Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/1889ddcb-202e-4e86-8fb3-63c498cba935/a2c3132b-e476-3eef-9ccd-b420407c2963.roa
File:                     a2c3132b-e476-3eef-9ccd-b420407c2963.roa (raw, json)
Hash identifier:          CqRANX55xwhvgztMaROFx2gKopRXarOGNtwqOxXllmI=
Subject key identifier:   14:0B:A9:18:54:83:2E:DA:D3:43:56:43:04:6A:B8:94:51:F9:F3:80
Certificate issuer:       /CN=1889ddcb-202e-4e86-8fb3-63c498cba935
Certificate serial:       010D0C9F4328584EA786F39099B03A6C1DA15680
Authority key identifier: 7B:BC:6E:6D:03:51:66:8F:B2:65:C8:95:39:61:20:A8:7E:A2:FE:E0
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/1889ddcb-202e-4e86-8fb3-63c498cba935.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/1889ddcb-202e-4e86-8fb3-63c498cba935/a2c3132b-e476-3eef-9ccd-b420407c2963.roa
Signing time:             Wed 29 Jul 2026 01:00:12 +0000
ROA not before:           Wed 29 Jul 2026 01:00:12 +0000
ROA not after:            Tue 27 Oct 2026 01:00:12 +0000
asID:                     401550
IP address blocks:        199.36.25.0/24 maxlen: 24
                          2602:f755::/40 maxlen: 40
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/1889ddcb-202e-4e86-8fb3-63c498cba935/1889ddcb-202e-4e86-8fb3-63c498cba935.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/1889ddcb-202e-4e86-8fb3-63c498cba935/1889ddcb-202e-4e86-8fb3-63c498cba935.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/1889ddcb-202e-4e86-8fb3-63c498cba935.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 30 Jul 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:a7:86:f3:90:99:b0:3a:6c:1d:a1:56:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1889ddcb-202e-4e86-8fb3-63c498cba935
        Validity
            Not Before: Jul 29 01:00:12 2026 GMT
            Not After : Oct 27 01:00:12 2026 GMT
        Subject: CN=c3af2807-0975-48ac-ade2-ffe29da5d102
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:80:f0:cc:aa:8a:d2:40:3f:67:a8:b8:ad:23:31:
                    a9:50:44:4f:27:0e:b0:ef:65:1b:4f:22:03:53:0f:
                    69:23:16:b2:0f:63:04:ca:ac:49:ff:52:fb:9f:ab:
                    4f:3e:ef:61:9e:e5:24:c1:62:fe:b5:c9:0a:c4:22:
                    e0:c1:e8:44:a8:88:e3:16:89:b2:f2:93:a0:10:f2:
                    16:95:32:20:64:1d:d9:ba:48:5c:f2:6b:a4:b9:a3:
                    13:57:73:01:17:6f:fc:f9:4a:b3:92:87:51:69:53:
                    01:1b:7d:1f:89:e7:62:50:e2:d3:e4:91:aa:53:31:
                    26:12:c1:5e:9f:24:12:c4:6f:ab:b9:8d:9e:56:58:
                    cc:3a:9f:87:d8:3e:89:db:18:7f:70:ca:a1:e7:ae:
                    2a:2b:1c:8d:f5:80:18:4c:f4:68:11:64:87:6b:7d:
                    3f:64:75:69:c6:55:dd:51:c4:c6:6f:7d:2e:a9:79:
                    60:46:e2:64:0d:7e:b3:63:43:92:41:09:6f:d5:1e:
                    06:d7:0c:ec:b5:80:db:18:91:a6:76:89:d9:d0:3e:
                    4a:f0:62:66:51:99:56:0c:d9:4a:bb:4d:94:84:09:
                    4f:d5:79:0c:bc:09:7c:86:d4:9b:9e:d7:f7:0f:43:
                    d1:66:6a:05:cb:dc:20:db:26:56:d4:51:24:03:da:
                    ad:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                14:0B:A9:18:54:83:2E:DA:D3:43:56:43:04:6A:B8:94:51:F9:F3:80
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/1889ddcb-202e-4e86-8fb3-63c498cba935/a2c3132b-e476-3eef-9ccd-b420407c2963.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/1889ddcb-202e-4e86-8fb3-63c498cba935/1889ddcb-202e-4e86-8fb3-63c498cba935.crl

            X509v3 Authority Key Identifier:
                keyid:7B:BC:6E:6D:03:51:66:8F:B2:65:C8:95:39:61:20:A8:7E:A2:FE:E0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/1889ddcb-202e-4e86-8fb3-63c498cba935.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.36.25.0/24
                IPv6:
                  2602:f755::/40

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         56:6b:b7:14:4c:52:09:84:08:5d:f8:3f:46:84:63:f7:41:f4:
         d5:8b:16:1b:f9:36:e9:50:94:66:0a:55:28:24:eb:ee:7b:cd:
         63:1c:1f:3a:70:96:02:ba:f2:fc:10:36:ae:4e:28:be:64:02:
         ad:f7:d6:96:55:db:aa:9a:a8:ac:11:bb:00:09:e3:a9:c1:ad:
         ce:eb:96:61:a0:87:b7:88:d9:a4:07:10:9d:da:12:5d:ed:c5:
         90:4c:13:1b:06:d3:bd:04:83:07:39:23:f1:91:bb:5f:57:2b:
         b1:37:13:09:9a:b5:78:8c:1f:50:e4:0b:35:9e:48:97:a8:97:
         b2:fe:3e:11:e8:b8:1b:23:6c:7f:59:ca:0a:09:07:0d:b5:34:
         b9:6b:3b:d6:9e:4a:01:4b:8e:b9:67:95:c8:1e:e2:cf:22:80:
         98:2c:ae:13:13:db:83:07:50:af:a5:5f:94:79:d5:7c:47:cb:
         b8:58:53:e8:db:e5:ae:47:6d:76:f3:18:73:79:3b:c0:47:26:
         4f:81:66:91:5f:41:b9:73:91:6f:57:0b:16:f4:a9:0f:4f:ce:
         ed:6e:bb:66:e8:6f:e5:ed:cc:9d:ef:95:02:e3:4c:ab:b0:d5:
         3a:b7:9a:f1:67:03:0a:86:e2:96:a0:f9:14:93:a6:e2:e8:bf:
         65:53:56:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 03:35:14 2026 by rpki-client