Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e49eaa07-93bd-4f2b-b9c6-ac1d4106c5b0/4d487042-1d6d-3aa2-8a25-6d796130b8bf.roa
File:                     4d487042-1d6d-3aa2-8a25-6d796130b8bf.roa (raw, json)
Hash identifier:          gONzjo9HyXLDq6FMOT1z1/zOy6qQ7lx3qHMq/aTBIjs=
Subject key identifier:   48:C9:93:61:F7:D4:A3:7B:96:43:FA:9D:86:EA:35:0D:88:97:DD:E0
Certificate issuer:       /CN=e49eaa07-93bd-4f2b-b9c6-ac1d4106c5b0
Certificate serial:       010D0C9F4328584D4D5A6898E50AB548BDFB9800
Authority key identifier: 0D:39:5C:E3:0D:1F:BD:B6:79:8A:1D:50:60:EC:FC:62:57:43:80:35
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e49eaa07-93bd-4f2b-b9c6-ac1d4106c5b0.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e49eaa07-93bd-4f2b-b9c6-ac1d4106c5b0/4d487042-1d6d-3aa2-8a25-6d796130b8bf.roa
Signing time:             Fri 27 Mar 2026 01:00:31 +0000
ROA not before:           Fri 27 Mar 2026 01:00:31 +0000
ROA not after:            Thu 25 Jun 2026 01:00:31 +0000
asID:                     19471
IP address blocks:        198.245.44.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e49eaa07-93bd-4f2b-b9c6-ac1d4106c5b0/e49eaa07-93bd-4f2b-b9c6-ac1d4106c5b0.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e49eaa07-93bd-4f2b-b9c6-ac1d4106c5b0/e49eaa07-93bd-4f2b-b9c6-ac1d4106c5b0.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e49eaa07-93bd-4f2b-b9c6-ac1d4106c5b0.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 18 Apr 2026 15:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:4d:5a:68:98:e5:0a:b5:48:bd:fb:98:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e49eaa07-93bd-4f2b-b9c6-ac1d4106c5b0
        Validity
            Not Before: Mar 27 01:00:31 2026 GMT
            Not After : Jun 25 01:00:31 2026 GMT
        Subject: CN=e5520e6a-4114-4b05-9281-723eea3fedac
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:97:79:f2:98:88:eb:59:d2:d2:31:76:38:c2:
                    04:12:d6:d4:81:4f:c3:71:b4:8d:c6:82:9e:b9:72:
                    59:21:f0:94:ca:0c:97:2f:46:29:d3:2f:fb:7a:bd:
                    57:69:fa:f0:ab:91:08:04:99:7d:d3:44:15:33:8e:
                    05:b9:94:c5:8d:b7:fd:b2:5a:98:f5:8a:83:84:40:
                    ec:82:c7:7a:e9:d5:0d:f6:3a:ef:c5:7f:00:49:1e:
                    25:62:5e:a4:b3:2c:d1:78:c9:85:ec:c1:6f:b1:ee:
                    2a:51:bd:f8:b1:86:86:f3:d5:0e:18:b6:57:61:69:
                    6e:c8:bb:e7:00:09:47:4f:a6:ad:0a:7c:02:82:87:
                    3a:e5:1b:34:4b:74:11:ba:71:a8:95:2e:38:94:c8:
                    3a:a2:06:01:dc:c9:45:b6:3c:c3:54:b9:e0:e0:6f:
                    ea:9e:ed:6e:86:b1:25:67:4c:68:8a:05:0f:50:db:
                    da:74:85:cc:97:2b:59:1d:67:c0:4e:40:8b:01:d2:
                    25:0f:01:4f:3b:10:bf:3a:86:20:ac:c2:8a:9c:54:
                    a5:81:d0:2d:71:92:3d:5d:6e:de:da:bf:e7:e5:f5:
                    71:fa:de:6f:4a:f8:92:4f:68:aa:cf:ca:e8:bc:0f:
                    2f:96:04:5c:43:6b:d0:f4:35:3f:7c:c4:ee:e5:e1:
                    e6:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                48:C9:93:61:F7:D4:A3:7B:96:43:FA:9D:86:EA:35:0D:88:97:DD:E0
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e49eaa07-93bd-4f2b-b9c6-ac1d4106c5b0/4d487042-1d6d-3aa2-8a25-6d796130b8bf.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e49eaa07-93bd-4f2b-b9c6-ac1d4106c5b0/e49eaa07-93bd-4f2b-b9c6-ac1d4106c5b0.crl

            X509v3 Authority Key Identifier:
                keyid:0D:39:5C:E3:0D:1F:BD:B6:79:8A:1D:50:60:EC:FC:62:57:43:80:35

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e49eaa07-93bd-4f2b-b9c6-ac1d4106c5b0.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  198.245.44.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         14:76:30:0f:59:ee:84:3f:d4:93:fc:54:1d:94:26:f8:72:39:
         54:26:f2:01:c9:37:1b:01:d0:70:45:42:a8:7f:15:e9:b1:14:
         88:37:5d:08:70:c8:10:0b:d6:5c:3c:60:95:b5:b6:70:3b:40:
         60:b2:b3:c1:34:e0:69:ad:14:7e:ac:c5:cf:22:0f:a9:18:94:
         7e:d0:68:04:f0:7b:de:c3:ef:d9:66:87:34:a4:98:cb:c0:78:
         44:f2:de:a9:55:19:01:25:3c:82:3a:6a:5c:bb:28:19:06:48:
         76:2c:48:75:1f:c8:61:bd:ff:e0:77:09:42:1b:7e:4f:b7:54:
         81:6c:57:04:27:0b:cd:13:e5:72:dd:28:96:88:38:ae:50:91:
         c3:52:1d:50:a5:ac:ee:2d:68:b6:9d:73:4b:d3:76:61:85:bb:
         18:29:0a:b2:0c:45:e6:0c:f6:2c:15:ce:28:d3:e5:0b:71:e7:
         56:34:5c:48:e9:54:8a:c9:e9:eb:ad:2f:21:50:74:0b:b2:cd:
         da:01:2a:1a:b4:cd:0e:c0:06:e2:84:4a:d7:ba:b3:3d:ed:0c:
         94:0a:f8:3a:fc:25:14:bb:24:6b:86:13:c3:30:fe:c1:38:0c:
         ec:ca:d6:a4:88:a9:50:85:6f:89:c7:de:ba:f1:9a:79:b7:30:
         b4:f6:84:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 14:28:06 2026 by rpki-client