Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/aa033953-9752-479d-b9ee-4213cf648479/3be2f94e-6696-38e8-ae53-405000ea496b.roa
File:                     3be2f94e-6696-38e8-ae53-405000ea496b.roa (raw, json)
Hash identifier:          hCcP4s63c9WYnmgajqIFWnd5cuGV1Rtv7dSxsngPnUc=
Subject key identifier:   C7:7B:6B:8F:B1:CF:91:8A:93:D6:3C:E3:BD:D4:0A:B9:99:71:22:40
Certificate issuer:       /CN=aa033953-9752-479d-b9ee-4213cf648479
Certificate serial:       010D0C9F4328584D8C2A9BEF125344479628EEE0
Authority key identifier: 84:26:4B:8E:E4:2C:3A:6E:7F:83:C6:30:7A:5D:8C:4D:38:E6:B8:B3
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/aa033953-9752-479d-b9ee-4213cf648479.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/aa033953-9752-479d-b9ee-4213cf648479/3be2f94e-6696-38e8-ae53-405000ea496b.roa
Signing time:             Sat 18 Apr 2026 13:00:30 +0000
ROA not before:           Sat 18 Apr 2026 13:00:30 +0000
ROA not after:            Fri 17 Jul 2026 13:00:30 +0000
asID:                     395963
IP address blocks:        198.150.188.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/aa033953-9752-479d-b9ee-4213cf648479/aa033953-9752-479d-b9ee-4213cf648479.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/aa033953-9752-479d-b9ee-4213cf648479/aa033953-9752-479d-b9ee-4213cf648479.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/aa033953-9752-479d-b9ee-4213cf648479.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 11 May 2026 03:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:8c:2a:9b:ef:12:53:44:47:96:28:ee:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=aa033953-9752-479d-b9ee-4213cf648479
        Validity
            Not Before: Apr 18 13:00:30 2026 GMT
            Not After : Jul 17 13:00:30 2026 GMT
        Subject: CN=5ffc9e27-0e8a-4169-b94d-2e2de43d6b55
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:61:61:ca:20:91:34:9b:a2:11:6e:20:87:51:
                    59:6c:a1:9e:63:c8:4f:4e:10:59:04:1e:53:a8:2c:
                    54:2c:d2:52:bb:f3:c7:83:db:d5:84:8e:d5:3d:97:
                    15:25:f7:80:ad:fb:68:64:40:22:6b:3a:ca:51:c6:
                    8c:20:61:65:a0:ee:af:7e:b5:7d:3f:cc:8c:ed:7c:
                    6a:cc:2a:9d:f9:53:d5:39:bf:ba:80:cc:d4:b4:74:
                    bc:21:d0:4b:06:3c:9e:6b:d5:bb:67:ff:53:47:a1:
                    a7:d3:08:e4:0f:12:77:9c:5c:e1:70:39:1d:3f:cb:
                    f8:6b:58:d8:7e:39:d0:98:5a:9e:aa:ab:b5:6f:1d:
                    63:5e:91:ab:c7:af:12:64:f2:9d:8a:4d:2d:1f:a5:
                    43:b6:fe:a1:e7:a8:d6:3c:0e:1a:31:cb:2a:2e:43:
                    8f:13:6d:56:17:57:d2:4f:97:75:0a:f8:1e:e9:7d:
                    a8:99:dd:0f:ad:1d:ff:57:bb:8e:12:5c:0e:b0:ad:
                    3d:73:4c:44:42:82:06:92:b2:32:03:75:c1:a1:92:
                    ac:3a:1a:e6:80:71:ec:17:69:20:49:f8:53:49:97:
                    63:1b:01:6d:f5:b4:35:e3:64:ad:e6:ec:0f:4f:9e:
                    d3:a3:39:c1:03:13:f8:2a:5d:8b:a5:37:8a:6d:01:
                    80:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C7:7B:6B:8F:B1:CF:91:8A:93:D6:3C:E3:BD:D4:0A:B9:99:71:22:40
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/aa033953-9752-479d-b9ee-4213cf648479/3be2f94e-6696-38e8-ae53-405000ea496b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/aa033953-9752-479d-b9ee-4213cf648479/aa033953-9752-479d-b9ee-4213cf648479.crl

            X509v3 Authority Key Identifier:
                keyid:84:26:4B:8E:E4:2C:3A:6E:7F:83:C6:30:7A:5D:8C:4D:38:E6:B8:B3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/aa033953-9752-479d-b9ee-4213cf648479.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  198.150.188.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2b:7d:c6:52:9b:34:12:e4:27:38:2d:1a:8d:8d:2a:34:9f:52:
         4b:86:91:af:a9:2d:41:81:1d:9b:14:4a:52:b4:cc:62:32:79:
         d2:da:bd:2d:e5:2e:8e:e2:83:6a:4e:95:cd:7b:98:eb:1d:9b:
         f3:0b:b4:83:3b:4a:d8:4a:5a:8e:81:9f:f9:c5:61:49:88:19:
         75:24:75:44:8f:8c:b4:92:7a:76:e3:39:e8:9b:0a:91:39:ca:
         74:73:1a:55:9c:b0:8f:61:5e:96:75:fe:02:88:24:4c:9b:52:
         26:a9:17:6b:18:e6:02:4b:5a:84:d9:cc:12:40:77:5b:99:27:
         11:75:2e:84:45:51:b7:ea:a5:6a:16:67:65:e2:27:c2:5d:b2:
         80:bc:aa:88:11:20:07:08:6c:ef:54:67:58:f5:5a:34:4d:eb:
         45:5a:d2:04:8e:0f:7f:e7:c4:5d:6a:1d:ae:72:82:5f:3b:35:
         38:d1:c2:f8:c4:f3:91:51:59:cb:b5:b3:1e:5a:cb:0b:cc:b4:
         23:2a:02:19:f2:64:b0:19:41:35:e2:4b:5a:91:3e:45:be:e1:
         01:6e:14:7f:a3:64:07:61:e5:45:f7:50:0d:8e:e3:b3:ea:a5:
         c6:25:98:90:3a:28:55:b2:9f:0b:28:19:44:8d:88:f3:ec:7b:
         39:e9:b3:21
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 8 16:27:41 2026 by rpki-client