Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/4e534d5e-d592-4f77-b437-24906bd6cceb/3ef713b7-a9da-3cfc-a2c4-1982ed61cafc.roa
File:                     3ef713b7-a9da-3cfc-a2c4-1982ed61cafc.roa (raw, json)
Hash identifier:          CCNsw5Pe4C3I/GkQdUgslwQSqlvtXfKmf+K6j3iC8Kg=
Subject key identifier:   3A:02:1C:E3:7E:12:7F:F0:D4:AF:72:84:C6:2E:D1:4C:63:A1:CA:4A
Certificate issuer:       /CN=4e534d5e-d592-4f77-b437-24906bd6cceb
Certificate serial:       010D0C9F4328584DA6B015E8203CD8DF1CC18648
Authority key identifier: 50:1D:9D:5A:DD:6D:09:0A:6A:F3:B0:0D:21:34:5E:4F:FC:14:FB:F9
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/4e534d5e-d592-4f77-b437-24906bd6cceb.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/4e534d5e-d592-4f77-b437-24906bd6cceb/3ef713b7-a9da-3cfc-a2c4-1982ed61cafc.roa
Signing time:             Tue 28 Apr 2026 01:00:24 +0000
ROA not before:           Tue 28 Apr 2026 01:00:24 +0000
ROA not after:            Mon 27 Jul 2026 01:00:24 +0000
asID:                     396982
IP address blocks:        148.80.68.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/4e534d5e-d592-4f77-b437-24906bd6cceb/4e534d5e-d592-4f77-b437-24906bd6cceb.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/4e534d5e-d592-4f77-b437-24906bd6cceb/4e534d5e-d592-4f77-b437-24906bd6cceb.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/4e534d5e-d592-4f77-b437-24906bd6cceb.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 15 May 2026 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:a6:b0:15:e8:20:3c:d8:df:1c:c1:86:48
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e534d5e-d592-4f77-b437-24906bd6cceb
        Validity
            Not Before: Apr 28 01:00:24 2026 GMT
            Not After : Jul 27 01:00:24 2026 GMT
        Subject: CN=637eab2a-fdf8-448c-8590-5eee79a76841
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:24:f8:19:23:ff:e1:d0:ea:28:d5:ff:f0:12:
                    b3:d6:47:22:a4:b0:b5:84:e2:41:49:06:95:c8:bc:
                    a5:c7:49:41:24:97:cc:a2:f3:91:f0:be:d5:18:bd:
                    9a:9d:25:ae:d9:5d:f4:e4:4f:98:ca:31:d7:8f:39:
                    24:af:7a:89:d7:95:14:c4:5a:3c:2c:2d:b7:52:88:
                    79:3c:c5:32:01:db:8a:f1:90:70:70:97:6f:15:a3:
                    08:18:11:7d:3a:51:2d:24:7e:7b:be:51:04:bd:4b:
                    cd:a3:44:98:08:5e:f7:9a:6e:96:1f:77:c8:b6:49:
                    18:6c:17:22:30:dc:a8:bf:0f:0f:b1:1b:ca:2b:68:
                    a8:0e:0f:a3:5a:0b:dd:23:b8:c8:96:95:dd:1e:9a:
                    fc:25:aa:4c:3c:b0:40:a0:2c:50:54:e5:01:86:dc:
                    b7:15:93:f9:48:a0:a9:a6:a4:75:95:e6:02:f7:8b:
                    a3:a2:5b:37:6e:58:31:4b:22:6b:69:77:47:01:54:
                    45:ce:56:eb:a3:d2:14:8d:bd:a0:d0:4a:e0:3a:fe:
                    d0:7a:05:07:25:c7:0a:02:9a:f9:dd:51:3c:ab:f9:
                    95:2b:cd:64:70:44:40:2b:62:26:09:66:92:8c:53:
                    b2:67:02:2b:00:3b:e3:43:ee:91:05:74:27:33:ed:
                    11:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3A:02:1C:E3:7E:12:7F:F0:D4:AF:72:84:C6:2E:D1:4C:63:A1:CA:4A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/4e534d5e-d592-4f77-b437-24906bd6cceb/3ef713b7-a9da-3cfc-a2c4-1982ed61cafc.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/4e534d5e-d592-4f77-b437-24906bd6cceb/4e534d5e-d592-4f77-b437-24906bd6cceb.crl

            X509v3 Authority Key Identifier:
                keyid:50:1D:9D:5A:DD:6D:09:0A:6A:F3:B0:0D:21:34:5E:4F:FC:14:FB:F9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/4e534d5e-d592-4f77-b437-24906bd6cceb.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  148.80.68.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6a:fd:db:54:f2:51:ff:db:c1:c6:f6:54:97:fc:8a:41:0f:66:
         62:48:8e:32:3e:a7:38:df:d4:6c:68:dd:f8:07:35:02:48:96:
         3a:5f:a9:ca:94:7e:4d:26:2f:45:31:df:54:01:7e:2f:8a:21:
         2f:cb:61:64:ce:0e:a0:dc:bd:2c:51:8c:1e:bc:94:3a:ad:f6:
         a4:46:b5:67:90:bc:29:4c:d0:cf:d7:72:4f:2d:9f:de:e4:8a:
         5f:39:4d:e3:e5:90:48:13:42:1c:56:f4:a5:65:2c:36:54:49:
         eb:1b:d7:92:4f:b0:58:1e:3f:98:68:a1:13:59:80:e9:56:b1:
         ee:9a:5e:b1:52:5a:53:0c:21:17:7b:2d:e7:72:d5:50:85:46:
         f6:fb:60:91:a6:e8:29:9a:b7:c7:06:e6:1d:d0:16:1a:ae:f7:
         21:b4:78:15:74:c4:f2:4e:75:a8:c2:f4:aa:3d:45:50:68:69:
         f0:63:e6:de:ce:73:dd:08:b2:60:82:7e:7a:f5:b8:68:08:77:
         de:4f:e8:15:3f:5e:0c:70:04:db:11:15:97:5a:68:31:1d:3f:
         a3:d3:0e:0d:d4:54:4a:5c:e1:6c:38:c9:97:93:8e:ed:a9:03:
         29:79:53:0b:2f:76:4d:2c:00:f8:60:14:03:a6:09:56:d2:83:
         ee:35:3b:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 11:41:41 2026 by rpki-client