Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3916c6d6-2cf8-381b-a120-9f617bbac524.roa
File:                     3916c6d6-2cf8-381b-a120-9f617bbac524.roa (raw, json)
Hash identifier:          xj78HKVMp7TMzkNXTr7M8BDUj01O0pNVoZdOtvRseX0=
Subject key identifier:   36:EC:85:BE:0E:3A:43:0D:8B:84:1F:C1:00:B4:DC:5F:AF:57:1D:A5
Certificate issuer:       /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
Certificate serial:       010D0C9F4328584E90BA59F915D993FABEDB1880
Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3916c6d6-2cf8-381b-a120-9f617bbac524.roa
Signing time:             Mon 20 Jul 2026 21:00:11 +0000
ROA not before:           Mon 20 Jul 2026 21:00:11 +0000
ROA not after:            Sun 18 Oct 2026 21:00:11 +0000
asID:                     19905
IP address blocks:        150.195.0.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 26 Jul 2026 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:90:ba:59:f9:15:d9:93:fa:be:db:18:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
        Validity
            Not Before: Jul 20 21:00:11 2026 GMT
            Not After : Oct 18 21:00:11 2026 GMT
        Subject: CN=e943cf02-da1c-4746-9789-84665da2dce4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dc:d5:a7:d0:c8:62:f7:d3:f0:80:95:0f:c1:48:
                    4f:b4:a5:6e:0b:83:81:3e:0b:4f:ad:08:7e:63:ec:
                    90:aa:c0:db:05:75:a3:33:e2:21:20:78:4e:d8:cc:
                    44:75:4f:de:ae:2e:09:7b:dd:7a:48:72:c1:c9:3d:
                    83:03:01:90:cc:f9:30:30:92:94:de:c7:ca:b9:45:
                    f6:34:59:5b:63:63:d7:08:1f:60:45:b9:f1:7f:56:
                    83:97:e8:8c:ba:1a:94:e6:01:4c:62:1e:34:68:77:
                    61:fc:71:5b:2f:17:c9:63:c7:91:7b:be:8f:f2:5e:
                    3a:f8:1b:58:6b:7b:90:47:1c:f4:30:4c:65:f4:01:
                    44:a5:82:c5:8c:05:ee:b4:af:9d:f4:38:2f:ea:ed:
                    ba:d3:fd:6b:f7:0f:7e:96:0e:02:ab:60:31:86:bf:
                    73:62:5f:d3:78:99:4f:58:9c:e6:00:99:b7:d7:f9:
                    49:37:d8:e2:2a:8f:6c:41:38:e7:8f:37:c8:b7:13:
                    cc:eb:c9:f0:6c:70:12:f7:b4:f4:04:9d:5d:38:d5:
                    36:34:7f:ff:36:d3:8e:82:05:25:bd:53:8c:16:5d:
                    37:25:f7:b5:44:cc:8e:84:82:34:0e:03:49:bc:48:
                    b8:4f:bd:02:30:51:6e:1e:10:53:60:a5:70:ba:b9:
                    dd:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                36:EC:85:BE:0E:3A:43:0D:8B:84:1F:C1:00:B4:DC:5F:AF:57:1D:A5
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3916c6d6-2cf8-381b-a120-9f617bbac524.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl

            X509v3 Authority Key Identifier:
                keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  150.195.0.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         41:66:4d:f8:d5:dd:c3:46:0f:57:20:cd:e0:e5:e1:a0:82:6e:
         4b:21:13:88:2e:3b:51:c5:e2:65:91:fb:14:28:4d:7b:2e:dc:
         77:4e:9a:8a:f5:48:2a:ee:7e:26:22:10:8c:0b:9a:68:a0:e1:
         0f:7c:df:a7:da:69:f2:a3:17:b1:34:58:8b:82:2b:7c:ca:ea:
         c8:e8:6e:ec:eb:c9:73:4e:00:25:9a:80:2b:35:ae:33:be:d5:
         7d:ca:b1:38:ed:1e:af:c9:22:a0:32:11:25:33:54:06:f6:84:
         80:3c:20:11:58:24:09:9e:5c:a3:21:09:8a:53:1d:5f:65:91:
         d9:61:7e:b1:00:bc:1d:de:16:9a:d2:db:d5:69:43:20:94:4a:
         dc:44:e8:b9:d8:3d:ff:10:2f:9f:b4:5b:dc:ba:b8:34:f4:88:
         91:14:1f:a5:28:d1:a1:17:03:e3:e6:94:66:1a:1d:da:9c:d9:
         fb:2d:53:9e:d5:b7:fc:e9:e0:97:9e:7d:10:be:04:e0:76:b8:
         c7:fb:94:0d:47:1a:37:b5:c1:0c:d1:1f:ed:a9:b6:44:01:52:
         c6:c2:05:f2:e8:45:33:ca:9b:c1:1d:33:06:6b:33:b0:5d:fc:
         95:4b:fc:87:9f:ec:60:36:ae:78:00:8e:1b:a8:29:41:c3:48:
         93:f7:69:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 00:42:07 2026 by rpki-client