Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/dcf48eb5-c08a-4793-8dd8-a83f660c3f82/4d98a805-abed-37f8-a3c2-4b3ef4f6f7a0.roa
File:                     4d98a805-abed-37f8-a3c2-4b3ef4f6f7a0.roa (raw, json)
Hash identifier:          HjM7FXlQOPc0EYvPYJDG9Pd2L2yOLB4SEUOfT3+v/tA=
Subject key identifier:   DC:C7:A2:E5:8A:AF:21:DD:9E:AB:E3:10:57:97:0A:E7:4C:01:1D:C0
Certificate issuer:       /CN=dcf48eb5-c08a-4793-8dd8-a83f660c3f82
Certificate serial:       010D0C9F4328584ECA6C6F29121A90DBE864CF00
Authority key identifier: A7:E9:8D:68:1B:DE:B5:00:E7:0C:08:8C:F4:E1:1A:41:07:0B:63:5E
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/dcf48eb5-c08a-4793-8dd8-a83f660c3f82.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/dcf48eb5-c08a-4793-8dd8-a83f660c3f82/4d98a805-abed-37f8-a3c2-4b3ef4f6f7a0.roa
Signing time:             Mon 10 Aug 2026 13:00:12 +0000
ROA not before:           Mon 10 Aug 2026 13:00:12 +0000
ROA not after:            Sun 08 Nov 2026 14:00:12 +0000
asID:                     134365
IP address blocks:        198.44.172.0/23 maxlen: 23
                          198.44.172.0/24 maxlen: 24
                          198.44.173.0/24 maxlen: 24
                          198.44.174.0/23 maxlen: 23
                          198.44.174.0/24 maxlen: 24
                          198.44.175.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/dcf48eb5-c08a-4793-8dd8-a83f660c3f82/dcf48eb5-c08a-4793-8dd8-a83f660c3f82.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/dcf48eb5-c08a-4793-8dd8-a83f660c3f82/dcf48eb5-c08a-4793-8dd8-a83f660c3f82.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/dcf48eb5-c08a-4793-8dd8-a83f660c3f82.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 11 Sep 2026 17:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:ca:6c:6f:29:12:1a:90:db:e8:64:cf:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=dcf48eb5-c08a-4793-8dd8-a83f660c3f82
        Validity
            Not Before: Aug 10 13:00:12 2026 GMT
            Not After : Nov  8 14:00:12 2026 GMT
        Subject: CN=1899f777-a427-4bc4-b444-dc62f31a9f0e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:67:ba:99:d5:08:d3:6f:25:51:1e:6e:f3:e6:
                    57:df:4e:76:bd:1a:3b:85:83:c1:0a:3f:18:bc:c2:
                    c9:ad:7b:04:0e:cd:0b:fe:79:1e:eb:fe:78:ed:fd:
                    51:2a:46:68:46:91:1c:b1:e2:1d:aa:b8:a5:d1:8a:
                    28:dd:d2:7b:41:81:de:07:a7:4b:04:2d:4e:a0:64:
                    55:90:62:a1:24:f7:7b:9e:a8:c9:f8:7f:54:7e:30:
                    cf:0c:22:c5:4d:23:bb:2f:6d:c7:51:a9:0b:54:0e:
                    30:8e:e0:c3:ff:9b:5c:c9:1a:1d:32:c9:0e:6d:14:
                    1b:ae:58:1a:c6:77:ae:e3:6b:9b:d1:cd:14:44:b6:
                    a1:9b:bc:5c:1e:90:ed:f8:c1:da:3c:2a:f8:ca:82:
                    8b:0a:33:ca:2d:5f:7b:4b:2f:8d:78:d4:66:66:3b:
                    16:c9:39:c1:30:22:cc:98:de:72:72:73:64:20:5a:
                    31:62:d6:03:f1:98:26:e1:62:02:71:a3:63:1c:d3:
                    38:1b:8e:97:f1:36:90:af:6f:b4:4e:5f:f8:cf:f5:
                    85:58:45:3a:f1:27:b1:1a:57:94:ad:67:09:06:77:
                    d6:a0:d3:27:52:57:51:e8:a2:67:64:c7:09:71:61:
                    d4:1a:cd:fc:1c:b1:38:5c:eb:68:7c:b6:07:64:b3:
                    f8:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DC:C7:A2:E5:8A:AF:21:DD:9E:AB:E3:10:57:97:0A:E7:4C:01:1D:C0
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/dcf48eb5-c08a-4793-8dd8-a83f660c3f82/4d98a805-abed-37f8-a3c2-4b3ef4f6f7a0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/dcf48eb5-c08a-4793-8dd8-a83f660c3f82/dcf48eb5-c08a-4793-8dd8-a83f660c3f82.crl

            X509v3 Authority Key Identifier:
                keyid:A7:E9:8D:68:1B:DE:B5:00:E7:0C:08:8C:F4:E1:1A:41:07:0B:63:5E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/dcf48eb5-c08a-4793-8dd8-a83f660c3f82.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  198.44.172.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         8f:8f:74:22:f3:13:e9:70:91:ee:7d:99:cb:6f:80:c1:3b:eb:
         12:5f:bc:1f:93:38:de:c7:8d:de:e9:e2:46:64:6d:95:01:03:
         f7:09:ba:10:30:18:a1:5f:81:19:50:83:b7:9a:f5:b6:8f:8b:
         8f:64:b1:38:bb:35:3a:c2:11:a5:1b:40:b1:65:7e:34:16:99:
         e4:00:54:bc:05:6a:24:22:40:ab:61:f4:4e:b0:92:26:0d:2a:
         c3:cd:a9:41:a3:01:62:af:80:53:d2:9a:f1:75:de:c6:9a:9d:
         df:0d:4f:84:29:9c:4c:ff:58:c0:8d:6a:74:0e:b4:31:bc:3e:
         1a:b9:69:4e:7b:d4:ab:c5:ba:b3:aa:03:22:ea:e1:2e:01:dd:
         4b:6d:97:aa:02:00:33:35:16:1e:29:0f:fa:9e:8b:a9:28:c0:
         69:3a:03:50:05:87:a8:3b:93:e4:35:39:b3:ed:f8:64:bc:0c:
         50:42:70:34:b5:a7:5b:db:6c:91:f7:bf:a6:95:15:16:9b:bb:
         59:83:23:fb:53:f0:7e:a3:2b:8a:9a:8b:5a:1e:06:76:41:c0:
         cf:c2:86:30:0a:91:16:70:7e:5c:19:5b:89:47:ba:7c:b6:a4:
         b2:cf:62:fc:00:c1:bc:4d:72:29:08:e6:f7:f2:91:b5:df:ac:
         8d:e0:f9:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 10 17:38:48 2026 by rpki-client