Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/22dfbc20-b48d-4ad3-9ada-aaa1a88570dc/1f72750f-4dc6-3366-865f-2a732e2f189d.roa
File:                     1f72750f-4dc6-3366-865f-2a732e2f189d.roa (raw, json)
Hash identifier:          pJ/9rRutH2sVV2JneGCqAdh9Ek5DkFxO4xYaJ/vv2gU=
Subject key identifier:   F8:88:CA:F8:67:51:13:FD:2F:7A:4C:CE:CE:15:E7:73:6C:E5:29:EB
Certificate issuer:       /CN=22dfbc20-b48d-4ad3-9ada-aaa1a88570dc
Certificate serial:       010D0C9F4328584D07ACEF353568DE9D52A2CD80
Authority key identifier: D4:24:69:AB:E4:65:51:C8:5E:22:B8:EF:B2:A7:BA:52:F1:62:65:80
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/22dfbc20-b48d-4ad3-9ada-aaa1a88570dc.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/22dfbc20-b48d-4ad3-9ada-aaa1a88570dc/1f72750f-4dc6-3366-865f-2a732e2f189d.roa
Signing time:             Mon 02 Mar 2026 02:00:31 +0000
ROA not before:           Mon 02 Mar 2026 02:00:31 +0000
ROA not after:            Sun 31 May 2026 01:00:31 +0000
asID:                     19691
IP address blocks:        198.37.50.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/22dfbc20-b48d-4ad3-9ada-aaa1a88570dc/22dfbc20-b48d-4ad3-9ada-aaa1a88570dc.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/22dfbc20-b48d-4ad3-9ada-aaa1a88570dc/22dfbc20-b48d-4ad3-9ada-aaa1a88570dc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/22dfbc20-b48d-4ad3-9ada-aaa1a88570dc.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 12 Mar 2026 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:07:ac:ef:35:35:68:de:9d:52:a2:cd:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=22dfbc20-b48d-4ad3-9ada-aaa1a88570dc
        Validity
            Not Before: Mar  2 02:00:31 2026 GMT
            Not After : May 31 01:00:31 2026 GMT
        Subject: CN=b206d139-f384-49fd-baa5-3dbd30937767
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:cb:d0:dd:a5:30:fa:25:ed:90:bb:14:10:73:
                    7f:1d:8d:f9:11:dd:fa:18:83:42:5f:fa:58:92:7a:
                    da:57:ae:65:80:0b:32:bc:2b:66:92:07:90:f7:fa:
                    db:47:15:06:6a:54:45:3d:ec:c0:07:df:c3:c8:40:
                    9f:48:ed:09:c2:01:1e:a7:60:ee:87:2e:55:55:74:
                    28:5b:59:8f:81:ff:aa:a7:80:7f:b9:40:85:44:55:
                    f4:33:85:6b:8b:30:c4:a1:3b:51:dd:ba:71:46:85:
                    c6:a1:c7:4a:07:24:29:7f:f8:12:fd:fc:ce:75:e9:
                    09:ea:1d:58:c3:02:ca:d2:03:7e:e1:8e:25:42:e8:
                    5f:19:5d:61:67:97:a6:c6:06:20:c2:91:3f:d5:b1:
                    9d:36:8d:e6:fc:12:04:15:69:30:b0:69:69:8c:f7:
                    98:84:48:04:e5:20:64:47:8e:f5:48:7c:fb:35:cd:
                    c6:75:d7:9b:30:76:b4:c3:13:2a:51:03:d6:7c:67:
                    7c:97:dd:4e:69:ad:ac:e8:11:72:10:e0:af:27:cb:
                    72:76:01:89:21:1a:f4:c4:14:8f:f2:e9:f9:6b:df:
                    72:94:1b:1e:8d:be:2c:61:17:fc:53:fd:57:31:be:
                    db:52:dc:f5:21:9f:1a:c1:47:c8:6b:2f:de:42:c0:
                    24:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F8:88:CA:F8:67:51:13:FD:2F:7A:4C:CE:CE:15:E7:73:6C:E5:29:EB
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/22dfbc20-b48d-4ad3-9ada-aaa1a88570dc/1f72750f-4dc6-3366-865f-2a732e2f189d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/22dfbc20-b48d-4ad3-9ada-aaa1a88570dc/22dfbc20-b48d-4ad3-9ada-aaa1a88570dc.crl

            X509v3 Authority Key Identifier:
                keyid:D4:24:69:AB:E4:65:51:C8:5E:22:B8:EF:B2:A7:BA:52:F1:62:65:80

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/22dfbc20-b48d-4ad3-9ada-aaa1a88570dc.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  198.37.50.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         65:64:51:56:be:d7:c9:70:98:2c:67:e3:07:49:75:84:91:f7:
         a5:3e:4b:41:a9:84:e4:3b:1f:6e:9a:39:f5:62:70:5c:49:43:
         c7:00:ed:ce:50:78:6e:8e:d7:ad:6d:89:6c:ae:9d:5a:ee:3e:
         7f:87:96:82:28:c3:85:f4:13:f9:6e:6a:43:ee:9e:bc:3b:16:
         5c:7b:e5:6d:55:b5:f0:df:23:80:9f:e2:dd:8e:96:4d:71:ba:
         d7:76:4f:b3:e8:b7:e9:26:76:7d:6c:03:1b:9f:5b:6f:31:ba:
         8a:41:15:88:08:03:d8:a8:58:e5:30:39:67:10:6d:5a:54:8e:
         40:50:a3:20:19:a7:91:d9:29:33:94:f5:1f:ae:ed:d1:05:7c:
         12:48:20:52:da:31:c7:9b:ce:66:2e:55:d9:16:44:33:13:64:
         87:d9:da:92:56:0e:2b:76:e9:3b:3a:54:5b:6d:49:50:ae:ba:
         7b:63:ad:2b:43:26:9a:a5:3c:d1:ff:0a:4f:5a:51:b3:2f:10:
         21:00:d2:88:a1:88:2e:28:c3:27:4e:42:45:5c:d9:a2:7a:a2:
         78:ee:9f:ce:c0:55:42:69:aa:04:bb:e6:28:db:d0:1a:f6:6c:
         08:1a:cf:32:e9:b4:d6:1d:cb:6e:0b:b7:61:31:68:3b:fe:c3:
         46:a1:fc:14
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Mar 10 11:37:27 2026 by rpki-client