Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/e08fe6be-b7cf-3298-b47d-d5cae020135e.roa
File:                     e08fe6be-b7cf-3298-b47d-d5cae020135e.roa (raw, json)
Hash identifier:          eQm7ZIC3+45R59B1WKgpzh8xAmv8fxj+xqAeslV/hHo=
Subject key identifier:   0D:13:70:D1:E9:AF:C5:4D:4A:80:3B:5C:88:C1:CD:17:36:1E:A0:97
Certificate issuer:       /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45
Certificate serial:       010D0C9F4328584DE2B5EE5BA2CDFDF2D5EAD7C0
Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/e08fe6be-b7cf-3298-b47d-d5cae020135e.roa
Signing time:             Tue 19 May 2026 13:00:32 +0000
ROA not before:           Tue 19 May 2026 13:00:32 +0000
ROA not after:            Mon 17 Aug 2026 13:00:32 +0000
asID:                     396576
IP address blocks:        198.41.0.4/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 14 Jun 2026 13:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:e2:b5:ee:5b:a2:cd:fd:f2:d5:ea:d7:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45
        Validity
            Not Before: May 19 13:00:32 2026 GMT
            Not After : Aug 17 13:00:32 2026 GMT
        Subject: CN=049d64a9-7049-49ae-bbc4-e04b6dcf00da
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:47:6e:6e:b3:96:9d:3e:a3:8c:7f:75:6c:2a:
                    72:25:24:31:9b:06:95:6c:c8:d1:bc:96:a7:f8:54:
                    00:9a:78:1b:a8:3e:51:07:94:ab:67:14:64:80:3e:
                    20:b7:e0:95:6e:9f:b3:e5:01:84:49:02:6b:c5:41:
                    2e:c5:70:49:7a:de:64:55:39:f6:ed:63:d5:88:8e:
                    17:9a:12:2d:e0:39:f8:cb:1f:9e:9d:ca:ae:3b:32:
                    a9:34:99:c2:73:7b:b4:9f:5b:f9:73:03:d3:cb:0a:
                    02:ce:6f:6d:6b:ce:5f:49:64:42:fe:9d:25:ee:7c:
                    f8:8b:e8:b6:a6:e0:e3:98:34:d2:d7:c8:cc:63:a5:
                    35:21:04:89:bf:fc:3d:84:85:05:12:6e:24:47:23:
                    c6:88:0a:1a:8c:b1:5e:98:0d:f7:88:12:2f:63:22:
                    b3:15:6f:5f:40:c6:a4:b8:30:32:ab:d2:e1:21:86:
                    73:30:18:90:79:18:0a:c3:91:17:e9:75:3c:d5:69:
                    fe:47:0d:45:03:e0:28:fa:ce:a1:cc:d6:68:81:28:
                    39:13:5d:1b:37:c4:e4:c4:2e:74:11:36:67:e9:29:
                    20:12:60:e3:2b:1f:97:9f:df:78:b8:0e:24:08:f8:
                    31:cd:1a:8d:57:82:26:16:7a:6a:74:f6:c0:f8:15:
                    0c:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0D:13:70:D1:E9:AF:C5:4D:4A:80:3B:5C:88:C1:CD:17:36:1E:A0:97
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/e08fe6be-b7cf-3298-b47d-d5cae020135e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl

            X509v3 Authority Key Identifier:
                keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  198.41.0.4/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6b:9c:87:29:7c:80:26:81:0c:3d:d2:19:22:24:6e:26:47:07:
         67:61:80:3b:b7:7c:bc:13:99:ac:86:da:e6:29:7d:43:06:fa:
         d8:5b:64:2f:b6:16:4e:57:a3:27:86:9f:db:45:f1:ea:c1:42:
         48:82:97:7c:36:75:d6:c1:b9:4e:0d:7e:e8:67:b0:a6:55:30:
         a8:47:f3:46:0b:ab:af:07:d7:57:bc:46:46:a1:07:cd:63:f7:
         d8:69:b6:fc:78:1a:1e:86:91:94:e3:64:b6:f4:b3:da:7a:75:
         b5:3c:da:9a:1d:b4:8c:9c:d6:41:ba:de:42:93:51:c3:3b:df:
         88:0c:bd:5b:b1:41:8a:65:b9:19:b8:6b:12:db:7a:0e:61:6e:
         95:45:cb:f6:7b:2b:95:ab:c2:2e:68:fe:d4:4b:eb:06:9e:61:
         f6:44:9b:23:ea:73:32:0d:a0:0a:aa:cc:9e:82:dd:3b:79:3d:
         bd:d1:c7:f4:28:98:f9:4a:9e:c6:ec:03:65:f9:3d:e2:0c:1b:
         20:98:10:d5:d7:2c:1f:e7:59:30:17:67:61:1e:5a:4a:2e:42:
         90:eb:9d:e3:0f:b0:39:2f:01:c1:c3:7f:83:d6:ff:cc:f5:12:
         11:a7:c9:16:c0:14:b2:4b:67:ac:f7:b4:18:cf:0e:8a:a5:a8:
         2b:8f:61:a2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 14:26:40 2026 by rpki-client