Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/aa033953-9752-479d-b9ee-4213cf648479/44fc891d-1d63-38fe-ad22-c0eb2d2d9fc4.roa
File:                     44fc891d-1d63-38fe-ad22-c0eb2d2d9fc4.roa (raw, json)
Hash identifier:          G3waVvNjtOMMmsElducjthIvuy1CJclIj2XKHFuF5KA=
Subject key identifier:   1A:52:C2:7A:52:80:1C:8A:10:4B:87:F3:80:1B:09:F3:B9:95:FF:88
Certificate issuer:       /CN=aa033953-9752-479d-b9ee-4213cf648479
Certificate serial:       010D0C9F4328584CBDB1F298F79B4C9354B944A0
Authority key identifier: 84:26:4B:8E:E4:2C:3A:6E:7F:83:C6:30:7A:5D:8C:4D:38:E6:B8:B3
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/aa033953-9752-479d-b9ee-4213cf648479.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/aa033953-9752-479d-b9ee-4213cf648479/44fc891d-1d63-38fe-ad22-c0eb2d2d9fc4.roa
Signing time:             Tue 03 Feb 2026 14:00:39 +0000
ROA not before:           Tue 03 Feb 2026 14:00:39 +0000
ROA not after:            Mon 04 May 2026 13:00:39 +0000
asID:                     2381
IP address blocks:        198.150.0.0/16 maxlen: 16
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/aa033953-9752-479d-b9ee-4213cf648479/aa033953-9752-479d-b9ee-4213cf648479.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/aa033953-9752-479d-b9ee-4213cf648479/aa033953-9752-479d-b9ee-4213cf648479.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/aa033953-9752-479d-b9ee-4213cf648479.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 04 Mar 2026 03:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:bd:b1:f2:98:f7:9b:4c:93:54:b9:44:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=aa033953-9752-479d-b9ee-4213cf648479
        Validity
            Not Before: Feb  3 14:00:39 2026 GMT
            Not After : May  4 13:00:39 2026 GMT
        Subject: CN=b7b9859a-6465-45e6-b434-ea12256dbfcc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:79:ac:57:48:17:5f:89:ff:7b:89:10:9f:00:
                    52:4b:a0:36:a9:27:c8:a3:2a:7e:6e:ee:95:f9:42:
                    54:8a:63:6a:40:88:ef:1e:06:d2:25:91:ae:c8:a1:
                    65:de:ed:8f:ca:48:40:7d:0a:3f:6f:e0:d3:7a:85:
                    77:3a:b6:e5:35:3f:37:c9:26:f0:83:58:d2:95:f4:
                    ca:4e:3b:19:69:70:11:09:54:80:e2:0a:66:28:12:
                    21:b3:e2:c7:20:83:5e:f3:7f:d1:8d:33:3a:98:33:
                    21:76:63:61:9d:15:c7:46:31:ec:f4:8d:ad:99:98:
                    16:b3:12:05:6a:39:73:b8:d1:e5:9c:1a:d6:41:75:
                    af:2a:77:ee:8c:40:ac:04:c4:39:e9:ad:71:15:32:
                    25:36:33:5e:b4:4b:87:07:55:6d:d8:b4:92:34:fa:
                    ad:d6:29:1e:1b:2e:50:5d:71:d0:9f:7f:c9:9d:2f:
                    8d:11:c9:ae:df:03:76:85:d9:60:dc:52:b2:fa:79:
                    5f:8b:ae:ad:3c:f5:b4:bf:29:b5:7a:27:25:1d:34:
                    71:ac:52:f7:3d:ef:58:f3:83:89:64:14:75:38:b3:
                    2a:fd:6e:09:0f:16:41:da:57:f0:1a:11:e6:91:5d:
                    59:0a:7d:6c:d0:f2:5e:4e:79:1b:7c:d2:20:b7:a1:
                    41:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1A:52:C2:7A:52:80:1C:8A:10:4B:87:F3:80:1B:09:F3:B9:95:FF:88
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/aa033953-9752-479d-b9ee-4213cf648479/44fc891d-1d63-38fe-ad22-c0eb2d2d9fc4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/aa033953-9752-479d-b9ee-4213cf648479/aa033953-9752-479d-b9ee-4213cf648479.crl

            X509v3 Authority Key Identifier:
                keyid:84:26:4B:8E:E4:2C:3A:6E:7F:83:C6:30:7A:5D:8C:4D:38:E6:B8:B3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/aa033953-9752-479d-b9ee-4213cf648479.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  198.150.0.0/16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         29:74:63:4d:ad:53:4d:63:91:81:a4:0a:cd:e1:d7:84:26:22:
         5d:27:57:3a:1d:fd:35:8c:24:1c:28:97:25:c9:d4:ac:be:68:
         9e:ba:c5:c8:79:8b:43:78:51:18:e0:eb:bd:82:0b:e2:32:02:
         e7:43:c2:e1:0b:a1:ce:b0:46:d6:7b:ba:50:ce:ac:6e:3b:46:
         b1:03:a2:b0:b6:86:76:dc:71:f5:9d:ea:34:9a:6f:b8:bb:83:
         56:7a:10:3d:7b:8a:4c:dc:e9:71:ee:f0:dc:79:ef:05:d7:d5:
         16:b4:cf:4f:95:1d:3a:43:21:6d:d2:49:3f:7f:47:20:44:6c:
         b9:bf:ff:33:11:23:71:ed:8e:9e:99:db:4a:54:8b:97:3e:ed:
         99:d0:5d:90:32:ec:12:42:05:73:9b:3d:d0:e0:c6:1e:73:5a:
         9f:e0:ec:6d:a0:21:b5:1a:58:0b:8a:7e:97:a4:56:77:75:a8:
         a5:29:5c:7b:86:84:49:5c:57:b0:a2:7c:2c:c2:c3:18:89:1d:
         2a:a8:9d:a3:e2:7a:e5:3b:97:81:c8:55:fb:c7:a9:96:f6:aa:
         86:c7:9b:70:6b:1a:52:3e:0c:6a:a5:d3:04:26:9b:3e:ac:74:
         d0:c9:2a:26:ea:b2:6a:57:34:52:d6:78:0a:17:ac:1b:97:f2:
         85:14:a2:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 19:10:00 2026 by rpki-client