Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/22dfbc20-b48d-4ad3-9ada-aaa1a88570dc/2792a309-34c1-310f-9fc5-c7181c58a235.roa
File:                     2792a309-34c1-310f-9fc5-c7181c58a235.roa (raw, json)
Hash identifier:          YmV7+YM5BAVHSFdWm81fdCqZgjAGM8g0p0Tr5NS20Cg=
Subject key identifier:   C5:EE:A4:1F:34:3A:27:5B:C1:B9:FE:E7:28:79:3E:22:82:FA:8B:96
Certificate issuer:       /CN=22dfbc20-b48d-4ad3-9ada-aaa1a88570dc
Certificate serial:       010D0C9F4328584D746FC0101D28DFA1403BC600
Authority key identifier: D4:24:69:AB:E4:65:51:C8:5E:22:B8:EF:B2:A7:BA:52:F1:62:65:80
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/22dfbc20-b48d-4ad3-9ada-aaa1a88570dc.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/22dfbc20-b48d-4ad3-9ada-aaa1a88570dc/2792a309-34c1-310f-9fc5-c7181c58a235.roa
Signing time:             Fri 10 Apr 2026 01:00:24 +0000
ROA not before:           Fri 10 Apr 2026 01:00:24 +0000
ROA not after:            Thu 09 Jul 2026 01:00:24 +0000
asID:                     19691
IP address blocks:        198.37.49.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/22dfbc20-b48d-4ad3-9ada-aaa1a88570dc/22dfbc20-b48d-4ad3-9ada-aaa1a88570dc.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/22dfbc20-b48d-4ad3-9ada-aaa1a88570dc/22dfbc20-b48d-4ad3-9ada-aaa1a88570dc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/22dfbc20-b48d-4ad3-9ada-aaa1a88570dc.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 19 Apr 2026 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:74:6f:c0:10:1d:28:df:a1:40:3b:c6:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=22dfbc20-b48d-4ad3-9ada-aaa1a88570dc
        Validity
            Not Before: Apr 10 01:00:24 2026 GMT
            Not After : Jul  9 01:00:24 2026 GMT
        Subject: CN=d9983a6e-ee2f-46b1-add9-b523804d86c9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:ca:dd:12:76:8a:1a:61:24:c8:d7:40:23:3c:
                    8a:f1:ea:b9:bd:6c:47:a4:7a:c3:5d:fc:b1:28:c0:
                    21:1a:de:f3:81:ed:2e:c4:fd:dc:55:e6:21:6b:0c:
                    1c:af:2d:c0:15:1a:57:f1:3d:e9:63:53:fa:1d:39:
                    2c:69:a1:86:47:6e:8c:ef:d1:51:39:52:81:7c:c1:
                    a0:df:d3:98:bf:ca:7b:c8:4a:c3:56:d0:db:bd:1f:
                    0a:3b:97:58:63:b1:8b:fc:85:93:36:9f:d1:c8:a4:
                    9d:9a:0d:9b:43:64:81:e7:ce:b7:87:5c:98:62:aa:
                    00:1b:de:a2:1f:44:c5:27:18:bf:dd:83:17:52:93:
                    30:34:2d:28:6b:b0:41:a4:5e:00:9d:b9:b2:dc:de:
                    3a:bf:6d:49:cd:ea:3f:30:24:ae:46:76:1b:a2:dd:
                    ab:8f:c9:09:2e:b6:3d:1f:82:69:ca:9c:c8:d4:52:
                    65:24:6a:b0:45:ff:e9:c4:02:d8:dc:8b:56:eb:16:
                    b2:58:af:d3:e9:10:cc:97:9d:06:60:3e:10:10:96:
                    ae:7d:cd:4e:ea:e6:b9:49:b3:f2:3d:4a:0f:ce:6d:
                    73:5d:0a:78:55:b2:3e:81:3f:e4:f4:9a:3b:46:95:
                    35:33:6b:80:6b:a8:66:41:c1:dc:20:c4:73:21:2a:
                    e2:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C5:EE:A4:1F:34:3A:27:5B:C1:B9:FE:E7:28:79:3E:22:82:FA:8B:96
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/22dfbc20-b48d-4ad3-9ada-aaa1a88570dc/2792a309-34c1-310f-9fc5-c7181c58a235.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/22dfbc20-b48d-4ad3-9ada-aaa1a88570dc/22dfbc20-b48d-4ad3-9ada-aaa1a88570dc.crl

            X509v3 Authority Key Identifier:
                keyid:D4:24:69:AB:E4:65:51:C8:5E:22:B8:EF:B2:A7:BA:52:F1:62:65:80

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/22dfbc20-b48d-4ad3-9ada-aaa1a88570dc.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  198.37.49.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         85:b4:35:8e:b5:45:58:b0:24:ee:57:f1:6b:fa:a2:17:3b:29:
         15:d1:96:69:53:bf:8a:d1:84:7f:2f:da:c9:69:83:5a:d6:73:
         23:ca:74:c9:ce:88:90:3a:90:67:a1:e7:d8:50:9a:ba:34:82:
         d7:6b:ed:c0:1c:e1:ad:25:01:5d:73:d0:27:e0:ef:85:95:50:
         f9:90:70:e4:0f:04:45:2b:ab:3f:ca:0c:80:59:9a:ab:1a:66:
         0c:e6:f1:c0:e1:d0:81:84:d1:9f:e2:08:24:7b:a5:4a:41:f6:
         43:3f:09:87:1d:60:a5:99:d4:a9:0a:be:e3:d1:28:85:8c:5a:
         8a:31:e3:61:55:fc:fa:ed:01:95:d3:7c:63:66:78:4b:cf:4e:
         85:2e:a2:c6:22:bd:06:af:36:e8:f2:6f:30:55:68:23:e2:46:
         2d:75:52:63:fe:3e:8f:99:43:a0:1d:f9:f6:68:64:ce:a2:a2:
         d7:92:eb:b9:5e:db:cb:44:8e:0e:d9:46:1b:fe:84:46:ce:68:
         5b:02:ec:55:2c:a5:51:28:f0:ef:26:97:5f:ca:73:c5:33:6d:
         8b:b6:f4:7e:51:37:5d:3f:05:69:2c:55:00:36:31:9f:45:bb:
         3a:fd:29:f9:45:e3:d9:74:63:67:a3:44:71:6e:53:09:45:0c:
         c5:a3:f9:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 17:24:40 2026 by rpki-client