Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/d2442e49-fb31-4bf7-aee6-2a7033a57cfa/4e0c3e54-11a2-3f99-a379-f22fb23c9791.roa
File:                     4e0c3e54-11a2-3f99-a379-f22fb23c9791.roa (raw, json)
Hash identifier:          z+9LThsZSVyVs+gPveU+q5JP+xXSLZcQ/v0WoOIGQCg=
Subject key identifier:   FD:0D:AC:29:33:51:BF:DE:BB:F2:61:85:EE:BA:40:B2:FF:28:50:EB
Certificate issuer:       /CN=d2442e49-fb31-4bf7-aee6-2a7033a57cfa
Certificate serial:       010D0C9F4328584CA5F710F919AA2A648BF61200
Authority key identifier: 37:A2:03:56:95:92:2C:35:BD:99:C2:5A:9B:82:20:77:73:14:1E:7D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/d2442e49-fb31-4bf7-aee6-2a7033a57cfa.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/d2442e49-fb31-4bf7-aee6-2a7033a57cfa/4e0c3e54-11a2-3f99-a379-f22fb23c9791.roa
Signing time:             Mon 26 Jan 2026 02:00:32 +0000
ROA not before:           Mon 26 Jan 2026 02:00:32 +0000
ROA not after:            Sun 26 Apr 2026 01:00:32 +0000
asID:                     14618
IP address blocks:        199.193.137.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/d2442e49-fb31-4bf7-aee6-2a7033a57cfa/d2442e49-fb31-4bf7-aee6-2a7033a57cfa.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/d2442e49-fb31-4bf7-aee6-2a7033a57cfa/d2442e49-fb31-4bf7-aee6-2a7033a57cfa.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/d2442e49-fb31-4bf7-aee6-2a7033a57cfa.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 03 Mar 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:a5:f7:10:f9:19:aa:2a:64:8b:f6:12:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d2442e49-fb31-4bf7-aee6-2a7033a57cfa
        Validity
            Not Before: Jan 26 02:00:32 2026 GMT
            Not After : Apr 26 01:00:32 2026 GMT
        Subject: CN=86fac42a-d074-4934-9503-5d1c4261a833
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:83:6f:4a:49:7d:30:46:af:a9:28:61:ea:d3:77:
                    45:04:0a:37:b3:f3:e3:3d:e1:21:9b:56:b9:d8:80:
                    ca:a4:d6:5a:c0:42:35:03:4a:80:7b:06:bf:66:33:
                    61:b3:a7:05:36:c7:6d:b4:f3:06:4a:9d:7b:b2:2e:
                    40:87:ab:e5:15:ff:2b:6c:23:43:90:1c:9c:32:12:
                    d0:30:46:98:62:62:80:6f:8b:fc:f9:45:de:5b:43:
                    c9:b4:36:1a:3c:a4:99:e4:67:67:7f:b1:e9:aa:16:
                    d0:d3:d3:f1:1a:08:f0:90:a9:cf:19:20:c9:76:e4:
                    7b:34:bb:b6:ee:14:8d:9a:21:32:9d:20:51:ed:f8:
                    a8:34:e7:49:c4:37:c3:86:47:64:ba:88:3c:af:14:
                    0a:25:69:8b:5d:6f:91:f6:1e:f3:60:0f:73:fd:20:
                    16:29:d4:64:c1:92:2a:2e:cb:08:3d:29:e4:e7:03:
                    a5:11:ba:8c:bc:08:fc:96:30:66:48:6b:6c:1b:f8:
                    5f:ef:d9:63:a1:7c:69:cc:86:38:cf:88:45:4d:6a:
                    62:76:e7:fb:39:b6:8e:32:9b:93:23:a0:80:5b:76:
                    2f:4b:2f:11:fd:fe:db:49:61:d0:3f:ad:bf:c0:8d:
                    56:dc:d4:27:85:a2:5c:f2:74:02:b2:e2:b0:eb:4b:
                    0f:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FD:0D:AC:29:33:51:BF:DE:BB:F2:61:85:EE:BA:40:B2:FF:28:50:EB
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/d2442e49-fb31-4bf7-aee6-2a7033a57cfa/4e0c3e54-11a2-3f99-a379-f22fb23c9791.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/d2442e49-fb31-4bf7-aee6-2a7033a57cfa/d2442e49-fb31-4bf7-aee6-2a7033a57cfa.crl

            X509v3 Authority Key Identifier:
                keyid:37:A2:03:56:95:92:2C:35:BD:99:C2:5A:9B:82:20:77:73:14:1E:7D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/d2442e49-fb31-4bf7-aee6-2a7033a57cfa.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.193.137.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6d:ac:18:c0:77:dd:21:c9:eb:48:b1:7b:b4:a1:12:b9:72:72:
         3c:0c:b5:c4:d6:d3:92:4e:cc:00:fa:4c:c3:94:cf:62:80:f6:
         dd:b8:2d:e7:96:69:1c:3d:d9:c3:12:00:f1:1a:ce:05:da:5e:
         4e:c2:d4:65:b2:68:70:8c:ed:73:8a:77:a3:db:ba:a6:70:6b:
         50:b4:3b:0c:01:ab:6d:78:1b:93:be:4a:42:3b:b5:cd:63:19:
         31:47:31:11:fb:6e:9a:86:8d:3e:ec:31:95:48:2a:bd:9e:90:
         d9:0c:63:3a:8d:e7:98:00:ef:1f:cf:11:d1:6f:74:f8:0a:8f:
         90:de:44:f2:72:bc:8b:0a:a7:4b:40:f7:bd:29:01:02:2f:29:
         e4:b4:64:9b:64:a5:40:13:12:3a:f2:4c:73:8f:8c:d5:55:22:
         0e:95:a0:26:0e:7e:a6:51:b3:5e:ef:6d:6e:aa:e9:6d:16:10:
         de:56:52:0b:4e:1e:07:ef:f1:3b:df:f4:c4:27:29:34:8f:5a:
         ff:3a:4f:33:e6:fa:f4:25:f6:04:a8:da:36:9b:b6:ab:2b:b6:
         88:03:c6:f3:bb:8f:ed:7a:55:d9:69:ad:7d:67:14:f6:cb:d2:
         c5:3a:9d:c6:76:1d:88:bb:68:09:f0:65:ce:2f:98:33:b4:22:
         65:94:d5:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 22:51:33 2026 by rpki-client