Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/80935cb6-9291-4119-bca0-1952a00b7186/d10bc2b4-d72a-35ce-9c64-75c9ab9e74ad.roa
File:                     d10bc2b4-d72a-35ce-9c64-75c9ab9e74ad.roa (raw, json)
Hash identifier:          4Z3Do3GiXuWBhk89KfZCWdUcVtPZ0Oy3RYoFgL/gpi8=
Subject key identifier:   1E:80:E9:EA:1C:A2:D6:62:04:F4:44:43:E9:09:36:F3:DF:A7:A8:46
Certificate issuer:       /CN=80935cb6-9291-4119-bca0-1952a00b7186
Certificate serial:       010D0C9F4328584E885A5983DDCB353CD1FBDF00
Authority key identifier: 66:C9:C9:AF:F6:88:95:3F:91:93:61:1A:FE:93:D0:72:22:7B:60:84
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/80935cb6-9291-4119-bca0-1952a00b7186.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/80935cb6-9291-4119-bca0-1952a00b7186/d10bc2b4-d72a-35ce-9c64-75c9ab9e74ad.roa
Signing time:             Fri 17 Jul 2026 21:00:12 +0000
ROA not before:           Fri 17 Jul 2026 21:00:12 +0000
ROA not after:            Thu 15 Oct 2026 21:00:12 +0000
asID:                     402171
IP address blocks:        202.37.194.0/24 maxlen: 24
                          2620:19:4000::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/80935cb6-9291-4119-bca0-1952a00b7186/80935cb6-9291-4119-bca0-1952a00b7186.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/80935cb6-9291-4119-bca0-1952a00b7186/80935cb6-9291-4119-bca0-1952a00b7186.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/80935cb6-9291-4119-bca0-1952a00b7186.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 23 Jul 2026 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:88:5a:59:83:dd:cb:35:3c:d1:fb:df:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=80935cb6-9291-4119-bca0-1952a00b7186
        Validity
            Not Before: Jul 17 21:00:12 2026 GMT
            Not After : Oct 15 21:00:12 2026 GMT
        Subject: CN=a33040c9-0a55-4653-991c-1fdc29d75532
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:42:0c:5c:15:45:08:e5:4f:f0:0a:33:7d:d6:
                    36:ec:40:ef:f0:57:74:d0:67:72:aa:23:41:5d:75:
                    eb:35:9d:59:c0:7a:d8:cf:5d:99:d2:b9:e2:37:f4:
                    f9:93:13:3b:8b:94:fe:cb:76:17:42:ff:54:a8:4c:
                    2a:e9:73:8b:de:81:3c:0b:bf:7e:ab:c0:5e:e9:fd:
                    8a:f7:04:0a:d6:d6:dc:da:f6:b4:2e:b9:8c:43:c2:
                    b1:9f:60:08:89:5b:36:b9:0d:f8:cf:2f:07:19:27:
                    c5:fa:4a:34:24:7e:a2:21:a2:83:5d:38:b5:9e:63:
                    76:36:47:a8:6b:13:fa:05:73:b3:a9:9d:8b:ac:f1:
                    18:26:be:f0:5c:05:94:22:13:22:4e:81:50:b3:24:
                    7c:e3:10:ae:89:25:65:ba:6f:2c:95:46:21:b3:fa:
                    6e:02:07:ab:bc:c4:c2:95:e8:dc:e6:e3:01:a0:0d:
                    c2:fd:25:af:a9:30:b2:0d:3a:c7:9b:5b:5e:6c:ea:
                    a0:f6:ba:64:d0:b0:22:99:3a:9b:82:1a:e9:3a:82:
                    50:6c:07:e0:44:a4:29:16:16:c7:2a:77:6a:67:cb:
                    0e:e2:38:b8:d0:b6:35:f4:a3:8e:84:71:a7:6d:61:
                    1a:da:ab:a1:ef:6c:f7:57:00:05:02:6e:ad:99:42:
                    68:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1E:80:E9:EA:1C:A2:D6:62:04:F4:44:43:E9:09:36:F3:DF:A7:A8:46
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/80935cb6-9291-4119-bca0-1952a00b7186/d10bc2b4-d72a-35ce-9c64-75c9ab9e74ad.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/80935cb6-9291-4119-bca0-1952a00b7186/80935cb6-9291-4119-bca0-1952a00b7186.crl

            X509v3 Authority Key Identifier:
                keyid:66:C9:C9:AF:F6:88:95:3F:91:93:61:1A:FE:93:D0:72:22:7B:60:84

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/80935cb6-9291-4119-bca0-1952a00b7186.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  202.37.194.0/24
                IPv6:
                  2620:19:4000::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         11:9c:65:db:e6:9d:8e:1f:be:f3:34:d9:d3:91:13:59:89:c1:
         a3:9a:47:e3:21:e8:ac:77:93:26:58:7e:db:f5:68:9f:e3:b7:
         d0:67:38:c4:e1:b0:dc:93:4b:ec:cd:51:1f:35:5a:30:a3:5b:
         7e:7b:c4:59:fb:07:7d:c8:49:40:52:03:3a:1c:13:80:ef:2b:
         2a:32:4c:07:1b:37:f3:e4:27:20:b6:f3:27:62:e5:fb:c1:a9:
         4e:da:b4:a9:ee:24:55:5e:e1:94:3f:09:84:a3:f6:09:fb:3a:
         d7:12:57:f0:97:26:e0:01:70:56:8c:4a:10:ef:6f:99:1a:be:
         29:98:0c:65:d1:38:9c:4c:6f:ca:58:32:d3:1f:e5:0d:b9:b7:
         08:27:b0:0e:35:dd:29:10:ac:54:a6:e7:c9:f6:72:eb:06:9f:
         53:70:3f:8f:9c:66:a3:91:e6:3b:2d:8b:2e:f0:7a:f9:f5:9c:
         bf:e4:86:19:4b:e5:ec:9a:d9:42:90:cf:b1:8c:13:5e:b2:47:
         e1:2b:e5:4a:d4:58:a5:b2:1b:a8:cf:97:68:19:0c:14:e4:61:
         97:06:93:73:7e:2b:97:8a:8b:81:0a:74:2c:ba:a2:c5:0a:e3:
         0a:32:a6:1d:a0:10:b9:83:bf:3a:96:31:8c:a9:3e:53:89:32:
         64:2d:00:5b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 20:48:41 2026 by rpki-client