Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/8f744de9-b5b8-4da8-a7f3-989871978fa6/4cea3d26-1d8c-3751-af3b-3472692e154b.roa
File:                     4cea3d26-1d8c-3751-af3b-3472692e154b.roa (raw, json)
Hash identifier:          xyxIhifx4tHK92kZywriwZwYcscTaMmRmHyVjVm1rnk=
Subject key identifier:   B7:1D:57:A0:7C:F2:84:BA:D0:0F:0F:9E:3C:6A:75:47:79:FE:18:71
Certificate issuer:       /CN=8f744de9-b5b8-4da8-a7f3-989871978fa6
Certificate serial:       010D0C9F4328584E7F3C298668CC5DD89DB96100
Authority key identifier: FE:B0:78:F5:A3:E0:3A:81:A4:57:58:FB:78:30:6D:44:E3:5B:E8:8B
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/8f744de9-b5b8-4da8-a7f3-989871978fa6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/8f744de9-b5b8-4da8-a7f3-989871978fa6/4cea3d26-1d8c-3751-af3b-3472692e154b.roa
Signing time:             Tue 14 Jul 2026 14:37:24 +0000
ROA not before:           Tue 14 Jul 2026 14:37:24 +0000
ROA not after:            Mon 12 Oct 2026 14:37:24 +0000
asID:                     10279
IP address blocks:        152.44.9.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/8f744de9-b5b8-4da8-a7f3-989871978fa6/8f744de9-b5b8-4da8-a7f3-989871978fa6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/8f744de9-b5b8-4da8-a7f3-989871978fa6/8f744de9-b5b8-4da8-a7f3-989871978fa6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/8f744de9-b5b8-4da8-a7f3-989871978fa6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 23 Jul 2026 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:7f:3c:29:86:68:cc:5d:d8:9d:b9:61:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8f744de9-b5b8-4da8-a7f3-989871978fa6
        Validity
            Not Before: Jul 14 14:37:24 2026 GMT
            Not After : Oct 12 14:37:24 2026 GMT
        Subject: CN=6749e1e4-93c2-44ee-b91c-817e84690f13
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:81:0b:8c:16:e6:88:b5:60:c9:f2:78:3d:21:36:
                    94:4b:45:93:0c:a4:b4:88:82:0f:49:7b:1e:ee:51:
                    58:cc:bd:42:58:e6:f3:73:df:cb:e0:30:20:c6:89:
                    e8:19:7b:3b:76:fd:67:e8:2b:17:2e:b8:62:a0:5c:
                    1e:d6:b9:db:d1:c8:4e:61:11:e3:ab:99:d3:1d:59:
                    c5:49:37:a9:d2:df:38:69:77:4a:a3:1c:6f:6c:e3:
                    c6:a5:4b:2a:b3:e8:e9:e1:c9:b0:f2:d4:aa:0d:d9:
                    b6:a3:83:47:b0:1c:ed:6a:5b:af:be:17:c8:d2:e0:
                    9a:b2:52:3a:56:af:ca:9d:22:14:e3:73:d0:30:72:
                    75:79:a4:c1:57:5b:ce:5f:46:ee:26:ef:d3:6d:82:
                    3d:6c:60:5f:77:53:f6:c7:c4:e4:85:db:24:05:04:
                    9c:fe:5e:5b:f2:0b:cc:72:2d:31:fb:76:1e:48:73:
                    c6:3e:0c:ff:1f:92:ee:06:fd:0d:c9:0b:d7:52:61:
                    c5:aa:9d:87:31:ca:34:45:d3:5d:46:6c:96:b7:c9:
                    3e:27:f2:ba:09:c0:0e:a9:87:11:c0:96:6b:f8:60:
                    20:7c:0b:90:0d:6d:39:7f:b7:b2:00:49:a7:69:9e:
                    57:8f:41:53:19:7c:f7:1e:62:d1:4d:4d:12:5d:ab:
                    9f:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B7:1D:57:A0:7C:F2:84:BA:D0:0F:0F:9E:3C:6A:75:47:79:FE:18:71
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/8f744de9-b5b8-4da8-a7f3-989871978fa6/4cea3d26-1d8c-3751-af3b-3472692e154b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/8f744de9-b5b8-4da8-a7f3-989871978fa6/8f744de9-b5b8-4da8-a7f3-989871978fa6.crl

            X509v3 Authority Key Identifier:
                keyid:FE:B0:78:F5:A3:E0:3A:81:A4:57:58:FB:78:30:6D:44:E3:5B:E8:8B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/8f744de9-b5b8-4da8-a7f3-989871978fa6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  152.44.9.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         9c:d0:fb:ef:60:56:4b:b7:64:eb:25:64:1e:9f:0e:1f:93:df:
         ad:79:9e:b3:8b:d5:92:e3:77:ee:ae:16:68:69:19:27:0f:e5:
         06:af:44:5a:7f:07:b7:90:9c:8c:bf:50:53:f4:ae:48:3f:72:
         fc:16:81:b3:da:67:6b:7c:50:19:03:a8:38:62:d3:c7:2f:61:
         0a:42:d4:3a:57:8a:fb:dd:2f:7b:3f:aa:49:8d:f1:e4:d1:61:
         1e:63:e2:92:b0:cf:8a:50:38:00:2e:0d:2f:4b:0f:68:4f:4e:
         dd:56:8e:4b:bc:17:23:16:c8:ba:16:96:c5:b8:2b:a5:f7:cf:
         14:9a:5b:e5:75:cc:93:94:9b:ac:db:93:da:b4:1b:cc:79:f5:
         f3:11:cf:83:e2:27:83:76:1e:fa:29:52:58:2a:d1:69:93:1b:
         f7:6a:e3:fd:7e:58:90:d8:13:0d:cf:e4:0c:c3:7b:e9:bd:57:
         e4:af:25:0c:2b:60:a7:66:77:48:99:2a:c9:f0:6e:69:98:7a:
         39:7c:a7:d8:30:3f:08:fc:90:5a:1b:66:19:f2:17:69:e4:27:
         8a:cd:62:2f:70:10:46:6e:d0:1a:39:d2:63:62:87:17:d1:64:
         d0:41:90:38:c9:88:d0:04:bd:89:91:ea:6b:03:b9:b6:91:4a:
         4b:45:3a:dc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 20:11:56 2026 by rpki-client