Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/dcf48eb5-c08a-4793-8dd8-a83f660c3f82/d90f067e-e5d9-327f-9510-ee2cdae10ad4.roa
File:                     d90f067e-e5d9-327f-9510-ee2cdae10ad4.roa (raw, json)
Hash identifier:          MQryRWRnTsIgA74Ce4N+9FYexHmAFvDBVW3a3z2/bn8=
Subject key identifier:   44:71:68:62:5D:0B:B1:39:1D:FD:90:35:B7:E7:CE:CF:DC:F7:B6:1D
Certificate issuer:       /CN=dcf48eb5-c08a-4793-8dd8-a83f660c3f82
Certificate serial:       010D0C9F4328584D80FFF8FF3DBEAA7C1AB69530
Authority key identifier: A7:E9:8D:68:1B:DE:B5:00:E7:0C:08:8C:F4:E1:1A:41:07:0B:63:5E
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/dcf48eb5-c08a-4793-8dd8-a83f660c3f82.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/dcf48eb5-c08a-4793-8dd8-a83f660c3f82/d90f067e-e5d9-327f-9510-ee2cdae10ad4.roa
Signing time:             Tue 14 Apr 2026 13:00:30 +0000
ROA not before:           Tue 14 Apr 2026 13:00:30 +0000
ROA not after:            Mon 13 Jul 2026 13:00:30 +0000
asID:                     62468
IP address blocks:        198.44.160.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/dcf48eb5-c08a-4793-8dd8-a83f660c3f82/dcf48eb5-c08a-4793-8dd8-a83f660c3f82.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/dcf48eb5-c08a-4793-8dd8-a83f660c3f82/dcf48eb5-c08a-4793-8dd8-a83f660c3f82.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/dcf48eb5-c08a-4793-8dd8-a83f660c3f82.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 18 Apr 2026 17:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:80:ff:f8:ff:3d:be:aa:7c:1a:b6:95:30
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=dcf48eb5-c08a-4793-8dd8-a83f660c3f82
        Validity
            Not Before: Apr 14 13:00:30 2026 GMT
            Not After : Jul 13 13:00:30 2026 GMT
        Subject: CN=7cae2a41-47a4-46ef-b5a3-c76b0f7f57c1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:ff:45:42:74:6d:54:d5:db:ca:06:82:17:bb:
                    b4:33:a5:1e:43:c8:49:a4:82:ca:92:27:90:fc:3d:
                    55:ae:4c:68:0a:b8:67:ff:17:e7:66:c3:9c:dc:de:
                    cb:e5:2a:fb:2d:37:ff:b3:80:c0:d7:17:9c:c8:90:
                    ee:ce:59:27:4e:8d:f6:b0:1f:24:de:ae:07:2d:0e:
                    9f:cc:7a:bd:93:ab:ed:d3:78:0c:eb:70:c2:f8:86:
                    5f:e5:85:14:bb:75:85:e2:0c:0a:a1:46:49:1c:85:
                    f6:77:df:92:88:8a:9d:a2:d6:f5:7d:cc:94:15:f6:
                    ee:54:40:79:a5:a6:63:98:8a:e5:0b:30:fe:d6:b5:
                    e5:61:a4:ae:4e:18:b9:0d:5c:db:5b:3d:b0:bb:c4:
                    1d:04:e8:88:c5:a7:cf:ea:e3:a8:22:89:80:a5:78:
                    d0:35:d8:c2:4d:5b:4e:32:8f:d1:79:fd:fe:84:6f:
                    39:e6:3d:52:01:ef:1b:97:5c:ce:be:04:79:2f:a6:
                    e2:7e:fe:8d:c4:f8:c5:aa:71:6a:09:57:ba:63:27:
                    de:95:a0:e2:d6:c4:4d:40:1c:a4:0c:c9:4f:ba:ab:
                    96:e8:8f:51:38:79:60:ef:b2:a4:67:4f:ea:5c:d9:
                    f0:3a:57:58:28:e3:1f:50:a2:e8:c3:76:6f:40:d0:
                    dc:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                44:71:68:62:5D:0B:B1:39:1D:FD:90:35:B7:E7:CE:CF:DC:F7:B6:1D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/dcf48eb5-c08a-4793-8dd8-a83f660c3f82/d90f067e-e5d9-327f-9510-ee2cdae10ad4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/dcf48eb5-c08a-4793-8dd8-a83f660c3f82/dcf48eb5-c08a-4793-8dd8-a83f660c3f82.crl

            X509v3 Authority Key Identifier:
                keyid:A7:E9:8D:68:1B:DE:B5:00:E7:0C:08:8C:F4:E1:1A:41:07:0B:63:5E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/dcf48eb5-c08a-4793-8dd8-a83f660c3f82.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  198.44.160.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6a:ee:db:d2:f9:84:cb:c1:b2:18:52:3d:53:3a:10:7f:71:65:
         eb:9b:e7:29:e0:34:ba:7c:35:16:89:58:ad:46:db:6a:81:77:
         88:17:64:0c:c7:1f:33:fa:fb:6d:90:24:d4:07:12:c7:88:9b:
         a0:3a:4e:03:ad:6a:ef:8d:f0:9b:8f:04:fb:dc:a2:f8:74:6e:
         84:7b:62:ba:ee:f7:01:3c:19:a1:51:b3:05:30:6d:f4:ff:53:
         f8:d3:72:86:6c:b9:2a:02:2e:ec:5e:b4:0a:86:16:81:52:17:
         b6:68:a3:de:e8:55:ec:2f:19:fb:de:0c:3e:fb:03:1d:92:1d:
         98:4f:0c:68:31:a2:b4:37:05:65:31:0b:e9:f4:be:a8:46:a1:
         dc:58:b9:fc:46:f1:ae:19:c1:ec:c7:c3:06:52:35:be:64:00:
         4a:29:33:f6:31:36:0b:b9:21:6b:26:ed:ed:7b:33:70:09:ad:
         ed:e9:41:8c:43:0a:37:67:16:c6:c0:be:5d:06:af:7b:b8:a2:
         79:a9:b6:1d:e9:4f:dc:3b:e6:c1:9c:44:d8:91:cd:85:97:fb:
         f7:7e:8c:57:10:52:fb:24:84:4b:5a:a7:03:74:b6:82:ad:04:
         2a:6d:66:06:4d:69:ba:b8:cd:0d:07:ee:9c:67:43:26:bf:ab:
         e8:95:37:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 17:47:05 2026 by rpki-client