Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/961a3609-d1f9-3024-912e-654f43f10735.roa
File:                     961a3609-d1f9-3024-912e-654f43f10735.roa (raw, json)
Hash identifier:          TNM0yVk09XgjvCZD8pNyBE76pdq6b46J2w4Zkr8XoPo=
Subject key identifier:   E7:EE:A0:FC:A2:94:F4:2A:59:E1:C4:C2:09:5F:DF:14:16:48:19:D2
Certificate issuer:       /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45
Certificate serial:       010D0C9F4328584EA7902CB1D4A62C90FAAECB00
Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/961a3609-d1f9-3024-912e-654f43f10735.roa
Signing time:             Wed 29 Jul 2026 01:00:12 +0000
ROA not before:           Wed 29 Jul 2026 01:00:12 +0000
ROA not after:            Tue 27 Oct 2026 01:00:12 +0000
asID:                     396603
IP address blocks:        198.41.0.4/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 20 Aug 2026 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:a7:90:2c:b1:d4:a6:2c:90:fa:ae:cb:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45
        Validity
            Not Before: Jul 29 01:00:12 2026 GMT
            Not After : Oct 27 01:00:12 2026 GMT
        Subject: CN=1c5d9771-3b2f-4186-9aef-84bf492a7da3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:74:55:63:5a:d6:b9:47:4c:5a:b1:9f:ab:bd:
                    02:7e:d8:79:21:21:f1:39:51:6c:42:6a:ef:9c:e7:
                    0f:ba:83:33:ef:3a:2e:d5:41:d7:ea:c8:b2:f3:6b:
                    0e:aa:b0:85:49:08:58:aa:0b:c0:5c:e1:d2:37:ef:
                    a9:d0:f7:38:ca:a7:fe:84:3e:20:72:e4:f0:cb:aa:
                    68:cc:c6:31:9c:2a:74:b3:65:10:92:04:ce:7c:63:
                    cc:13:ab:c6:f2:3e:2d:87:69:a9:e9:2f:22:54:a3:
                    2e:19:8b:50:ca:48:e1:77:77:09:ad:50:0a:bc:6f:
                    16:26:01:b8:a8:04:6c:04:4a:7b:5e:91:cf:a9:3c:
                    0d:ee:a4:c8:e5:24:65:90:0f:49:24:cd:f1:52:dc:
                    ca:26:af:73:8f:e0:3e:ce:26:3e:10:8a:95:6c:ae:
                    f6:8b:18:86:e3:b8:73:2b:c4:62:33:fa:ec:39:24:
                    da:16:78:f9:90:0b:c3:a1:d8:6a:ab:08:95:ad:ed:
                    7e:d3:2e:ad:cd:b6:88:58:39:57:ae:e8:35:da:fe:
                    94:9d:f7:50:05:31:31:15:65:eb:8a:03:2d:73:f6:
                    32:74:6e:4e:aa:c1:13:3e:65:d7:93:c7:69:83:66:
                    9e:b9:f8:e5:b0:4f:0e:c2:49:50:31:88:97:85:ff:
                    f5:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E7:EE:A0:FC:A2:94:F4:2A:59:E1:C4:C2:09:5F:DF:14:16:48:19:D2
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/961a3609-d1f9-3024-912e-654f43f10735.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl

            X509v3 Authority Key Identifier:
                keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  198.41.0.4/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3d:0c:37:ce:c8:28:77:cc:2b:94:6d:25:12:8d:4c:e9:cb:42:
         bc:f4:62:01:cb:d6:12:a9:1f:3a:3b:b1:d5:d5:72:85:c0:ba:
         bd:ee:6f:42:ee:c8:76:96:27:ed:b0:9b:bb:d1:2b:48:69:59:
         95:1b:d8:30:52:d0:ca:81:c5:10:d3:06:7d:56:61:e6:0e:4c:
         46:00:b1:3b:3d:da:8f:ec:63:23:f7:48:11:0e:93:1c:8c:60:
         84:a5:f7:11:46:5d:ab:a0:98:7a:28:7e:c6:0b:21:1c:63:c5:
         c0:57:e9:c4:b4:0f:89:72:2a:b7:ae:2c:e9:14:fa:32:8c:9f:
         72:54:b6:26:25:75:7f:0f:f0:bc:f1:da:f5:a9:b0:ca:2f:80:
         26:e6:df:64:60:28:b6:dc:84:67:31:9b:79:03:46:33:c7:7a:
         3c:75:1c:6f:b4:25:5a:b9:b0:3d:11:78:ed:1e:ac:78:37:a0:
         c0:39:f3:50:67:97:82:08:0b:e5:26:84:8c:8b:9d:57:d5:cb:
         46:96:d0:49:99:ea:42:59:af:9e:85:72:3f:09:ee:5e:cb:ce:
         03:25:f0:9d:27:9b:b8:85:1c:49:00:74:58:30:46:63:f3:9f:
         69:9f:6f:82:77:ef:24:e6:70:cf:5f:2e:07:8b:32:bf:8c:42:
         1b:68:5f:20
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 19 16:57:31 2026 by rpki-client