Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/c3537be4-3b50-38c9-b9d6-79dbd28142c0.roa
File:                     c3537be4-3b50-38c9-b9d6-79dbd28142c0.roa (raw, json)
Hash identifier:          Wap/TLlHm4rNB7WSw4WQWNCNoBGgEk73Zy4H9bAPz6Q=
Subject key identifier:   F8:48:2B:C2:11:B2:E8:A3:17:E8:5A:36:29:2A:01:D1:31:C2:58:F2
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F4328584E6144C29B53221B6A9E000B80
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/c3537be4-3b50-38c9-b9d6-79dbd28142c0.roa
Signing time:             Fri 03 Jul 2026 21:00:11 +0000
ROA not before:           Fri 03 Jul 2026 21:00:11 +0000
ROA not after:            Thu 01 Oct 2026 21:00:11 +0000
asID:                     7725
IP address blocks:        174.163.44.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 08 Jul 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:61:44:c2:9b:53:22:1b:6a:9e:00:0b:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Jul  3 21:00:11 2026 GMT
            Not After : Oct  1 21:00:11 2026 GMT
        Subject: CN=864a7900-9aeb-45fa-81c2-350f57c043a9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:40:ba:fc:70:99:98:73:f7:33:2b:22:76:ff:
                    ff:de:5a:dc:05:4b:69:c8:9f:43:45:5a:9b:87:23:
                    dd:06:ef:32:7b:f8:a8:64:d0:dd:0b:87:54:ce:11:
                    91:70:f9:9a:44:d5:fd:e9:85:74:e2:da:34:34:94:
                    b3:9e:2f:c3:f5:ce:f2:44:7f:ee:ff:cd:3f:1d:d4:
                    26:85:a6:0f:16:48:5b:30:ed:a6:30:20:59:57:ca:
                    f4:d6:69:4d:fe:35:e8:2b:79:d6:b5:fb:73:5b:bf:
                    4f:16:e0:37:dd:f2:44:f9:8e:b3:a0:1f:8f:ec:b9:
                    16:8f:50:9c:33:44:1d:1c:7a:ae:07:ad:ea:86:81:
                    b0:5a:fc:6b:85:65:cd:cf:f6:c7:6e:b4:70:fc:b4:
                    fa:f9:f4:3d:a6:da:6b:f5:54:e0:22:97:f3:19:ff:
                    8c:6d:35:00:fd:b9:98:b0:0e:0b:fa:d8:c4:8e:8c:
                    32:e8:24:6e:10:63:94:13:52:da:ed:fa:6d:8d:7a:
                    e7:2a:31:bd:ff:3c:f1:22:2b:96:1c:c6:9b:cd:2a:
                    06:6f:f0:d2:2a:a6:e4:32:05:24:99:ce:79:3e:1d:
                    2a:9e:ce:56:a1:f4:e5:72:18:b1:21:e6:20:c5:9f:
                    b5:45:e9:6e:68:ee:7c:b7:7a:a0:cf:8c:b1:ef:5d:
                    77:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F8:48:2B:C2:11:B2:E8:A3:17:E8:5A:36:29:2A:01:D1:31:C2:58:F2
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/c3537be4-3b50-38c9-b9d6-79dbd28142c0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  174.163.44.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         d0:dc:9b:21:e0:c4:b4:dc:2f:e5:03:5a:41:7b:4b:c5:86:97:
         c8:d4:cd:94:41:69:ab:eb:44:53:bd:d2:a8:d7:ef:ea:d3:da:
         2c:38:04:fa:01:25:d3:ca:69:ec:84:24:a6:03:66:06:5f:2c:
         bd:2a:4c:58:c9:46:00:1c:21:02:ed:b1:49:21:5b:7c:3f:4a:
         a0:df:21:e0:c9:b3:f3:1b:dc:3d:1c:dc:d5:84:25:8e:5f:93:
         1b:26:af:46:95:3d:48:59:46:30:11:14:89:9a:08:30:ac:8b:
         4f:72:f2:93:88:d9:69:0c:23:4d:e9:55:79:04:63:59:15:b9:
         9f:3a:e0:12:7c:47:6b:35:e4:1b:be:71:92:a5:20:48:7e:be:
         c1:39:b5:2d:a6:69:61:18:e7:41:c3:33:5a:db:3e:c1:48:57:
         b1:46:70:e8:60:1c:71:23:d3:f6:79:fc:85:e0:74:16:f3:17:
         88:92:27:d9:2e:7a:e1:28:f8:ec:eb:a8:f7:99:ba:b6:f4:72:
         90:98:ac:df:6b:d5:de:18:80:e4:09:65:eb:ed:41:ce:1a:b4:
         f5:0f:a3:de:cb:e0:09:67:8c:5f:1c:11:4f:27:b2:01:c3:79:
         8a:ff:ce:52:39:39:84:47:a9:94:8a:4a:ea:f8:cb:1e:86:49:
         7a:2f:d6:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 6 22:34:54 2026 by rpki-client