Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/c3fb3897-fd14-48ee-ad84-812c408cf46e/7538a78f-81aa-3146-b351-3bc94d0194df.roa
File:                     7538a78f-81aa-3146-b351-3bc94d0194df.roa (raw, json)
Hash identifier:          pJZIosK6qpUR2oGhDSVDIkpUvNV1KSDfWKiC1+wDapA=
Subject key identifier:   3F:AD:B3:26:88:08:40:29:41:C8:0D:4F:EF:9F:58:96:5F:34:ED:D7
Certificate issuer:       /CN=c3fb3897-fd14-48ee-ad84-812c408cf46e
Certificate serial:       010D0C9F4328584EA8EC5487017796E6FD799C00
Authority key identifier: 81:9C:0A:E7:28:DC:62:35:44:F4:10:85:B8:D7:12:59:1A:57:DD:F6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/c3fb3897-fd14-48ee-ad84-812c408cf46e.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/c3fb3897-fd14-48ee-ad84-812c408cf46e/7538a78f-81aa-3146-b351-3bc94d0194df.roa
Signing time:             Wed 29 Jul 2026 13:00:12 +0000
ROA not before:           Wed 29 Jul 2026 13:00:12 +0000
ROA not after:            Tue 27 Oct 2026 13:00:12 +0000
asID:                     399494
IP address blocks:        199.241.48.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/c3fb3897-fd14-48ee-ad84-812c408cf46e/c3fb3897-fd14-48ee-ad84-812c408cf46e.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/c3fb3897-fd14-48ee-ad84-812c408cf46e/c3fb3897-fd14-48ee-ad84-812c408cf46e.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/c3fb3897-fd14-48ee-ad84-812c408cf46e.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 31 Jul 2026 15:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:a8:ec:54:87:01:77:96:e6:fd:79:9c:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c3fb3897-fd14-48ee-ad84-812c408cf46e
        Validity
            Not Before: Jul 29 13:00:12 2026 GMT
            Not After : Oct 27 13:00:12 2026 GMT
        Subject: CN=aee62a08-b1c9-4e2d-9db1-cae1b787f0cc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:85:ec:95:0c:2c:e1:bb:4b:cc:1d:06:33:bd:c8:
                    73:25:5b:0d:1f:ca:c0:71:39:0d:e3:89:7b:e2:48:
                    89:19:cf:78:4c:63:68:2a:e9:4c:be:fc:9b:11:cd:
                    db:1c:26:93:73:50:f5:2c:bc:e0:b7:08:22:87:6b:
                    c8:50:9b:91:a9:e8:ae:3b:9d:12:41:c8:68:8f:7e:
                    72:97:30:bf:f1:37:cc:2f:9f:e5:ca:ac:ec:d3:64:
                    ef:b9:cf:b3:a1:64:b9:c8:d7:56:a4:29:82:f6:b0:
                    8b:84:4c:65:cb:7f:d1:cc:0d:bb:52:54:d0:fd:ba:
                    d0:5d:1b:11:86:40:de:de:67:3f:a7:fc:87:94:15:
                    8a:7a:9c:7f:42:f2:98:10:57:99:12:e7:6a:22:64:
                    e5:f3:d5:c2:04:02:b5:dc:4d:e5:3e:2e:56:34:32:
                    11:ec:34:77:d0:a7:e1:62:cc:9e:2c:18:cc:17:df:
                    dc:df:48:e6:2a:21:f0:bc:32:08:73:5a:ad:a3:fd:
                    b2:82:6c:5f:eb:3d:60:b1:de:3d:ae:57:60:9c:b8:
                    35:77:b3:03:9d:08:77:da:29:7c:ea:87:45:12:f3:
                    ad:6d:cf:39:0f:c5:7d:4f:c3:30:4e:80:17:bb:26:
                    a8:c6:f0:71:17:7f:c7:e1:76:28:08:d3:3e:6a:ff:
                    ef:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3F:AD:B3:26:88:08:40:29:41:C8:0D:4F:EF:9F:58:96:5F:34:ED:D7
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/c3fb3897-fd14-48ee-ad84-812c408cf46e/7538a78f-81aa-3146-b351-3bc94d0194df.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/c3fb3897-fd14-48ee-ad84-812c408cf46e/c3fb3897-fd14-48ee-ad84-812c408cf46e.crl

            X509v3 Authority Key Identifier:
                keyid:81:9C:0A:E7:28:DC:62:35:44:F4:10:85:B8:D7:12:59:1A:57:DD:F6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/c3fb3897-fd14-48ee-ad84-812c408cf46e.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.241.48.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         58:18:6e:c3:dc:da:c4:96:e1:35:3d:ce:88:ec:27:2d:27:cc:
         39:16:eb:13:fe:bf:fc:78:f1:a5:94:0a:b4:fc:b6:1f:99:33:
         cf:00:d9:59:e3:36:1f:6b:26:59:13:ef:18:7e:db:bd:0a:ec:
         12:ea:0f:89:b4:9c:5e:7b:e5:69:6b:a2:32:47:76:a9:fb:c4:
         35:6e:fa:a6:22:5f:36:50:c6:80:cd:8a:2d:ac:bc:be:31:19:
         5f:89:df:47:1d:00:ec:0a:d0:cf:ac:3e:19:7c:21:00:33:bc:
         9a:b3:e1:89:cd:fa:f1:21:ea:f1:69:79:e9:0d:4f:7e:c8:50:
         79:6a:91:f9:a1:b8:90:a6:8f:35:59:4f:ba:5f:6e:c9:6b:2b:
         4e:9b:41:27:5b:8f:1a:6a:f1:87:0f:c9:16:34:1e:c7:1b:7f:
         a4:f3:36:66:0d:d9:29:5b:d6:37:0a:3a:fb:00:f1:f0:30:f7:
         5a:69:c2:dc:a9:fc:9e:a5:fd:90:56:03:b0:37:34:6d:27:eb:
         4d:39:32:12:be:4a:e9:72:3f:6c:a2:10:83:66:f9:bf:15:7a:
         b9:65:5f:e4:96:4c:8a:06:e9:b7:fc:39:0b:6d:2d:ab:94:43:
         c1:74:13:ac:92:95:8c:55:62:c4:3e:a5:8c:29:22:fc:3e:29:
         4c:c3:93:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 30 00:34:41 2026 by rpki-client