Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/9545bdb0-3d4b-3ac7-8375-5b394dbb3755.roa
File:                     9545bdb0-3d4b-3ac7-8375-5b394dbb3755.roa (raw, json)
Hash identifier:          UjnzVAk+3y3bnSaDxCOzuMzeg4D0srR4FQFFm3iEQ3w=
Subject key identifier:   CD:0C:66:52:A5:8D:A1:B6:AF:BC:66:30:B4:21:FA:82:DB:F1:0B:FD
Certificate issuer:       /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45
Certificate serial:       010D0C9F4328584EA7902A5D84C0E9F3CDDA9300
Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/9545bdb0-3d4b-3ac7-8375-5b394dbb3755.roa
Signing time:             Wed 29 Jul 2026 01:00:12 +0000
ROA not before:           Wed 29 Jul 2026 01:00:12 +0000
ROA not after:            Tue 27 Oct 2026 01:00:12 +0000
asID:                     22547
IP address blocks:        198.41.0.10/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 30 Jul 2026 13:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:a7:90:2a:5d:84:c0:e9:f3:cd:da:93:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45
        Validity
            Not Before: Jul 29 01:00:12 2026 GMT
            Not After : Oct 27 01:00:12 2026 GMT
        Subject: CN=b4f6d23c-407d-4d95-868a-4538359bcd55
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:1a:95:f1:5c:33:70:bb:fd:2b:34:22:22:d1:
                    f7:5e:0a:eb:56:27:e1:a4:46:28:97:42:36:7d:1c:
                    c7:1b:46:40:cc:df:73:a2:06:d2:23:ac:2a:84:0a:
                    99:ac:d4:9e:82:ec:6c:0b:68:aa:e8:f0:09:3b:f8:
                    3b:40:55:0b:40:0d:f4:5d:55:e2:53:3d:31:84:e3:
                    41:f1:67:e6:86:e4:36:ec:7c:29:8a:ca:54:43:e1:
                    86:63:2d:d5:80:d2:79:51:4f:e4:4d:c8:43:b9:e0:
                    67:b5:cc:0e:8d:54:7d:1d:96:5b:b8:57:60:ae:3d:
                    06:d5:af:88:c8:17:6b:f6:6b:2c:aa:31:17:db:88:
                    1c:a2:96:82:7b:45:0a:f2:d9:95:17:d9:b6:29:54:
                    5c:65:14:e4:76:1f:89:e2:70:38:2c:78:17:0f:b1:
                    73:23:09:d9:13:da:2b:eb:9e:b1:d9:7a:8a:47:ef:
                    4b:8f:22:dc:62:17:67:8b:d1:8e:5f:ac:a7:c8:f8:
                    58:b5:40:bf:cb:7f:f2:e6:b0:b3:3d:98:84:1d:c7:
                    63:33:52:dc:f7:65:ef:2e:62:34:53:55:a9:18:17:
                    39:13:91:29:f9:11:ce:c6:a6:c3:da:3d:e4:02:b2:
                    7b:c3:98:5e:1e:bb:d0:4a:da:b0:c7:2d:e8:21:52:
                    f9:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CD:0C:66:52:A5:8D:A1:B6:AF:BC:66:30:B4:21:FA:82:DB:F1:0B:FD
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/9545bdb0-3d4b-3ac7-8375-5b394dbb3755.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl

            X509v3 Authority Key Identifier:
                keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  198.41.0.10/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3c:ec:91:1d:6d:96:c2:8e:6d:ba:74:94:e4:8f:e6:75:df:d4:
         19:98:95:2f:a2:6b:f9:3a:b9:8c:42:2f:af:28:f6:99:d5:47:
         ce:57:5f:1c:3c:f2:3d:44:a1:06:c6:1b:af:db:cc:cc:3a:16:
         24:f8:de:20:37:6e:2f:ae:f4:8d:17:74:4d:e5:2f:77:6d:8e:
         02:4e:d5:ed:71:ec:81:47:33:60:cd:30:f4:b5:05:e2:a8:ff:
         39:5d:e1:fa:87:e9:7c:be:e7:b4:a3:79:f3:ce:9a:fa:b6:fd:
         aa:d6:ed:6d:40:bd:bf:4b:43:53:23:bc:fd:75:cf:fe:b4:24:
         50:43:77:38:a3:20:44:bc:fd:67:52:ec:e2:2f:2f:04:d3:d2:
         09:6e:25:5a:85:fb:8b:8f:9a:ef:32:c1:42:18:82:de:cd:cb:
         ea:e3:35:8e:0c:64:70:bd:ea:34:f2:6f:94:01:54:b7:0c:49:
         32:97:e7:70:93:e1:bd:da:d6:b9:63:cd:56:10:c3:29:3b:b8:
         6d:8c:eb:53:1f:2f:fd:9e:63:1f:45:67:34:53:94:2c:ff:45:
         4e:34:25:e8:fc:4a:3d:29:1d:8d:e6:b8:88:74:f8:20:c2:48:
         79:43:08:3f:ff:cb:21:15:ef:77:e1:46:29:8c:6d:f9:1a:80:
         e1:f8:ed:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 11:00:41 2026 by rpki-client