Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/91139fba-bc78-41c4-a070-4191dad6091c/988d4c30-a087-3fb9-a7e1-eb466df49935.roa
File:                     988d4c30-a087-3fb9-a7e1-eb466df49935.roa (raw, json)
Hash identifier:          dBXMJq6f/GiPL2pWpLkDXUrt75PMEWuUJMnirJFUINM=
Subject key identifier:   5C:F5:01:82:2C:01:FE:67:8D:4D:F7:21:E6:FA:3B:8D:02:A0:6D:6E
Certificate issuer:       /CN=91139fba-bc78-41c4-a070-4191dad6091c
Certificate serial:       010D0C9F4328584CC1E1CB7ACD3762B399139C40
Authority key identifier: DF:24:39:F3:9E:C7:8A:AB:4D:93:76:DF:BB:1F:92:9F:11:36:AF:26
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/91139fba-bc78-41c4-a070-4191dad6091c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/91139fba-bc78-41c4-a070-4191dad6091c/988d4c30-a087-3fb9-a7e1-eb466df49935.roa
Signing time:             Thu 05 Feb 2026 02:00:31 +0000
ROA not before:           Thu 05 Feb 2026 02:00:31 +0000
ROA not after:            Wed 06 May 2026 01:00:31 +0000
asID:                     18742
IP address blocks:        199.83.44.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/91139fba-bc78-41c4-a070-4191dad6091c/91139fba-bc78-41c4-a070-4191dad6091c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/91139fba-bc78-41c4-a070-4191dad6091c/91139fba-bc78-41c4-a070-4191dad6091c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/91139fba-bc78-41c4-a070-4191dad6091c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 03 Mar 2026 23:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:c1:e1:cb:7a:cd:37:62:b3:99:13:9c:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=91139fba-bc78-41c4-a070-4191dad6091c
        Validity
            Not Before: Feb  5 02:00:31 2026 GMT
            Not After : May  6 01:00:31 2026 GMT
        Subject: CN=05a09fb1-1092-4d0c-bfa6-6622021b49f1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:09:24:5e:54:43:55:65:9c:af:94:64:54:0f:
                    81:3d:75:5f:b4:7d:c7:57:f9:91:ab:eb:a2:09:36:
                    a0:aa:1e:04:63:db:9c:d2:e8:48:dc:59:d1:fd:05:
                    fc:f7:72:fa:33:d0:11:20:8b:14:08:54:77:21:1a:
                    35:26:c6:46:43:c9:62:d0:fd:56:13:33:75:28:13:
                    52:b7:fe:9e:64:40:4c:d6:04:93:95:14:15:47:e9:
                    66:f4:35:29:c0:47:92:3e:76:7f:b1:43:19:e7:99:
                    d0:8c:92:98:76:12:2d:47:55:8e:b0:4e:9c:9e:c8:
                    d7:f1:de:14:d9:12:38:1b:34:5c:10:1d:1e:36:e4:
                    db:45:7a:83:6f:e3:ed:d3:ef:01:e3:9f:a4:9e:76:
                    88:f3:52:47:46:7c:46:5f:43:2a:22:ed:9f:d4:3c:
                    81:cc:ef:65:2d:9b:5e:3a:6e:af:4c:12:16:44:f6:
                    23:18:6d:5c:c1:64:d9:d9:16:c6:fe:10:c9:20:21:
                    b0:03:06:90:ff:f2:ab:b0:8c:4e:21:13:ce:b4:21:
                    2b:be:1f:33:ff:ce:ad:9f:f8:9c:ab:91:bc:59:f6:
                    b8:ea:1c:89:e6:8f:2f:91:d0:e2:a1:59:e8:b2:a1:
                    46:c7:dd:36:c1:3a:bf:53:38:f7:3d:ab:02:fa:c8:
                    e0:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5C:F5:01:82:2C:01:FE:67:8D:4D:F7:21:E6:FA:3B:8D:02:A0:6D:6E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/91139fba-bc78-41c4-a070-4191dad6091c/988d4c30-a087-3fb9-a7e1-eb466df49935.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/91139fba-bc78-41c4-a070-4191dad6091c/91139fba-bc78-41c4-a070-4191dad6091c.crl

            X509v3 Authority Key Identifier:
                keyid:DF:24:39:F3:9E:C7:8A:AB:4D:93:76:DF:BB:1F:92:9F:11:36:AF:26

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/91139fba-bc78-41c4-a070-4191dad6091c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.83.44.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         19:8b:c7:42:82:c4:9a:90:c7:fe:a2:05:30:3f:57:19:c9:b5:
         d7:08:b6:44:ac:41:2e:f2:ef:7a:bc:9d:12:73:64:37:c4:b0:
         fe:1f:bf:d1:b3:28:8a:05:4f:24:3b:f5:51:20:5a:96:8d:f5:
         1f:b1:22:b0:26:df:ed:66:f8:07:ea:cf:a7:f4:07:6c:54:4c:
         e0:87:09:4a:09:34:2b:96:91:3f:b9:03:27:84:e5:47:f6:0f:
         39:2b:f4:e2:5a:f9:31:cf:9d:9b:d9:c8:e6:f1:70:3e:2b:7a:
         f2:e0:f9:7e:ce:cc:5b:44:82:07:f2:cf:d2:75:78:07:6a:10:
         21:2a:c4:6f:b9:25:4d:25:f7:7f:46:92:7c:a9:bd:c1:ce:67:
         46:22:ca:da:54:cc:ab:df:1f:5a:04:0d:fb:7a:b6:6b:40:8b:
         0e:70:80:2d:6e:69:14:53:f0:9d:ab:2b:49:86:da:9b:9d:8e:
         84:8d:55:92:2f:52:c9:da:2e:4e:13:c5:70:bb:74:4f:07:e4:
         b2:77:49:d0:60:0b:f9:f8:c9:09:fd:34:7f:10:8c:3b:ea:1f:
         e9:d4:a6:47:5f:a4:05:fc:70:e4:89:e2:5a:3f:64:83:6a:44:
         92:50:b8:bc:c1:99:9a:ac:26:5e:40:4f:0a:b2:ba:db:30:e0:
         18:f0:c5:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 01:10:43 2026 by rpki-client