Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/f78903ec-4bc6-394c-ac27-5ee48e3a803e.roa
File:                     f78903ec-4bc6-394c-ac27-5ee48e3a803e.roa (raw, json)
Hash identifier:          2WukpVwvqmy37SP5DLoXLb+BDk2LKiUY9F8BSmgeQHI=
Subject key identifier:   5B:5C:C3:CF:CF:9A:46:B8:51:FE:37:0F:F8:FC:88:E6:FC:EB:A5:1D
Certificate issuer:       /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45
Certificate serial:       010D0C9F4328584EA78FFB719CB7C3F8B5D61710
Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/f78903ec-4bc6-394c-ac27-5ee48e3a803e.roa
Signing time:             Wed 29 Jul 2026 01:00:12 +0000
ROA not before:           Wed 29 Jul 2026 01:00:12 +0000
ROA not after:            Tue 27 Oct 2026 01:00:12 +0000
asID:                     397195
IP address blocks:        198.41.0.4/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 20 Aug 2026 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:a7:8f:fb:71:9c:b7:c3:f8:b5:d6:17:10
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45
        Validity
            Not Before: Jul 29 01:00:12 2026 GMT
            Not After : Oct 27 01:00:12 2026 GMT
        Subject: CN=01276b2d-795f-4e75-9bcb-56921940bc32
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:86:af:19:6f:8b:36:61:ce:85:01:f3:25:76:
                    07:b0:08:3c:87:9d:d2:a7:86:9e:2a:8b:c6:67:09:
                    37:da:4c:e7:5f:58:bc:6d:f4:b8:b5:74:12:c3:1c:
                    b5:9e:43:1d:be:7b:1c:5a:2f:cb:a4:0e:9b:7b:17:
                    2d:31:07:ff:07:4d:7c:a4:92:3f:e6:6b:45:69:ec:
                    71:3e:b1:1c:74:7e:53:dc:b7:02:45:c4:4a:d6:54:
                    92:a7:2c:f3:f3:2e:72:8d:08:e1:3b:74:6d:34:0e:
                    b7:43:65:22:1a:fb:2f:c6:aa:fb:a8:3d:9f:c6:bb:
                    f9:70:df:81:9f:3e:94:90:c3:fa:d2:52:6e:ae:b4:
                    84:da:c2:36:da:a4:42:70:9e:27:cd:e8:9b:6d:81:
                    90:26:db:41:bb:c1:ca:e3:7c:b0:fb:f7:e8:aa:ff:
                    a4:67:53:6a:90:59:ea:07:04:85:80:e7:e6:e8:26:
                    69:34:d0:f9:85:52:af:98:94:0a:6f:79:5d:bc:db:
                    15:9d:7e:42:56:8f:2d:ac:07:00:cb:01:8d:a1:68:
                    cb:a0:54:4a:81:7b:b0:23:36:d7:31:81:24:7d:44:
                    f1:a5:21:e4:39:e0:51:31:44:21:5e:5c:e2:53:b6:
                    a5:72:60:52:e0:fb:e8:f6:d7:61:d0:bc:8d:37:b2:
                    1b:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5B:5C:C3:CF:CF:9A:46:B8:51:FE:37:0F:F8:FC:88:E6:FC:EB:A5:1D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/f78903ec-4bc6-394c-ac27-5ee48e3a803e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl

            X509v3 Authority Key Identifier:
                keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  198.41.0.4/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1d:b1:ed:c2:4f:eb:ce:7f:dc:8d:c1:5c:0a:d2:4c:48:f5:ca:
         9c:6d:6e:c0:6c:b7:b8:7b:16:16:d9:70:ef:2a:07:ad:1e:e4:
         73:6e:98:a4:3c:29:d8:f5:e6:7d:82:23:d3:0e:e3:0c:f3:a3:
         b9:d5:9f:cb:13:97:8c:96:59:94:71:01:cf:75:99:7d:4e:48:
         57:3c:f6:91:22:cd:ba:72:de:08:ad:9e:15:39:0d:c4:d4:c3:
         ae:79:3d:c2:14:dd:e5:86:aa:20:6c:1b:c1:b8:1c:e3:ab:ca:
         8a:91:6b:61:4c:4b:db:4f:e7:ea:b8:54:e7:65:89:45:a9:fd:
         c8:6c:6a:e3:81:e2:01:18:20:03:6e:1d:62:ed:ea:52:4c:b5:
         9a:4d:b5:84:20:c3:a0:08:df:c8:7c:20:2d:20:e1:9c:77:2c:
         60:b8:0a:f2:2d:47:79:e0:d8:17:8e:ef:3f:c3:02:35:26:45:
         bc:05:bc:02:5b:bd:1a:ae:4d:50:91:60:ff:57:d4:c8:e4:e6:
         ef:aa:c7:c2:b4:38:b8:7a:02:65:8d:46:78:7b:1b:e1:0e:c2:
         62:71:80:a5:81:b1:46:6c:1e:c1:4a:24:c4:6e:da:9b:16:ac:
         f2:ce:60:7d:17:68:5e:51:e4:59:fa:37:15:27:c2:56:63:34:
         ff:17:6f:8a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 19 16:55:58 2026 by rpki-client