Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/fd2ef99c-c00c-431b-8519-cabb9d2a4d50/4ae6d800-7f21-372c-a4bd-d9d393ae3f74.roa
File:                     4ae6d800-7f21-372c-a4bd-d9d393ae3f74.roa (raw, json)
Hash identifier:          3RYeR5/0SOnGLgSjwPVtsexfZ/W5LDw/mVS2CSQZhRM=
Subject key identifier:   2E:A7:E8:13:3C:C9:0D:BD:E3:FB:59:2A:78:7F:39:0A:5A:EB:B1:A4
Certificate issuer:       /CN=fd2ef99c-c00c-431b-8519-cabb9d2a4d50
Certificate serial:       010D0C9F4328584D7A0526A556BEC4032B410C80
Authority key identifier: 39:01:7E:8B:7D:40:09:7F:64:0F:1D:C3:2E:AB:DF:9E:79:8B:CA:D5
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/fd2ef99c-c00c-431b-8519-cabb9d2a4d50.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/fd2ef99c-c00c-431b-8519-cabb9d2a4d50/4ae6d800-7f21-372c-a4bd-d9d393ae3f74.roa
Signing time:             Sun 12 Apr 2026 01:00:24 +0000
ROA not before:           Sun 12 Apr 2026 01:00:24 +0000
ROA not after:            Sat 11 Jul 2026 01:00:24 +0000
asID:                     33164
IP address blocks:        199.47.124.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/fd2ef99c-c00c-431b-8519-cabb9d2a4d50/fd2ef99c-c00c-431b-8519-cabb9d2a4d50.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/fd2ef99c-c00c-431b-8519-cabb9d2a4d50/fd2ef99c-c00c-431b-8519-cabb9d2a4d50.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/fd2ef99c-c00c-431b-8519-cabb9d2a4d50.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 18 Apr 2026 11:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:7a:05:26:a5:56:be:c4:03:2b:41:0c:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fd2ef99c-c00c-431b-8519-cabb9d2a4d50
        Validity
            Not Before: Apr 12 01:00:24 2026 GMT
            Not After : Jul 11 01:00:24 2026 GMT
        Subject: CN=6e3070bc-0eda-4da1-a143-4298f174d556
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:86:f0:38:11:48:b2:09:df:16:b3:ae:4d:bd:ea:
                    db:0e:87:3c:b6:8a:a5:61:ae:e9:31:94:3c:e3:fe:
                    2e:0d:bc:e2:e7:5a:8d:5b:a1:2e:7c:31:e8:a2:20:
                    dd:42:54:2f:6e:a6:7c:c5:9f:44:dd:3b:91:41:68:
                    e6:ca:ac:36:30:6e:f1:a8:ba:2e:01:8f:2e:d5:10:
                    78:8a:c6:e8:92:5f:90:27:ea:86:ef:ca:d8:f4:ed:
                    68:28:d2:89:d3:69:6e:1c:fc:87:f7:a9:e5:21:dc:
                    bb:d9:1b:fb:4d:7e:62:41:87:9b:e8:2e:3e:0a:2e:
                    42:f8:d3:d5:9c:cb:2c:cd:a2:4f:4d:1d:7b:bb:80:
                    4e:99:14:96:84:05:51:5b:ea:3e:b6:13:e6:f1:ca:
                    0e:19:6d:a6:6c:b3:ad:ac:a5:c8:d9:aa:95:6f:f6:
                    63:da:5c:8a:10:55:77:c5:60:49:26:fd:f9:4f:22:
                    3b:17:c4:13:8d:8a:a4:19:9f:c5:07:4d:8c:57:c0:
                    f8:3d:a4:af:e5:a5:6f:92:e8:66:6d:68:84:8d:1d:
                    3c:c4:5c:cb:27:9c:8c:00:ac:2f:03:69:06:fd:31:
                    a0:c4:27:dd:fb:56:d0:86:d4:e9:d8:00:ca:a0:03:
                    56:3b:d5:4f:23:60:6a:55:c6:6b:60:20:fa:58:27:
                    2f:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2E:A7:E8:13:3C:C9:0D:BD:E3:FB:59:2A:78:7F:39:0A:5A:EB:B1:A4
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/fd2ef99c-c00c-431b-8519-cabb9d2a4d50/4ae6d800-7f21-372c-a4bd-d9d393ae3f74.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/fd2ef99c-c00c-431b-8519-cabb9d2a4d50/fd2ef99c-c00c-431b-8519-cabb9d2a4d50.crl

            X509v3 Authority Key Identifier:
                keyid:39:01:7E:8B:7D:40:09:7F:64:0F:1D:C3:2E:AB:DF:9E:79:8B:CA:D5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/fd2ef99c-c00c-431b-8519-cabb9d2a4d50.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.47.124.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a5:5f:36:5b:45:4e:2c:08:01:db:34:56:ad:6b:07:3d:bd:d7:
         69:67:bf:eb:16:cf:0b:b7:02:73:d7:08:b7:a6:c8:e9:50:7d:
         2a:4a:b5:d9:7a:ca:02:c9:a0:f4:cf:6c:f5:a6:49:8a:3c:ed:
         0d:e7:23:7c:47:5a:bd:03:01:a7:03:d5:52:07:87:d7:a4:4b:
         7f:a3:e3:7d:cc:69:e1:de:03:8a:51:02:6a:97:3f:d9:48:6f:
         58:fe:1c:52:ea:7f:1e:2f:b8:75:4e:57:3a:1f:ae:12:86:6e:
         b3:3d:dd:ca:06:d5:51:ab:29:e9:9f:ce:96:5b:5f:44:9d:e2:
         e3:99:bd:54:c6:a7:83:b5:32:3d:27:bc:a9:8c:62:62:0c:7d:
         53:61:46:49:5e:79:73:09:1d:da:d3:eb:bf:63:7d:ad:75:b0:
         30:ef:fc:1c:a1:e9:b2:b5:f0:d1:c4:af:4b:36:d2:d0:50:80:
         6e:f4:e8:60:a3:4d:51:8c:2c:ba:f5:a7:8d:56:71:36:5f:fb:
         b0:d8:85:17:b7:ab:10:4a:51:69:d5:9a:a7:55:86:37:43:42:
         5c:20:6e:f0:10:6a:15:27:35:a8:75:2f:ad:21:32:1c:80:50:
         34:a6:c6:b1:ec:5e:bb:ee:b7:eb:e8:b7:c9:34:a3:67:ca:69:
         53:5f:6f:47
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 10:44:01 2026 by rpki-client