:fe:44:ee:49:a1:a4:03:9a:05:51:9c:
         ea:03:d9:b7:3c:29:df:03:e7:da:b3:ce:10:c1:81:41:c4:7f:
         aa:47:9a:70:84:63:7b:3f:b1:c4:06:59:f7:2b:b5:25:1a:eb:
         8b:57:f6:8e:1c:d7:dd:97:98:da:19:c5:8a:68:f7:ca:f6:66:
         33:11:29:dc:12:ee:83:fb:51:46:17:76:32:08:c2:68:4a:a9:
         a7:c2:5c:73:ff:0b:90:21:a3:4e:89:d8:c9:9f:a6:57:d1:15:
         d5:2f:d3:09:21:36:aa:b9:5e:2f:24:f9:3f:72:b2:74:63:6a:
         bb:b3:70:25:05:8b:7b:42:4e:de:a4:04:2e:08:dd:d5:e0:84:
         dd:8a:8c:88:3f:b0:66:63:2c:13:77:ec:a7:f0:f4:11:13:f4:
         0e:84:a7:e4:c0:0d:a2:06:0f:28:d8:a6:06:d4:eb:52:20:32:
         a0:eb:1f:73:96:aa:bd:64:11:54:e6:8f:34:34:7f:40:16:2a:
         40:f5:5e:08:79:ac:1b:c4:81:80:69:85:e7:1c:2f:41:2b:1d:
         f1:61:e5:e2:81:f9:38:77:eb:48:8e:e7:98:bf:33:8d:fe:2d:
         1f:17:66:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 15:10:49 2026 by rpki-client