Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/aed98eff-e4f0-38df-8a36-3576a3282f4d.roa
File:                     aed98eff-e4f0-38df-8a36-3576a3282f4d.roa (raw, json)
Hash identifier:          jhKFKTBDkERMiicghdkWaXzs3C8S9U6Y65e5EqX+t+E=
Subject key identifier:   88:FF:EC:80:27:9B:9B:81:93:07:6D:45:CE:E1:AE:43:13:58:27:B2
Certificate issuer:       /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45
Certificate serial:       010D0C9F4328584D0217907F8DDE88A324DCC100
Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/aed98eff-e4f0-38df-8a36-3576a3282f4d.roa
Signing time:             Sat 28 Feb 2026 02:00:32 +0000
ROA not before:           Sat 28 Feb 2026 02:00:32 +0000
ROA not after:            Fri 29 May 2026 01:00:32 +0000
asID:                     397206
IP address blocks:        198.41.0.4/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 03 Mar 2026 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:02:17:90:7f:8d:de:88:a3:24:dc:c1:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45
        Validity
            Not Before: Feb 28 02:00:32 2026 GMT
            Not After : May 29 01:00:32 2026 GMT
        Subject: CN=fe98364e-60f2-4100-b9be-2df18171952b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8f:16:9c:ef:58:af:3f:63:91:78:e8:be:b9:84:
                    25:fa:10:3e:9f:72:a1:2c:9f:be:a8:3f:76:53:a6:
                    4d:0d:18:0d:ab:46:3d:d5:1b:b1:ea:ee:81:bf:c5:
                    17:b7:71:94:9a:35:04:4b:0c:a3:6f:3b:71:a8:12:
                    59:80:f5:0d:cd:9c:2e:1a:56:90:50:2d:1e:7e:81:
                    0a:4c:42:97:71:c1:48:98:71:48:f9:54:d0:60:df:
                    0d:6a:a0:6a:e9:ec:52:35:48:06:b5:26:59:5c:6c:
                    1e:af:d8:31:cc:75:08:46:40:fc:ce:86:0c:86:30:
                    f4:b1:7f:64:d3:84:fe:66:3d:e5:7e:08:d6:85:42:
                    58:41:90:97:b9:34:7c:d4:c4:dc:2d:8a:f9:d5:9b:
                    95:fe:6d:63:99:79:58:e1:25:b8:6b:84:33:f0:70:
                    51:bd:4d:da:b3:f6:da:06:ad:12:66:d7:7e:e2:72:
                    8b:ca:7c:ac:93:c7:ef:6a:dc:6c:04:40:12:aa:2f:
                    4f:78:08:f4:56:f7:29:01:7c:45:73:23:f9:bf:f4:
                    c0:32:75:d9:6a:14:15:c8:40:2e:26:98:12:9e:26:
                    63:05:b5:1b:e3:fe:a0:e1:38:9a:00:74:a4:e2:22:
                    ea:3f:21:ef:be:a7:3e:ec:6f:65:95:eb:ed:71:36:
                    55:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                88:FF:EC:80:27:9B:9B:81:93:07:6D:45:CE:E1:AE:43:13:58:27:B2
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/aed98eff-e4f0-38df-8a36-3576a3282f4d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl

            X509v3 Authority Key Identifier:
                keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  198.41.0.4/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4d:cb:35:bb:e6:7b:17:2e:c2:49:07:11:c6:5a:ca:50:af:c3:
         c3:a5:de:f9:a5:65:ed:c8:22:09:7b:51:5c:af:05:2f:92:ed:
         a8:37:83:6b:03:1f:c9:f4:a1:b8:9f:51:c2:2e:e2:34:fc:db:
         87:9e:71:78:ba:f9:c9:72:10:a8:e4:4d:e0:cb:b8:c1:e5:c4:
         ae:4c:7f:ce:2c:fd:b4:65:7f:64:68:cc:c3:e1:e4:45:3e:09:
         d9:a4:fc:72:8f:4a:1f:2a:9a:a3:ee:8d:13:c2:12:50:bf:eb:
         b0:b3:f9:73:fc:de:11:c7:67:7e:bc:48:5c:43:7a:b8:df:0b:
         6d:1e:ee:93:b3:2a:43:e5:12:11:03:86:6b:be:d5:65:87:ca:
         63:9d:f6:d8:d0:be:fc:09:c5:9b:d2:fe:c6:75:6e:cd:7b:f7:
         6e:47:79:90:3b:6b:85:cf:50:fd:50:88:b4:2b:2a:6b:e2:2b:
         a7:03:9c:b1:3f:e7:48:ac:f5:b6:db:5e:46:f6:33:22:0e:31:
         95:cb:f2:1c:ae:bf:9e:d1:f4:7c:ab:36:cd:71:5e:cb:89:e9:
         0c:c0:63:f9:8f:df:cb:be:b3:10:d2:31:a2:d3:c5:cc:6c:0a:
         ea:47:df:e6:bf:45:60:81:03:5c:3e:48:47:c0:db:05:d8:e6:
         9b:80:97:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 01:58:49 2026 by rpki-client