Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/cc86d8d3-3864-3d3b-9050-2d8ab7f98aca.roa
File:                     cc86d8d3-3864-3d3b-9050-2d8ab7f98aca.roa (raw, json)
Hash identifier:          VsblLzvL6HdkEF7ZPc8KvvAZ+FfLoAjR7ewgl+f4/0s=
Subject key identifier:   A2:92:1B:0F:35:F1:9A:A5:F5:F6:51:E4:2A:8B:5C:D7:07:4E:CE:E7
Certificate issuer:       /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45
Certificate serial:       010D0C9F4328584EA78FE8046A1DE0A22A699C80
Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/cc86d8d3-3864-3d3b-9050-2d8ab7f98aca.roa
Signing time:             Wed 29 Jul 2026 01:00:12 +0000
ROA not before:           Wed 29 Jul 2026 01:00:12 +0000
ROA not after:            Tue 27 Oct 2026 01:00:12 +0000
asID:                     396614
IP address blocks:        198.41.0.10/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 20 Aug 2026 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:a7:8f:e8:04:6a:1d:e0:a2:2a:69:9c:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45
        Validity
            Not Before: Jul 29 01:00:12 2026 GMT
            Not After : Oct 27 01:00:12 2026 GMT
        Subject: CN=8308f595-9b19-44ab-9b94-1f410cd92c0d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:3e:17:1b:f0:15:d7:fe:2b:7a:57:84:95:54:
                    a9:15:90:2b:60:d4:0f:0e:43:88:ff:ac:ad:5e:80:
                    76:d3:bf:26:f9:db:5b:ca:62:05:a5:66:7c:e6:ba:
                    e5:68:c2:cb:c3:0e:10:0b:93:70:36:46:b0:79:ec:
                    3e:b8:1c:69:58:49:85:dc:68:67:a6:f1:77:6a:0d:
                    19:cc:9a:a4:6b:90:c4:e8:bf:74:96:dd:be:ad:5b:
                    8d:9c:bc:e7:3f:af:8b:b0:1d:10:11:cd:55:f4:b3:
                    82:f8:10:6d:f7:67:6b:56:d8:8c:32:5b:66:39:a5:
                    c2:a9:2d:bb:3c:86:c8:64:a1:7a:04:c6:8f:4d:f7:
                    a6:67:3b:ae:a8:e6:71:d9:5c:74:31:5f:1e:fb:5c:
                    7a:ae:00:a9:e5:27:82:04:b0:89:d2:8a:c7:52:fa:
                    8f:a9:dd:f7:b3:8c:8f:b9:a3:82:e7:5e:1f:c9:60:
                    ba:12:af:dc:9e:50:b2:7b:df:69:7a:b2:76:4f:4f:
                    68:62:a3:d4:53:d6:0f:56:48:46:54:68:c0:a6:55:
                    6b:38:03:41:75:66:0a:02:de:7d:ed:04:2a:ad:65:
                    49:1c:15:74:e0:94:73:c8:c5:d1:f8:92:04:fd:5a:
                    ab:e8:a8:84:08:e8:ae:ec:86:f4:90:44:56:a9:27:
                    49:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A2:92:1B:0F:35:F1:9A:A5:F5:F6:51:E4:2A:8B:5C:D7:07:4E:CE:E7
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/cc86d8d3-3864-3d3b-9050-2d8ab7f98aca.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl

            X509v3 Authority Key Identifier:
                keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  198.41.0.10/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         50:9c:73:2c:ba:09:50:22:f1:7e:dd:c8:3a:d0:b5:81:c9:64:
         89:c8:a5:42:b3:d8:6d:d1:97:fb:0e:e3:a5:18:56:c7:05:80:
         6e:4e:0a:a0:cb:58:06:ef:2a:ce:57:a2:31:24:0b:16:72:ba:
         d9:50:be:df:5d:29:03:60:57:14:c0:d4:b6:80:fe:06:e9:e0:
         2a:e4:77:ab:05:97:b2:5e:f5:f7:40:90:7c:1e:74:86:e3:fb:
         ff:67:ff:38:e9:af:2f:a3:e9:e6:f5:99:3c:af:d0:85:7b:a7:
         ca:33:3c:42:54:32:d5:25:7a:01:72:df:d1:78:4b:17:4d:e7:
         14:ef:25:6f:40:ce:ca:01:fa:05:15:de:de:7d:fa:d5:05:c7:
         cd:42:f3:eb:a3:6a:18:11:d1:96:c3:f1:4f:2c:c9:fe:0d:99:
         b3:94:dd:59:a7:8a:8e:81:fe:be:d6:38:98:07:fc:53:7d:3d:
         60:d9:d9:e2:f0:73:f8:e1:64:b1:65:78:c2:33:0c:9b:c7:e3:
         13:a2:ef:ed:8b:7f:7b:f0:24:f8:d2:0f:c7:81:5f:23:3a:01:
         32:6d:c8:58:8f:55:a3:27:45:e6:a4:ce:d4:6c:01:81:29:af:
         56:4c:c7:d7:5e:d4:0c:ad:47:c2:76:1e:0f:d9:30:09:78:d0:
         cf:fd:1e:a5
-----BEGIN CERTIFICATE-----
MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWE6nj+gEah3goippnIAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz
YzQ1MB4XDTI2MDcyOTAxMDAxMloXDTI2MTAyNzAxMDAxMlowLzEtMCsGA1UEAxMk
ODMwOGY1OTUtOWIxOS00NGFiLTliOTQtMWY0MTBjZDkyYzBkMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnz4XG/AV1/4releElVSpFZArYNQPDkOI/6yt
XoB2078m+dtbymIFpWZ85rrlaMLLww4QC5NwNkaweew+uBxpWEmF3GhnpvF3ag0Z
zJqka5DE6L90lt2+rVuNnLznP6+LsB0QEc1V9LOC+BBt92drVtiMMltmOaXCqS27
PIbIZKF6BMaPTfemZzuuqOZx2Vx0MV8e+1x6rgCp5SeCBLCJ0orHUvqPqd33s4yP
uaOC514fyWC6Eq/cnlCye99perJ2T09oYqPUU9YPVkhGVGjAplVrOANBdWYKAt59
7QQqrWVJHBV04JRzyMXR+JIE/Vqr6KiECOiu7Ib0kERWqSdJqwIDAQABo4IDVjCC
A1IwHQYDVR0OBBYEFKKSGw818Zql9fZR5CqLXNcHTs7nMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz
N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvY2M4NmQ4ZDMtMzg2NC0z
ZDNiLTkwNTAtMmQ4YWI3Zjk4YWNhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05
NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl
MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk
M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk
OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh
YjdmZDNjNDUuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAATAHAwUAxikACjBU
BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v
d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB
CwUAA4IBAQBQnHMsuglQIvF+3cg60LWByWSJyKVCs9ht0Zf7DuOlGFbHBYBuTgqg
y1gG7yrOV6IxJAsWcrrZUL7fXSkDYFcUwNS2gP4G6eAq5HerBZeyXvX3QJB8HnSG
4/v/Z/846a8vo+nm9Zk8r9CFe6fKMzxCVDLVJXoBct/ReEsXTecU7yVvQM7KAfoF
Fd7effrVBcfNQvPro2oYEdGWw/FPLMn+DZmzlN1Zp4qOgf6+1jiYB/xTfT1g2dni
8HP44WSxZXjCMwybx+MTou/ti3978CT40g/HgV8jOgEybchYj1WjJ0XmpM7UbAGB
Ka9WTMfXXtQMrUfCdh4P2TAJeNDP/R6l
-----END CERTIFICATE-----
Generated at Wed Aug 19 16:54:06 2026 by rpki-client