Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/712951d4-501e-451c-a20a-59b6aff3e2d4/7fdcd6b8-d33d-3b7f-b64b-2e1a55321536.roa
File:                     7fdcd6b8-d33d-3b7f-b64b-2e1a55321536.roa (raw, json)
Hash identifier:          Q/sJ9POatu89Trj2U/5YQVddOjgW1r7yiU2eiI5BGN4=
Subject key identifier:   53:5D:2D:80:27:47:E1:BC:78:9D:EB:59:2D:D3:32:07:56:49:35:2A
Certificate issuer:       /CN=712951d4-501e-451c-a20a-59b6aff3e2d4
Certificate serial:       010D0C9F4328584EBB11BC9B2072A5E2837EDE80
Authority key identifier: 52:7A:38:8E:28:41:32:8C:92:B2:70:AE:33:9C:BD:2C:75:A3:4E:73
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/712951d4-501e-451c-a20a-59b6aff3e2d4.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/712951d4-501e-451c-a20a-59b6aff3e2d4/7fdcd6b8-d33d-3b7f-b64b-2e1a55321536.roa
Signing time:             Wed 05 Aug 2026 01:00:12 +0000
ROA not before:           Wed 05 Aug 2026 01:00:12 +0000
ROA not after:            Tue 03 Nov 2026 02:00:12 +0000
asID:                     38177
IP address blocks:        198.140.4.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/712951d4-501e-451c-a20a-59b6aff3e2d4/712951d4-501e-451c-a20a-59b6aff3e2d4.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/712951d4-501e-451c-a20a-59b6aff3e2d4/712951d4-501e-451c-a20a-59b6aff3e2d4.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/712951d4-501e-451c-a20a-59b6aff3e2d4.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 22 Aug 2026 15:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:bb:11:bc:9b:20:72:a5:e2:83:7e:de:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=712951d4-501e-451c-a20a-59b6aff3e2d4
        Validity
            Not Before: Aug  5 01:00:12 2026 GMT
            Not After : Nov  3 02:00:12 2026 GMT
        Subject: CN=3c873399-3ac2-4dbc-ac73-1db73a5223ef
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:a3:48:f9:81:e3:61:00:38:78:bf:02:96:63:
                    7e:60:9b:38:7b:1c:a1:19:e5:b6:8a:f6:55:8c:59:
                    02:5a:fe:ca:b8:c5:e1:9d:95:50:d1:8b:e1:a9:2a:
                    3c:92:fa:23:8a:84:94:ed:32:48:a6:95:ee:40:6e:
                    33:26:1f:cf:97:84:ac:ef:21:52:47:f6:90:0f:ae:
                    bf:d0:0f:d7:2b:e1:22:85:bc:d1:4f:85:24:ba:14:
                    09:3e:d8:8f:49:cb:dc:3a:74:77:42:03:70:e1:da:
                    23:67:bf:5e:ed:38:80:35:eb:65:43:6c:30:5d:74:
                    52:fe:ca:5f:61:87:5a:53:0b:0d:f7:cc:7d:61:18:
                    67:54:c3:e0:87:05:8a:94:91:5e:31:51:ec:d1:bd:
                    5a:14:68:40:4d:88:86:3a:e8:01:b0:9e:47:96:bc:
                    35:05:7f:6d:36:9e:76:79:67:12:3e:30:7c:10:ca:
                    bc:b7:a1:d9:76:f3:b9:38:ec:87:46:2f:49:5f:1d:
                    e2:79:d5:85:a6:53:f5:27:76:e1:82:ce:6c:10:fc:
                    18:5e:3f:38:9d:45:f1:d4:ec:1a:c3:0d:4e:dc:6f:
                    8a:5a:08:f4:dd:a7:4a:81:6f:a2:d1:2c:40:23:eb:
                    7b:da:7b:aa:df:d4:49:66:00:d6:21:f1:fa:91:62:
                    c1:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                53:5D:2D:80:27:47:E1:BC:78:9D:EB:59:2D:D3:32:07:56:49:35:2A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/712951d4-501e-451c-a20a-59b6aff3e2d4/7fdcd6b8-d33d-3b7f-b64b-2e1a55321536.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/712951d4-501e-451c-a20a-59b6aff3e2d4/712951d4-501e-451c-a20a-59b6aff3e2d4.crl

            X509v3 Authority Key Identifier:
                keyid:52:7A:38:8E:28:41:32:8C:92:B2:70:AE:33:9C:BD:2C:75:A3:4E:73

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/712951d4-501e-451c-a20a-59b6aff3e2d4.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  198.140.4.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7f:54:94:58:30:61:b0:71:c8:14:3c:aa:eb:2e:df:72:1a:f4:
         8d:25:24:ff:8b:71:51:f9:81:c5:a5:e0:f0:ba:0b:44:50:08:
         e8:13:2c:1e:9c:77:00:b5:12:ca:02:b5:7b:d5:aa:ec:97:69:
         4a:a2:0a:68:8b:0c:dc:6b:73:34:92:7f:86:ee:8d:ce:b0:80:
         74:9a:f5:bb:45:de:82:6a:52:3a:2d:c6:c9:79:42:ce:70:ed:
         8f:54:29:26:c4:38:98:f9:ea:6c:70:ca:c3:0b:b1:f1:30:38:
         b3:2d:d9:f7:50:45:b9:23:d1:b7:0a:38:ee:09:98:c8:35:b0:
         f9:1f:c7:81:0f:d3:32:aa:be:ec:97:34:f3:2e:86:94:7b:1d:
         ac:5b:d9:51:0a:6a:2a:9b:32:95:5b:d8:49:b8:b0:1c:c0:13:
         a2:bb:0d:cc:47:58:22:93:81:72:dc:8b:b6:8f:a9:99:ae:11:
         e7:93:ec:bb:b4:0b:f4:38:85:83:27:fe:00:de:c1:06:c5:50:
         a9:55:08:cc:b7:85:33:9b:3f:a3:14:dd:ef:a5:dd:f9:61:d5:
         f1:77:65:c4:81:8e:f7:aa:33:b4:d3:7c:d3:7f:9a:be:88:bb:
         5d:04:be:7b:fe:b4:e7:40:9b:31:22:51:14:fa:9c:bf:cb:bd:
         2f:26:b4:4a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 21 02:03:07 2026 by rpki-client