Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/5cc3157b-f4de-42ca-905c-b5c839bb17bb/f441e96c-c4e9-3b06-bab4-4a7437df1ae4.roa
File:                     f441e96c-c4e9-3b06-bab4-4a7437df1ae4.roa (raw, json)
Hash identifier:          rtUpJDvrxbV0V6WkyAqj6mGrtxVvE9fgM1ZnEgX2Ig8=
Subject key identifier:   07:8D:F4:AF:59:D8:FA:76:89:00:26:84:BC:5E:72:B7:D9:67:AC:96
Certificate issuer:       /CN=5cc3157b-f4de-42ca-905c-b5c839bb17bb
Certificate serial:       010D0C9F4328584E5FDF63C4AAD5C89FC27AAD80
Authority key identifier: 4C:FD:F1:34:C9:07:89:05:E7:A4:4B:54:DE:35:C0:24:2E:EC:04:59
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/5cc3157b-f4de-42ca-905c-b5c839bb17bb.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/5cc3157b-f4de-42ca-905c-b5c839bb17bb/f441e96c-c4e9-3b06-bab4-4a7437df1ae4.roa
Signing time:             Fri 03 Jul 2026 09:00:12 +0000
ROA not before:           Fri 03 Jul 2026 09:00:12 +0000
ROA not after:            Thu 01 Oct 2026 09:00:12 +0000
asID:                     198949
IP address blocks:        132.198.0.0/16 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/5cc3157b-f4de-42ca-905c-b5c839bb17bb/5cc3157b-f4de-42ca-905c-b5c839bb17bb.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/5cc3157b-f4de-42ca-905c-b5c839bb17bb/5cc3157b-f4de-42ca-905c-b5c839bb17bb.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/5cc3157b-f4de-42ca-905c-b5c839bb17bb.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 22 Jul 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:5f:df:63:c4:aa:d5:c8:9f:c2:7a:ad:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5cc3157b-f4de-42ca-905c-b5c839bb17bb
        Validity
            Not Before: Jul  3 09:00:12 2026 GMT
            Not After : Oct  1 09:00:12 2026 GMT
        Subject: CN=df5f1ee9-cc81-4432-9110-0326a0d90ed8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:df:9a:0c:85:51:4d:30:78:9f:e4:a8:bf:2b:
                    29:b9:ce:bc:4e:66:1b:e3:68:d3:d1:50:39:ab:1f:
                    46:be:0c:6d:90:15:6a:b1:18:9e:35:5e:eb:a7:7c:
                    8a:27:3d:f8:47:b5:35:8f:51:95:a1:0d:51:46:2d:
                    e4:07:d6:a8:f9:92:6e:24:d3:27:6c:ac:bb:03:02:
                    1f:93:b3:ee:3d:99:bd:0f:b0:0c:ad:aa:55:4b:c9:
                    37:c7:af:75:f7:7e:77:fb:5b:83:a3:ee:03:a7:c0:
                    f1:21:23:a7:8c:f1:58:49:0b:79:70:46:a3:15:bd:
                    73:a4:da:14:fd:5b:8d:f2:1c:68:bc:f2:04:d4:02:
                    f6:e5:50:6a:f4:4c:58:d0:b9:6b:a4:6a:c3:47:08:
                    8e:d3:14:f1:ce:cf:fb:9a:16:5e:a8:31:d6:49:1f:
                    11:23:a0:83:36:6a:b1:d1:82:28:a4:85:58:91:44:
                    ef:42:45:3b:84:14:c8:54:3d:89:53:28:36:a3:f9:
                    1d:d1:6b:fa:5a:e3:78:e3:5b:82:79:91:cb:fb:d1:
                    a9:60:78:64:2f:ee:ec:25:4b:f3:16:61:ab:1b:0a:
                    15:bd:b3:f6:4d:3c:39:3f:8f:34:7e:4c:ed:b2:ab:
                    f9:21:cd:f3:f0:2a:cb:fe:be:f1:b8:0f:74:5f:8b:
                    2b:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                07:8D:F4:AF:59:D8:FA:76:89:00:26:84:BC:5E:72:B7:D9:67:AC:96
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/5cc3157b-f4de-42ca-905c-b5c839bb17bb/f441e96c-c4e9-3b06-bab4-4a7437df1ae4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/5cc3157b-f4de-42ca-905c-b5c839bb17bb/5cc3157b-f4de-42ca-905c-b5c839bb17bb.crl

            X509v3 Authority Key Identifier:
                keyid:4C:FD:F1:34:C9:07:89:05:E7:A4:4B:54:DE:35:C0:24:2E:EC:04:59

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/5cc3157b-f4de-42ca-905c-b5c839bb17bb.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  132.198.0.0/16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         86:9a:dd:83:90:1c:00:9e:59:c1:68:fc:30:e8:08:1b:e2:0b:
         c8:60:a9:84:3f:18:26:42:46:ec:43:54:a7:ad:df:1c:df:40:
         e5:c1:5b:98:6c:a3:7e:80:64:b6:60:bf:e5:46:2b:3b:19:b0:
         e4:59:e3:ba:bf:7e:50:6f:ba:05:94:e0:f6:68:6b:e1:f7:4a:
         cd:0e:71:84:cb:7f:f3:4a:f6:a5:60:75:0d:03:fe:f0:ba:00:
         ab:91:87:7f:36:96:84:4e:5f:4f:6e:90:6b:ed:b8:c4:3d:86:
         90:38:47:c2:56:56:3c:40:75:ee:d3:68:d3:3e:00:e5:e5:d5:
         08:7d:42:24:c1:bd:5f:64:b4:cd:cc:39:ad:3f:86:cc:7a:d3:
         64:60:b8:ff:c4:bd:c9:bc:63:bc:a0:d4:18:3b:04:57:01:72:
         b3:ec:57:1e:f5:41:7a:7d:55:c3:c4:fb:b7:cc:ec:14:8b:d3:
         e1:14:04:ee:10:6f:ec:9b:da:74:35:69:4f:33:54:d8:0b:95:
         9f:6a:74:d6:59:80:27:21:07:92:56:c4:d0:47:ad:44:76:95:
         4d:ce:b2:df:80:6d:66:ec:3a:a0:56:fb:1b:43:8a:2a:d2:35:
         a0:5e:8f:5f:ec:b2:3b:31:e4:dc:8c:7f:7f:fe:04:36:e9:e9:
         3d:c5:8b:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 14:00:48 2026 by rpki-client