Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/5599678a-c6a8-4921-aa0a-62a64b2f1631/0184950f-9c02-3248-a632-9f96a6f085f9.roa
File:                     0184950f-9c02-3248-a632-9f96a6f085f9.roa (raw, json)
Hash identifier:          t1ZJV4b+pr0YkAL2djF1Zzino8CCihBVMQq9+tjJQ2c=
Subject key identifier:   9C:34:7E:BA:3D:5F:6B:8F:AB:03:27:03:58:AD:EF:AA:28:87:B9:BA
Certificate issuer:       /CN=5599678a-c6a8-4921-aa0a-62a64b2f1631
Certificate serial:       010D0C9F4328584D95F0027393DC0A9D7EE01F80
Authority key identifier: A7:57:A4:B1:32:85:CF:43:2E:0E:54:6F:2F:1A:B3:97:5E:12:40:5C
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/5599678a-c6a8-4921-aa0a-62a64b2f1631.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/5599678a-c6a8-4921-aa0a-62a64b2f1631/0184950f-9c02-3248-a632-9f96a6f085f9.roa
Signing time:             Wed 22 Apr 2026 01:00:23 +0000
ROA not before:           Wed 22 Apr 2026 01:00:23 +0000
ROA not after:            Tue 21 Jul 2026 01:00:23 +0000
asID:                     398437
IP address blocks:        170.39.36.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/5599678a-c6a8-4921-aa0a-62a64b2f1631/5599678a-c6a8-4921-aa0a-62a64b2f1631.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/5599678a-c6a8-4921-aa0a-62a64b2f1631/5599678a-c6a8-4921-aa0a-62a64b2f1631.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/5599678a-c6a8-4921-aa0a-62a64b2f1631.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 30 Apr 2026 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:95:f0:02:73:93:dc:0a:9d:7e:e0:1f:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5599678a-c6a8-4921-aa0a-62a64b2f1631
        Validity
            Not Before: Apr 22 01:00:23 2026 GMT
            Not After : Jul 21 01:00:23 2026 GMT
        Subject: CN=8432bea5-7dc1-402d-a675-02c114bbe4af
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e9:e2:c4:0a:f9:31:1d:81:ca:e3:e0:69:29:3c:
                    1b:b7:37:d0:a1:c9:5b:84:4e:25:75:94:80:23:66:
                    85:cc:2c:f2:5e:fa:84:da:18:90:ab:d1:b8:50:30:
                    46:95:a5:49:51:1d:35:ef:0a:34:83:1c:f5:ac:bb:
                    ab:f8:69:66:29:b0:bc:7d:3d:5c:93:42:66:38:0d:
                    8a:7e:19:50:f0:43:f6:0b:9e:4a:c0:5b:ff:56:21:
                    5c:25:f0:82:1b:2b:3d:8f:87:d4:fd:e8:88:07:d5:
                    ff:20:11:db:7c:9b:86:2f:00:57:27:8e:28:7d:4d:
                    b4:b1:13:c4:b9:17:a6:1f:59:b9:eb:95:ac:52:39:
                    dc:d1:be:df:37:9b:d7:b0:63:4a:8b:ee:5a:25:27:
                    ea:4e:20:87:8a:a6:1f:ed:19:91:87:55:6c:64:28:
                    af:15:5a:15:03:16:5d:f1:51:86:3c:9a:29:84:38:
                    db:80:b4:ac:3c:b7:a8:fe:90:49:b4:c7:a2:21:58:
                    46:b1:92:49:d9:f1:39:72:8b:ba:e3:b0:56:d9:87:
                    2a:63:28:5e:8e:7b:60:9d:bc:48:ce:65:3d:77:f7:
                    fd:fa:52:d4:3d:e5:a7:33:e1:04:30:c7:e6:8e:33:
                    ba:3a:de:f7:9b:cb:87:62:6c:51:1d:58:55:5b:05:
                    58:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9C:34:7E:BA:3D:5F:6B:8F:AB:03:27:03:58:AD:EF:AA:28:87:B9:BA
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/5599678a-c6a8-4921-aa0a-62a64b2f1631/0184950f-9c02-3248-a632-9f96a6f085f9.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/5599678a-c6a8-4921-aa0a-62a64b2f1631/5599678a-c6a8-4921-aa0a-62a64b2f1631.crl

            X509v3 Authority Key Identifier:
                keyid:A7:57:A4:B1:32:85:CF:43:2E:0E:54:6F:2F:1A:B3:97:5E:12:40:5C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/5599678a-c6a8-4921-aa0a-62a64b2f1631.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.39.36.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         52:ea:3a:68:d5:7e:92:b7:dc:4a:e4:a6:ca:2b:de:bc:45:d5:
         b7:e2:67:09:79:be:18:88:06:6d:aa:68:3c:a8:20:9d:18:89:
         39:63:ee:af:c2:ed:54:19:68:23:87:99:39:e7:cb:5e:38:1a:
         a6:7a:59:a4:d8:4a:5c:61:57:b3:a6:32:31:45:f5:40:b9:21:
         67:17:52:1b:7a:3f:7b:77:87:6e:c7:cb:49:ea:b9:b3:74:eb:
         ef:cf:b0:d8:50:3e:28:ad:ed:3e:ad:a9:8d:6e:8f:ce:1b:f3:
         30:d0:9a:c1:80:af:0b:0e:d6:54:fc:38:07:da:57:4c:69:e5:
         e5:78:c8:ad:ce:77:d8:9b:fc:f9:72:38:96:1b:10:2e:81:1a:
         a4:80:02:46:aa:c7:fc:66:e5:0f:63:ca:3f:c5:88:09:4c:e1:
         e7:b6:eb:2e:40:00:37:db:b8:97:4f:f1:3e:c3:aa:2e:07:31:
         3d:07:01:9e:d3:c2:63:84:1c:4f:a9:e1:d2:7b:4e:51:36:52:
         b2:a1:ad:f4:5e:fd:45:54:23:82:67:f4:a9:7e:24:e2:b5:2f:
         a9:1a:47:6c:88:a8:c3:22:a1:8b:a2:23:03:f9:f2:1d:82:6c:
         aa:0a:e8:73:e8:a2:9e:a0:dc:51:a4:9b:53:4e:ef:0f:e8:c2:
         34:b3:40:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 29 15:28:39 2026 by rpki-client