Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/1f479e13-55a1-4a5d-a002-1170a0ff5fd2/3f9b6af5-86ea-33fe-a5b6-49940b201a2e.roa
File:                     3f9b6af5-86ea-33fe-a5b6-49940b201a2e.roa (raw, json)
Hash identifier:          +lIaE+HhpQNZHpe0K0iL4f1SqMr7dU1ef3glddV9/P0=
Subject key identifier:   56:B6:A8:D6:1D:61:82:FC:D1:E6:E0:16:A7:C0:97:63:7A:DA:13:AD
Certificate issuer:       /CN=1f479e13-55a1-4a5d-a002-1170a0ff5fd2
Certificate serial:       010D0C9F4328584DA97AB2AE59C882CD48C89700
Authority key identifier: A8:B5:D2:3A:B5:4F:B3:40:2F:32:2E:2C:2C:44:78:63:FA:56:58:B0
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/1f479e13-55a1-4a5d-a002-1170a0ff5fd2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/1f479e13-55a1-4a5d-a002-1170a0ff5fd2/3f9b6af5-86ea-33fe-a5b6-49940b201a2e.roa
Signing time:             Wed 29 Apr 2026 01:00:23 +0000
ROA not before:           Wed 29 Apr 2026 01:00:23 +0000
ROA not after:            Tue 28 Jul 2026 01:00:23 +0000
asID:                     4150
IP address blocks:        199.91.248.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/1f479e13-55a1-4a5d-a002-1170a0ff5fd2/1f479e13-55a1-4a5d-a002-1170a0ff5fd2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/1f479e13-55a1-4a5d-a002-1170a0ff5fd2/1f479e13-55a1-4a5d-a002-1170a0ff5fd2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/1f479e13-55a1-4a5d-a002-1170a0ff5fd2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 10 May 2026 11:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:a9:7a:b2:ae:59:c8:82:cd:48:c8:97:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1f479e13-55a1-4a5d-a002-1170a0ff5fd2
        Validity
            Not Before: Apr 29 01:00:23 2026 GMT
            Not After : Jul 28 01:00:23 2026 GMT
        Subject: CN=56ea109d-8d1d-4dd3-a88b-98cd2817189f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:c2:e2:3b:88:9d:30:dc:fd:ae:8c:4a:8e:4b:
                    c9:1c:38:ed:c0:78:a3:18:5b:45:3c:74:a8:d2:d9:
                    46:62:64:57:5d:fd:da:53:15:f4:ff:57:22:07:64:
                    74:5d:e6:f3:12:70:23:dc:78:93:f2:19:cc:9d:6a:
                    93:74:0f:ca:2c:3b:f8:55:ff:3c:77:c4:81:03:98:
                    45:0f:4e:46:f6:f3:63:4d:86:73:61:65:cf:0e:7f:
                    0f:2f:6a:54:f8:63:ef:d4:07:a4:0e:fe:68:f6:bf:
                    12:69:43:6f:e8:0e:89:57:9f:01:a8:58:63:1d:23:
                    e0:a7:ef:5b:1f:0b:5c:e3:f1:1b:68:05:c3:d1:5e:
                    0c:f2:bf:15:ee:65:da:4c:ff:b0:88:41:5b:98:7b:
                    64:69:5a:4f:be:cc:b7:33:c5:76:9c:34:d4:ed:89:
                    a8:3e:fb:d6:2a:05:c1:fd:a7:2d:ae:b6:75:82:23:
                    2e:ce:0e:49:70:ec:eb:ba:61:e8:1b:7c:eb:3f:4b:
                    38:9b:e0:e3:a9:cb:1c:10:9b:1d:75:16:4c:4d:62:
                    27:5b:87:c8:7d:ce:ff:6c:af:4d:68:f8:a6:69:ed:
                    cd:d6:84:75:0a:87:2d:9f:ed:bc:1e:67:4d:4e:27:
                    73:64:4e:21:a2:78:ef:f4:ac:99:3a:e2:56:d1:21:
                    6f:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                56:B6:A8:D6:1D:61:82:FC:D1:E6:E0:16:A7:C0:97:63:7A:DA:13:AD
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/1f479e13-55a1-4a5d-a002-1170a0ff5fd2/3f9b6af5-86ea-33fe-a5b6-49940b201a2e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/1f479e13-55a1-4a5d-a002-1170a0ff5fd2/1f479e13-55a1-4a5d-a002-1170a0ff5fd2.crl

            X509v3 Authority Key Identifier:
                keyid:A8:B5:D2:3A:B5:4F:B3:40:2F:32:2E:2C:2C:44:78:63:FA:56:58:B0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/1f479e13-55a1-4a5d-a002-1170a0ff5fd2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.91.248.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         8e:1c:ee:9a:4c:65:d8:4b:5d:a4:2b:16:5b:07:97:a2:d1:7c:
         9b:87:2b:da:fb:2f:35:d9:68:24:8d:37:65:ed:ae:a3:f5:eb:
         6a:04:20:cb:b2:38:03:c9:9f:49:89:8d:93:d4:0c:e6:33:d4:
         e5:0e:bb:59:48:70:90:d7:97:fc:54:02:6a:06:bf:e4:c9:49:
         ba:13:a4:b2:ce:f0:8c:ee:66:98:42:ca:a9:1b:38:84:c2:50:
         9a:97:9a:a3:d4:94:e7:73:83:bb:19:c9:23:54:e0:66:f5:3c:
         b6:c0:c9:fd:8f:59:b3:d5:47:a6:3c:d0:53:aa:11:95:c0:b3:
         56:c8:41:06:ff:bb:af:a4:bf:26:f4:4d:dd:bf:35:20:b1:de:
         5e:42:3c:9b:af:23:72:b9:66:34:2a:89:a5:73:af:98:93:18:
         ba:2d:ee:df:2f:10:62:a6:7b:2d:fb:f8:6f:70:e1:ef:89:29:
         a9:1b:fc:f6:93:a0:cb:4f:5b:1b:7e:23:70:54:b5:38:5d:7c:
         ca:06:13:72:88:74:d9:9c:ff:cd:67:c6:4f:a4:29:e4:9b:12:
         7e:ea:55:65:b9:57:bf:de:d5:da:a9:00:b4:45:19:d9:2e:e6:
         66:59:f1:54:fe:60:33:9e:82:88:df:5e:61:22:a1:5e:7a:a2:
         7d:79:34:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 8 19:27:43 2026 by rpki-client