Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/44bc2b87-223c-4280-a9b3-634e66111eeb/d784b0e5-c75f-36a1-b21e-eade3788cd04.roa
File:                     d784b0e5-c75f-36a1-b21e-eade3788cd04.roa (raw, json)
Hash identifier:          vVTbLX89qFAkllkPMhWob3G4V+Q9TUTtnvOep9nvNYU=
Subject key identifier:   C9:CD:DD:F0:64:F7:EA:A1:9B:61:9D:08:0D:D6:78:D7:1B:67:20:E6
Certificate issuer:       /CN=44bc2b87-223c-4280-a9b3-634e66111eeb
Certificate serial:       010D0C9F4328584E6F3A25B9CB5F7C8495333300
Authority key identifier: 3F:18:D6:D5:4B:8C:63:68:AE:0E:D9:F7:7E:98:10:94:E5:E0:ED:7A
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/44bc2b87-223c-4280-a9b3-634e66111eeb.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/44bc2b87-223c-4280-a9b3-634e66111eeb/d784b0e5-c75f-36a1-b21e-eade3788cd04.roa
Signing time:             Wed 08 Jul 2026 21:00:12 +0000
ROA not before:           Wed 08 Jul 2026 21:00:12 +0000
ROA not after:            Tue 06 Oct 2026 21:00:12 +0000
asID:                     397373
IP address blocks:        192.158.224.0/20 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/44bc2b87-223c-4280-a9b3-634e66111eeb/44bc2b87-223c-4280-a9b3-634e66111eeb.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/44bc2b87-223c-4280-a9b3-634e66111eeb/44bc2b87-223c-4280-a9b3-634e66111eeb.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/44bc2b87-223c-4280-a9b3-634e66111eeb.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 22 Jul 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:6f:3a:25:b9:cb:5f:7c:84:95:33:33:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=44bc2b87-223c-4280-a9b3-634e66111eeb
        Validity
            Not Before: Jul  8 21:00:12 2026 GMT
            Not After : Oct  6 21:00:12 2026 GMT
        Subject: CN=4bf02aae-1ce2-47df-8456-621a299c1cf0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:6e:78:91:d4:23:a1:27:f2:90:fa:c8:02:af:
                    77:1c:d1:b1:38:83:d3:63:24:c3:a5:9e:50:68:e5:
                    b9:0c:dd:28:88:77:8f:de:1b:fc:8a:c6:71:04:49:
                    55:e9:39:53:eb:ec:62:f5:fa:14:ee:0a:2b:c0:78:
                    43:eb:21:28:3f:bb:e4:21:44:81:63:22:e3:db:fc:
                    56:23:f9:a6:02:75:39:73:4b:07:b6:fb:40:51:03:
                    9d:ab:25:46:53:47:67:f1:27:78:ac:eb:8b:d6:d7:
                    46:ec:db:1f:bd:67:c8:f4:0a:2b:f0:28:bf:7b:9e:
                    9b:2c:c7:89:45:f8:fb:fb:8c:96:4b:67:1d:b2:2f:
                    02:1a:2c:b2:4d:39:2f:2b:bb:22:8b:00:3e:45:fd:
                    1d:fc:45:3a:06:dc:52:03:fc:3f:8d:f5:4f:82:80:
                    b4:79:fc:d3:fe:57:a6:a9:03:83:19:1b:94:4e:5c:
                    86:6c:dd:3f:c5:44:a4:3f:9c:21:55:6e:46:c5:14:
                    c2:b7:6d:b0:1b:52:5a:45:fa:0d:e5:f8:e4:94:81:
                    61:19:85:11:76:93:72:2a:02:b1:0b:58:c9:ed:40:
                    dc:f8:a6:e3:c4:08:0d:c4:b1:80:06:97:ff:b6:4f:
                    f4:e1:68:c9:d1:e7:02:15:49:e3:a1:ba:69:74:cd:
                    c9:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C9:CD:DD:F0:64:F7:EA:A1:9B:61:9D:08:0D:D6:78:D7:1B:67:20:E6
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/44bc2b87-223c-4280-a9b3-634e66111eeb/d784b0e5-c75f-36a1-b21e-eade3788cd04.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/44bc2b87-223c-4280-a9b3-634e66111eeb/44bc2b87-223c-4280-a9b3-634e66111eeb.crl

            X509v3 Authority Key Identifier:
                keyid:3F:18:D6:D5:4B:8C:63:68:AE:0E:D9:F7:7E:98:10:94:E5:E0:ED:7A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/44bc2b87-223c-4280-a9b3-634e66111eeb.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.158.224.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6f:89:47:38:58:eb:d9:57:5e:c6:d9:27:ad:fe:78:8f:08:e8:
         b1:07:67:ce:57:fd:30:ce:28:dd:83:34:ca:fe:48:ea:da:77:
         e2:c4:12:7a:cc:77:df:bc:68:5f:2f:6d:36:51:89:40:6c:06:
         f9:8f:d7:ca:cd:96:82:9c:5e:42:a9:d7:32:ad:1c:a2:20:d2:
         fe:d4:ce:af:b3:f7:73:89:9f:2c:85:84:62:f9:66:7e:38:ca:
         5f:ae:6c:e4:b8:37:60:f0:3e:54:dc:a1:af:66:77:e8:88:89:
         a3:0f:c6:1b:4d:5f:7e:b9:f7:ea:04:be:b1:68:36:6d:e8:32:
         20:1b:b5:a5:02:71:53:e6:c2:73:65:e8:3d:5c:37:28:f3:00:
         a8:1f:0a:7c:15:3d:1d:9f:c0:35:7f:da:8a:29:5d:fe:c1:d8:
         e2:e0:c7:5d:1b:e1:2e:22:cd:26:50:0a:1c:8e:78:58:2f:20:
         5e:d4:25:66:5d:bb:ed:a3:df:65:56:4e:33:8c:ff:82:05:99:
         f7:fa:22:55:b3:d0:2b:89:b6:14:a1:b7:c5:5a:20:67:c7:db:
         7e:9b:75:98:9a:35:10:ce:15:cf:00:41:9a:84:18:c2:46:8e:
         61:9f:9b:a6:db:7e:e1:b9:b0:72:a6:37:82:b9:69:77:2e:08:
         8e:0a:e3:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 01:33:33 2026 by rpki-client