Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/ce77bbe3-2bd7-3030-bccc-4b00551bae3a.roa
File:                     ce77bbe3-2bd7-3030-bccc-4b00551bae3a.roa (raw, json)
Hash identifier:          OaGhqj1XC271l+QZd9GAv6tfyP7izS57voY+LNPh7Rw=
Subject key identifier:   DC:65:43:46:07:AD:E3:3E:4E:66:7F:36:BA:F5:E6:ED:EB:31:75:12
Certificate issuer:       /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45
Certificate serial:       010D0C9F4328584EA78FEDEDF7E1C6A291B69F80
Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/ce77bbe3-2bd7-3030-bccc-4b00551bae3a.roa
Signing time:             Wed 29 Jul 2026 01:00:12 +0000
ROA not before:           Wed 29 Jul 2026 01:00:12 +0000
ROA not after:            Tue 27 Oct 2026 01:00:12 +0000
asID:                     27544
IP address blocks:        198.41.0.10/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 20 Aug 2026 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:a7:8f:ed:ed:f7:e1:c6:a2:91:b6:9f:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45
        Validity
            Not Before: Jul 29 01:00:12 2026 GMT
            Not After : Oct 27 01:00:12 2026 GMT
        Subject: CN=111c8b2a-32ff-46c7-b290-c54ad3b1075e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:88:01:ac:2e:b3:7c:fa:19:0a:a8:60:d5:f7:a1:
                    16:33:a0:0e:e2:d2:da:33:7c:c8:32:05:4c:d0:e6:
                    ef:9c:ce:df:a8:f1:b2:4d:2d:aa:0b:2d:a7:61:22:
                    bc:e6:0a:28:5e:9d:5a:39:0f:66:ae:5d:3f:df:96:
                    40:38:be:bb:06:ef:f6:90:92:4c:51:19:4c:e8:7e:
                    ec:4e:ee:e5:1f:2a:de:eb:03:bc:3f:05:5c:ac:8f:
                    6e:b9:47:93:0f:c6:55:9e:83:54:48:d7:68:4a:f2:
                    2a:af:e3:ab:d6:8b:42:83:29:e3:b1:02:e9:b5:bf:
                    73:04:d9:17:20:41:87:5a:ca:d3:37:7f:0e:43:f9:
                    53:71:3d:8f:a4:22:c1:b7:7c:e7:c7:84:1f:7c:cb:
                    a0:1d:32:c5:15:70:02:72:b8:74:c5:92:fa:94:b4:
                    3a:7c:9d:98:b8:1e:e3:0c:0a:a0:f0:41:de:6d:cb:
                    e6:e2:cb:8e:2d:08:1a:0c:34:f7:c5:29:b4:1e:d5:
                    6f:3a:bc:54:df:e1:08:4d:2e:c8:21:fd:5e:b1:70:
                    8f:93:5d:0c:9e:c2:63:0e:8d:33:95:77:a0:b0:f8:
                    de:6b:43:33:5e:1f:70:2e:82:f4:fa:36:9c:00:7d:
                    f8:b7:6e:17:28:d1:e5:67:37:47:85:97:f3:84:e5:
                    07:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DC:65:43:46:07:AD:E3:3E:4E:66:7F:36:BA:F5:E6:ED:EB:31:75:12
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/ce77bbe3-2bd7-3030-bccc-4b00551bae3a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl

            X509v3 Authority Key Identifier:
                keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  198.41.0.10/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         55:a2:6c:9f:d1:2c:3a:80:68:35:53:5e:48:bf:47:4b:66:85:
         c4:76:ad:6d:14:67:5c:56:c6:a4:77:48:c8:80:8b:79:04:0c:
         b8:68:91:3e:b8:04:c5:0a:b3:cf:dd:9a:ad:7e:51:7c:54:aa:
         c2:00:24:c5:5f:ba:f8:b6:9a:bb:fe:22:ac:8f:40:50:1a:68:
         39:2f:42:5f:62:d1:8e:7e:07:0e:95:30:46:ca:fb:4e:33:fd:
         53:bc:6c:ff:03:5b:56:e4:42:ca:b1:d7:01:5e:e4:55:58:8a:
         bd:61:e1:da:f0:21:3a:5f:f1:57:bc:04:d4:e5:57:d0:a2:75:
         cb:9a:20:7a:02:20:0e:87:0b:10:be:42:1d:06:09:4f:df:7b:
         53:c3:23:27:cd:9d:b1:22:32:36:81:68:d9:6a:c9:a7:42:cc:
         21:46:ae:05:12:2a:cb:54:ea:d6:fa:fe:e8:96:b1:78:c8:bf:
         2f:6b:c3:ef:db:e5:90:d0:eb:15:7d:0f:59:e0:60:91:44:1c:
         88:99:09:73:a2:61:fd:37:77:e2:ec:46:04:2b:9d:4e:5a:79:
         1b:d5:db:3b:de:84:da:d5:ae:ad:29:b6:18:b0:bb:ca:0a:92:
         d5:f8:09:bd:75:a5:f2:b3:32:27:33:c7:e7:43:4e:f1:2c:18:
         fa:49:8e:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 19 16:53:32 2026 by rpki-client