Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/b25fdfb4-a681-38c9-94f5-3875e3a880ce.roa
File:                     b25fdfb4-a681-38c9-94f5-3875e3a880ce.roa (raw, json)
Hash identifier:          0PAxyQvNQuiAgj2kYPOd1JyYwK62wUMPQrh3INphyN4=
Subject key identifier:   29:75:68:1E:62:F8:1E:34:12:0E:E4:A8:6D:10:80:EC:18:5F:85:21
Certificate issuer:       /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45
Certificate serial:       010D0C9F4328584D02179FC1EDC67F1CC7873300
Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/b25fdfb4-a681-38c9-94f5-3875e3a880ce.roa
Signing time:             Sat 28 Feb 2026 02:00:32 +0000
ROA not before:           Sat 28 Feb 2026 02:00:32 +0000
ROA not after:            Fri 29 May 2026 01:00:32 +0000
asID:                     396583
IP address blocks:        198.41.0.10/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 03 Mar 2026 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:02:17:9f:c1:ed:c6:7f:1c:c7:87:33:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45
        Validity
            Not Before: Feb 28 02:00:32 2026 GMT
            Not After : May 29 01:00:32 2026 GMT
        Subject: CN=530f9a5f-a8c8-4861-97c0-e5fff9ca1f7c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:cc:86:b8:f1:dc:b7:30:99:08:1a:7d:68:77:
                    c2:45:69:26:62:df:18:0f:3f:91:f6:56:e4:66:b6:
                    d4:9b:03:40:79:c1:c4:f6:70:21:75:e1:36:02:e4:
                    1b:4a:49:4c:02:80:c8:e3:0d:bd:74:b6:ea:ea:db:
                    10:c2:a9:f2:86:02:fe:c3:e0:23:bb:67:6f:e6:7c:
                    4f:21:27:8e:66:00:5f:ab:e4:5f:61:df:93:7a:5e:
                    82:c4:8e:40:67:9b:7b:d1:09:30:32:e6:8b:3c:b9:
                    35:00:23:df:26:51:6f:75:0d:95:3a:9f:b8:82:80:
                    d3:db:f4:e3:28:48:13:38:e3:16:76:cd:c9:e3:c5:
                    31:c7:89:ae:7c:f0:34:81:ad:09:43:84:61:2b:c3:
                    5d:2a:90:04:d6:0b:f0:cf:4e:e1:e3:a8:98:18:20:
                    5e:51:73:df:6d:5b:69:7f:c2:db:09:86:82:a8:31:
                    a1:b2:c7:cb:8a:2c:29:88:42:47:28:2e:95:a1:fd:
                    e0:da:16:54:71:81:24:87:5f:1c:a7:f6:17:b2:e9:
                    5e:7a:8b:7f:b5:69:67:8b:72:3c:e7:b4:be:89:f8:
                    e8:07:53:55:50:be:4a:65:b5:a2:66:c5:ee:6e:da:
                    e2:6a:59:43:25:db:0b:e1:68:1f:90:bf:77:86:da:
                    b8:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                29:75:68:1E:62:F8:1E:34:12:0E:E4:A8:6D:10:80:EC:18:5F:85:21
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/b25fdfb4-a681-38c9-94f5-3875e3a880ce.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl

            X509v3 Authority Key Identifier:
                keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  198.41.0.10/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7a:cf:43:16:a8:0f:39:d8:1c:44:78:43:0b:40:bc:f1:e6:4a:
         be:13:ff:99:ca:d0:18:8d:63:b6:2c:6d:e2:fa:ec:76:a1:18:
         28:d0:f2:45:e7:97:a9:81:6b:8d:83:42:48:d0:33:e4:21:7f:
         a9:a7:8e:c5:4a:00:39:f3:be:f9:37:b9:4c:76:76:48:79:30:
         b3:66:bb:ca:e3:74:ed:11:d1:a8:42:ae:fb:45:b4:5b:3a:39:
         3c:b1:a0:96:40:d1:2f:1b:c9:61:11:2c:55:dc:3d:a3:88:a8:
         a3:12:4a:67:b2:27:f4:89:93:54:de:87:06:be:a3:df:30:48:
         95:1d:d2:57:e3:52:ea:ad:75:53:01:2d:4a:f3:a3:7d:f2:77:
         7e:9d:60:47:8d:f8:69:66:1b:11:ad:1c:2b:3b:9e:8f:41:ab:
         46:10:c7:4a:97:52:bb:9f:53:46:58:53:42:ef:bd:10:4c:95:
         31:11:54:cc:4b:43:d9:6c:c2:f4:ca:5f:85:f8:68:7d:60:46:
         8d:58:23:74:a9:7f:d7:90:18:9d:cb:44:a7:8a:c2:cc:f4:1d:
         47:e5:e7:84:75:26:9c:13:2b:db:fc:59:a2:e3:9f:57:19:9c:
         21:83:72:3d:0f:46:c3:d8:85:da:f7:a7:21:b7:45:3a:06:d6:
         37:3b:7e:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 05:59:01 2026 by rpki-client