Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4786912c-91d1-4981-a8a8-ab21be09e84b/b94e8d11-2ccc-31c9-9db7-9062817e6d42.roa
File:                     b94e8d11-2ccc-31c9-9db7-9062817e6d42.roa (raw, json)
Hash identifier:          b2UkpkRvsP5GO0/ycGc0ij+YP1C2vMQHNYEZZPD+xR4=
Subject key identifier:   D5:27:1D:B9:78:FB:E3:87:E7:E1:87:B7:84:29:53:79:50:D2:FC:3F
Certificate issuer:       /CN=4786912c-91d1-4981-a8a8-ab21be09e84b
Certificate serial:       010D0C9F4328584DE9B087CCA2B6AA1D50E23000
Authority key identifier: 01:89:77:61:B0:5F:45:2F:29:32:6D:9D:9F:03:58:CA:CC:ED:66:B9
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4786912c-91d1-4981-a8a8-ab21be09e84b.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4786912c-91d1-4981-a8a8-ab21be09e84b/b94e8d11-2ccc-31c9-9db7-9062817e6d42.roa
Signing time:             Fri 22 May 2026 01:00:24 +0000
ROA not before:           Fri 22 May 2026 01:00:24 +0000
ROA not after:            Thu 20 Aug 2026 01:00:24 +0000
asID:                     400530
IP address blocks:        198.190.197.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4786912c-91d1-4981-a8a8-ab21be09e84b/4786912c-91d1-4981-a8a8-ab21be09e84b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4786912c-91d1-4981-a8a8-ab21be09e84b/4786912c-91d1-4981-a8a8-ab21be09e84b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4786912c-91d1-4981-a8a8-ab21be09e84b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 15 Jun 2026 15:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:e9:b0:87:cc:a2:b6:aa:1d:50:e2:30:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4786912c-91d1-4981-a8a8-ab21be09e84b
        Validity
            Not Before: May 22 01:00:24 2026 GMT
            Not After : Aug 20 01:00:24 2026 GMT
        Subject: CN=00914ca7-51fa-4378-b1e9-3b292bfe8cdb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:80:25:0e:01:e0:ce:a9:d2:b0:c3:b2:4e:85:
                    52:07:53:e2:d5:a5:e0:2e:91:49:4d:c8:c0:38:77:
                    7d:65:e3:74:39:1f:f8:18:f1:da:be:43:de:3a:0d:
                    62:28:9b:d0:89:a8:c1:d2:d8:3a:2c:bd:61:26:e3:
                    dd:f2:e4:c2:c3:23:cd:1b:c4:d4:d8:7e:89:84:5e:
                    e7:47:36:78:38:6c:a6:be:5a:5d:68:c7:58:36:b4:
                    fd:33:32:45:47:da:0c:b4:34:75:e8:4d:3a:0c:33:
                    22:48:f5:4a:40:6e:0c:ba:f8:ce:d2:fa:0e:06:7a:
                    c3:ef:95:5b:52:7a:55:9d:c8:cb:62:52:dd:a0:3a:
                    fe:71:bc:f6:35:d4:ba:2e:57:af:65:eb:f3:fe:84:
                    62:7a:ba:b4:34:2c:47:6e:6d:6c:6a:f0:3d:03:de:
                    b9:b1:77:4c:ff:2f:d8:45:49:3d:de:2b:cf:8f:90:
                    46:d2:50:22:fa:e2:8d:1c:2a:f9:88:e5:10:e7:38:
                    08:f5:ea:f1:f5:f5:88:ec:80:5e:7d:a7:4d:7e:35:
                    8b:98:1a:4e:e9:c5:f4:84:fa:1a:55:db:76:b5:a1:
                    cc:be:5f:79:63:a1:d8:63:14:e1:f0:4e:18:63:4d:
                    d3:af:25:32:fc:c7:33:c9:63:59:97:12:71:f1:26:
                    22:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D5:27:1D:B9:78:FB:E3:87:E7:E1:87:B7:84:29:53:79:50:D2:FC:3F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4786912c-91d1-4981-a8a8-ab21be09e84b/b94e8d11-2ccc-31c9-9db7-9062817e6d42.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4786912c-91d1-4981-a8a8-ab21be09e84b/4786912c-91d1-4981-a8a8-ab21be09e84b.crl

            X509v3 Authority Key Identifier:
                keyid:01:89:77:61:B0:5F:45:2F:29:32:6D:9D:9F:03:58:CA:CC:ED:66:B9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4786912c-91d1-4981-a8a8-ab21be09e84b.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  198.190.197.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7c:93:3b:4e:da:66:0b:b5:f6:1c:9f:5c:55:f4:4d:af:5b:29:
         29:2c:8b:bc:17:3d:3e:17:d4:e6:97:4b:3f:e0:24:a8:12:14:
         ef:e4:86:f9:01:a5:79:ea:33:81:1f:2f:e4:ec:df:a8:8a:19:
         3b:61:7d:d4:ac:35:ec:b0:89:0c:83:c7:47:96:61:7b:49:53:
         42:da:7b:ff:6a:44:14:22:42:50:29:8d:c5:5a:a3:b0:47:f7:
         0c:9d:cd:8f:73:8a:42:c7:a4:c8:c1:42:c1:0d:f9:84:2a:16:
         c5:63:8c:35:67:00:11:8e:53:66:c4:89:eb:e6:5c:65:fc:8e:
         d9:7c:d1:a9:68:82:55:0f:fd:a0:88:a7:76:f8:9d:b8:65:5c:
         e6:e1:48:52:bc:bf:43:7c:ae:55:61:1e:fa:9c:be:7b:9e:95:
         0d:90:d8:24:65:c9:9a:de:8f:bd:c6:06:d7:5f:f9:50:50:f4:
         7c:72:ef:f6:7a:62:d3:f3:4a:37:5b:cd:ea:c2:20:96:9e:53:
         69:47:c8:89:0e:6f:48:7f:28:9d:24:24:8e:8b:a3:65:4a:9d:
         d7:96:cd:f2:bd:c0:81:be:77:f9:04:ef:9a:e7:a4:24:48:53:
         a0:5e:8b:d8:30:9c:74:e9:b2:cc:b5:b5:a7:c8:75:dd:b8:15:
         5c:81:c0:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 14 04:25:31 2026 by rpki-client