Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d44d3fac-ab99-4b37-a42e-dbf67a95c460/d051a386-b52b-3cb8-a9fd-923a1c2d1795.roa
File:                     d051a386-b52b-3cb8-a9fd-923a1c2d1795.roa (raw, json)
Hash identifier:          MQyRF9IeyVY4fn1YJ1WJAciaNKVVEvLIn0p/alygp+k=
Subject key identifier:   D5:85:2F:E4:03:DE:66:6B:CA:60:2A:36:3C:DB:30:55:DB:6B:95:45
Certificate issuer:       /CN=d44d3fac-ab99-4b37-a42e-dbf67a95c460
Certificate serial:       010D0C9F4328584D86955004963018A591490600
Authority key identifier: 10:77:E4:74:A6:2D:64:5B:43:F0:7E:38:D7:5F:B6:CE:AB:37:5B:32
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d44d3fac-ab99-4b37-a42e-dbf67a95c460.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d44d3fac-ab99-4b37-a42e-dbf67a95c460/d051a386-b52b-3cb8-a9fd-923a1c2d1795.roa
Signing time:             Thu 16 Apr 2026 13:00:31 +0000
ROA not before:           Thu 16 Apr 2026 13:00:31 +0000
ROA not after:            Wed 15 Jul 2026 13:00:31 +0000
asID:                     400072
IP address blocks:        199.187.188.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d44d3fac-ab99-4b37-a42e-dbf67a95c460/d44d3fac-ab99-4b37-a42e-dbf67a95c460.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d44d3fac-ab99-4b37-a42e-dbf67a95c460/d44d3fac-ab99-4b37-a42e-dbf67a95c460.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d44d3fac-ab99-4b37-a42e-dbf67a95c460.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 18 Apr 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:86:95:50:04:96:30:18:a5:91:49:06:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d44d3fac-ab99-4b37-a42e-dbf67a95c460
        Validity
            Not Before: Apr 16 13:00:31 2026 GMT
            Not After : Jul 15 13:00:31 2026 GMT
        Subject: CN=bb9faf3a-a324-4a8b-9fb8-4fe2d33bb482
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:81:c7:6d:f9:b3:03:cb:9f:d9:1c:5c:be:03:29:
                    2b:f9:c5:b2:ba:d3:55:1c:35:4d:a2:0b:e6:0c:86:
                    1d:cb:52:c3:54:f8:c1:f4:80:a1:2c:c2:ff:0e:ea:
                    85:0c:c5:69:74:b2:d0:e8:86:e7:01:e6:10:c2:f2:
                    de:11:57:e7:41:7d:fe:93:c8:08:53:cd:cb:14:a3:
                    1b:55:47:58:73:46:d5:77:87:bc:ff:f3:a0:a0:77:
                    1d:a3:ba:78:1f:b2:78:2d:2f:9b:c1:eb:eb:8d:31:
                    93:6d:f4:65:4b:0a:7b:91:d6:78:db:c6:44:a1:28:
                    35:b4:95:2a:0d:c0:7c:8f:05:b3:01:a4:58:00:9a:
                    c9:eb:ba:a8:7a:e2:16:89:40:48:a1:73:e8:df:d3:
                    63:ac:13:1d:c0:77:a8:ee:66:d6:5b:aa:ea:bd:0e:
                    ee:b1:55:b6:c4:b8:83:2d:34:1c:5c:8e:a0:ed:22:
                    77:df:92:a1:eb:80:d8:e2:d9:40:10:f5:42:7f:ef:
                    18:ee:8f:3a:10:52:87:53:10:7d:35:18:9b:4b:0d:
                    b4:2f:4d:00:4e:d4:a4:22:20:dd:c6:1a:80:1b:51:
                    8f:c1:37:5e:3d:dd:04:83:ec:6d:dc:a9:88:2e:81:
                    ed:2b:41:5b:3d:3a:4e:cd:48:61:cf:b4:88:ce:68:
                    6e:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D5:85:2F:E4:03:DE:66:6B:CA:60:2A:36:3C:DB:30:55:DB:6B:95:45
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d44d3fac-ab99-4b37-a42e-dbf67a95c460/d051a386-b52b-3cb8-a9fd-923a1c2d1795.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d44d3fac-ab99-4b37-a42e-dbf67a95c460/d44d3fac-ab99-4b37-a42e-dbf67a95c460.crl

            X509v3 Authority Key Identifier:
                keyid:10:77:E4:74:A6:2D:64:5B:43:F0:7E:38:D7:5F:B6:CE:AB:37:5B:32

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d44d3fac-ab99-4b37-a42e-dbf67a95c460.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.187.188.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         55:8a:e2:8d:28:94:a6:3c:74:e5:1b:65:9e:f9:42:b3:79:7c:
         d0:c8:bd:e1:48:47:88:29:81:36:5c:1d:37:bd:90:02:31:ee:
         08:91:86:9f:98:82:89:f5:1f:03:45:a2:01:58:8a:3d:b8:b5:
         61:ee:9d:00:ab:8c:cc:f7:0c:21:85:43:f4:86:11:92:02:89:
         c7:36:0e:e9:63:5f:ee:37:9a:90:ed:67:2f:68:d1:75:d9:13:
         44:b1:19:ec:f0:6b:5c:aa:ba:6f:ad:a7:6a:14:50:31:bc:bf:
         51:03:c1:0d:8c:6a:5d:fd:2f:ec:fd:ba:af:80:77:0a:a5:79:
         8e:4a:cd:be:26:0e:6a:5a:61:17:84:bf:9b:08:de:c8:da:bb:
         6d:cb:ea:38:15:23:c1:1b:7f:cf:b0:59:d8:ca:d7:95:95:fd:
         4f:92:b5:b4:fb:89:ee:35:59:88:ef:6a:63:c2:26:8b:03:fb:
         5d:e0:4c:97:2f:ab:2c:11:ba:08:27:55:30:e6:e6:57:9a:58:
         01:05:de:94:2d:35:49:1f:af:f4:67:bf:f9:f5:7a:0b:e8:e6:
         e4:0c:1d:7f:d1:67:2c:f5:09:56:d0:15:14:93:18:4e:ef:ae:
         8b:a0:5b:fc:43:76:0b:b1:51:60:de:93:69:27:1f:4e:6f:cf:
         95:2d:9c:0c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 21:48:32 2026 by rpki-client