Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/5c737c57-5e49-325e-9ac5-08ba915b5a67.roa
File:                     5c737c57-5e49-325e-9ac5-08ba915b5a67.roa (raw, json)
Hash identifier:          VimY9SysCRqIG40qLfJGcjm+rSVXdR+P8IlTWzyMbl8=
Subject key identifier:   9B:9E:2C:AD:74:0F:DC:72:25:2E:2F:4C:9B:A5:65:F2:D4:CD:31:FF
Certificate issuer:       /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45
Certificate serial:       010D0C9F4328584F4988ECA5638AD084807A5A40
Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/5c737c57-5e49-325e-9ac5-08ba915b5a67.roa
Signing time:             Fri 25 Sep 2026 01:00:12 +0000
ROA not before:           Fri 25 Sep 2026 01:00:12 +0000
ROA not after:            Thu 24 Dec 2026 02:00:12 +0000
asID:                     396603
IP address blocks:        198.41.0.10/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 26 Sep 2026 13:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:49:88:ec:a5:63:8a:d0:84:80:7a:5a:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45
        Validity
            Not Before: Sep 25 01:00:12 2026 GMT
            Not After : Dec 24 02:00:12 2026 GMT
        Subject: CN=e121aff3-e080-4f29-84c8-46e4d1f68619
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:88:a0:d9:80:f7:59:2d:29:d3:cb:37:2d:1e:63:
                    75:98:98:b9:31:0e:5b:70:57:6a:df:a7:06:51:81:
                    96:00:c7:b1:e7:4a:86:1d:0f:97:5a:f1:9d:2a:ea:
                    a1:e4:a1:e8:9a:83:f1:9e:01:87:d5:73:6c:66:97:
                    a9:2f:07:da:1e:5d:95:a8:7d:05:85:a6:24:ff:07:
                    79:55:98:dd:81:81:12:82:a1:0e:c5:0e:f6:c2:fd:
                    ba:22:e7:ee:e9:41:92:51:3e:e9:0a:09:5d:bf:9b:
                    45:27:36:a2:0f:a1:72:72:d3:0d:6b:d2:ae:13:69:
                    37:ea:70:e0:7c:eb:64:77:f5:75:1b:ad:12:02:42:
                    8e:13:96:ec:e0:bf:44:7e:13:1b:10:40:6f:2d:13:
                    bf:0b:92:98:a8:24:2c:cf:51:09:ba:b5:22:d8:03:
                    f9:c1:20:cf:19:0c:7d:3a:29:e8:ea:10:3a:5e:1e:
                    4e:fa:ee:06:df:0c:50:88:dd:1a:ec:7e:48:3a:dc:
                    29:84:f2:26:38:43:67:06:22:5f:e5:37:c3:ce:92:
                    56:c5:82:06:15:41:af:3e:24:9a:1a:bb:c8:23:cd:
                    aa:9c:3f:c4:b6:0e:bb:c0:d3:9b:56:f9:2e:c9:6a:
                    ec:f2:72:b5:39:ce:89:6f:8c:9c:32:03:bd:e5:79:
                    16:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9B:9E:2C:AD:74:0F:DC:72:25:2E:2F:4C:9B:A5:65:F2:D4:CD:31:FF
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/5c737c57-5e49-325e-9ac5-08ba915b5a67.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl

            X509v3 Authority Key Identifier:
                keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  198.41.0.10/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         43:5d:ea:8a:92:5a:3c:87:8f:01:2a:a3:9d:3d:d3:cf:a6:fc:
         4d:0b:c1:d2:77:2f:45:47:c5:05:3b:d9:22:2f:ef:63:2a:d8:
         a0:56:a0:13:52:77:94:08:bc:dc:06:23:3d:aa:45:0e:9b:86:
         e5:39:4a:1d:82:74:f0:c8:bf:70:94:6a:b0:bb:3c:62:f2:a1:
         57:40:9c:9a:3b:72:cc:06:a6:51:a4:9a:98:2b:d0:f2:5b:8b:
         4a:51:51:27:0e:67:05:fb:c0:1d:b4:98:67:70:ac:a1:7f:0d:
         77:d8:d4:9d:33:10:5e:33:ea:d8:11:22:c2:a1:b6:02:da:0a:
         4c:95:a8:f3:19:1d:5a:da:8a:0a:eb:d1:11:43:a5:f0:ed:1a:
         c4:5e:62:a1:be:7e:94:c6:0b:8f:a1:91:77:14:52:30:1f:45:
         99:5f:75:f9:5c:1a:64:64:11:0c:7d:ed:8f:a5:32:a3:78:29:
         6d:ab:e0:3e:87:2d:54:cf:51:a0:53:d3:5d:1c:c6:3c:fc:46:
         d2:2b:54:d3:87:70:e3:57:79:2e:21:6c:80:31:43:ea:bc:52:
         7f:e4:28:cb:50:d1:31:b2:e3:2c:9f:1a:8e:39:1f:bc:8c:06:
         15:70:e2:86:23:1a:e5:c7:06:92:7e:10:f1:85:91:b4:3f:7e:
         83:29:1b:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 25 05:02:24 2026 by rpki-client