Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/e3604708-3e0f-4ea6-b151-4d2f7408d326/44a8cd31-e584-3882-8103-ac73cff30d52.roa
File:                     44a8cd31-e584-3882-8103-ac73cff30d52.roa (raw, json)
Hash identifier:          A0JpCNOS1ib5lojP7xo6dOE2Cqkz572kIQASsRDjLM0=
Subject key identifier:   04:3D:C9:37:D1:49:43:43:7D:F2:EB:38:8C:F6:78:5A:35:7B:48:D5
Certificate issuer:       /CN=e3604708-3e0f-4ea6-b151-4d2f7408d326
Certificate serial:       010D0C9F4328584E9BE51D7A7046B923DEEFF980
Authority key identifier: E4:B9:55:5F:75:21:90:9A:18:32:0D:38:54:E4:21:BA:27:60:E9:14
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/e3604708-3e0f-4ea6-b151-4d2f7408d326.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/e3604708-3e0f-4ea6-b151-4d2f7408d326/44a8cd31-e584-3882-8103-ac73cff30d52.roa
Signing time:             Fri 24 Jul 2026 21:00:12 +0000
ROA not before:           Fri 24 Jul 2026 21:00:12 +0000
ROA not after:            Thu 22 Oct 2026 21:00:12 +0000
asID:                     40788
IP address blocks:        162.255.112.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/e3604708-3e0f-4ea6-b151-4d2f7408d326/e3604708-3e0f-4ea6-b151-4d2f7408d326.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/e3604708-3e0f-4ea6-b151-4d2f7408d326/e3604708-3e0f-4ea6-b151-4d2f7408d326.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/e3604708-3e0f-4ea6-b151-4d2f7408d326.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 30 Jul 2026 13:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:9b:e5:1d:7a:70:46:b9:23:de:ef:f9:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e3604708-3e0f-4ea6-b151-4d2f7408d326
        Validity
            Not Before: Jul 24 21:00:12 2026 GMT
            Not After : Oct 22 21:00:12 2026 GMT
        Subject: CN=380647a1-34d5-45e0-9987-c30c15344189
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:86:8e:41:2d:ab:39:ee:1d:45:f3:0a:46:ed:0e:
                    00:dd:d1:9e:3a:06:fe:14:3d:89:5e:e5:f1:16:07:
                    0f:48:69:05:23:24:ef:2a:c7:1c:60:af:5e:e9:f4:
                    95:2e:5e:7b:cd:a0:29:e2:18:e9:aa:bd:4e:72:31:
                    22:7c:bc:1c:49:e6:cb:51:b7:22:14:57:f5:d6:0f:
                    78:ba:9b:40:69:1f:b3:af:27:c5:67:50:36:87:4b:
                    4c:9e:61:2c:6b:87:2f:e7:9c:e4:76:18:18:93:f7:
                    7a:ff:40:70:0c:47:1b:41:9d:fb:3b:62:29:8a:60:
                    76:59:e9:31:d6:7c:3e:9e:24:04:f4:fd:4d:ad:5b:
                    58:08:ae:00:20:4e:b1:7e:b5:e6:de:11:3a:9c:5a:
                    ae:96:a8:cc:b3:95:70:67:92:2c:d5:2b:f0:d9:fb:
                    5b:81:d2:c8:2d:52:cc:35:08:26:34:b4:b1:ad:2c:
                    da:12:75:e6:84:fb:4d:31:ea:12:93:f5:2c:02:89:
                    52:e5:8e:da:1c:bc:50:8e:05:82:ff:0f:86:27:1b:
                    be:93:45:41:f3:d7:a6:9d:24:6e:9d:51:61:49:dc:
                    54:e6:58:af:ad:7d:09:6f:8d:9a:ce:a0:fa:11:cf:
                    bd:20:c9:04:3b:95:bb:4d:80:8b:b4:5e:b1:29:fa:
                    6a:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                04:3D:C9:37:D1:49:43:43:7D:F2:EB:38:8C:F6:78:5A:35:7B:48:D5
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/e3604708-3e0f-4ea6-b151-4d2f7408d326/44a8cd31-e584-3882-8103-ac73cff30d52.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/e3604708-3e0f-4ea6-b151-4d2f7408d326/e3604708-3e0f-4ea6-b151-4d2f7408d326.crl

            X509v3 Authority Key Identifier:
                keyid:E4:B9:55:5F:75:21:90:9A:18:32:0D:38:54:E4:21:BA:27:60:E9:14

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/e3604708-3e0f-4ea6-b151-4d2f7408d326.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  162.255.112.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         17:f7:98:eb:be:2d:8c:ba:c7:a5:75:f7:e4:40:31:72:00:17:
         a1:c3:30:35:81:e3:f4:74:cc:15:88:25:ca:e7:67:48:44:f4:
         16:39:66:91:36:27:ec:99:f2:61:71:81:88:66:e8:7d:ca:d4:
         94:66:08:f4:28:3c:69:0d:71:00:1a:99:f9:45:d7:57:f1:4f:
         d1:56:6a:7e:09:47:dd:88:c4:d1:a3:25:2c:00:0c:83:df:c1:
         5e:04:de:cc:2a:9a:17:11:d5:6b:c0:28:04:16:37:38:ef:a8:
         10:94:35:d5:8d:00:25:0a:7b:c5:75:d1:a2:d8:21:6d:06:a4:
         cc:d5:17:ac:84:ab:a5:e8:11:ae:8f:52:b5:ff:32:1c:93:4b:
         7c:d3:d6:fa:58:a9:13:82:40:5b:0e:f3:0c:06:b6:d4:03:8e:
         41:29:c9:6d:38:fb:1a:04:b6:e5:95:eb:e3:25:67:59:a1:cb:
         6d:4e:55:3f:7c:12:0a:62:a9:0e:e0:83:18:11:74:aa:af:54:
         6a:6c:24:c6:45:a8:7a:79:e8:d9:48:c0:57:67:78:85:a2:72:
         20:e8:c5:44:54:34:14:05:fa:8e:58:41:7d:98:67:7c:9e:b2:
         2f:7d:9e:59:48:d8:3c:15:0a:0e:d3:73:77:77:78:e1:50:71:
         4d:b0:d2:a5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 03:50:54 2026 by rpki-client