Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/5599678a-c6a8-4921-aa0a-62a64b2f1631/0184950f-9c02-3248-a632-9f96a6f085f9.roa
File:                     0184950f-9c02-3248-a632-9f96a6f085f9.roa (raw, json)
Hash identifier:          2RCSBnYXl2YasYMnK5DdtuaIEb5J1VKVb2uNh+CNa9o=
Subject key identifier:   B5:2D:7E:41:C3:8F:41:53:B6:EC:CF:9D:7A:BB:EE:82:D1:9F:96:F1
Certificate issuer:       /CN=5599678a-c6a8-4921-aa0a-62a64b2f1631
Certificate serial:       010D0C9F4328584E7634D9B8290938A8892BC5C0
Authority key identifier: A7:57:A4:B1:32:85:CF:43:2E:0E:54:6F:2F:1A:B3:97:5E:12:40:5C
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/5599678a-c6a8-4921-aa0a-62a64b2f1631.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/5599678a-c6a8-4921-aa0a-62a64b2f1631/0184950f-9c02-3248-a632-9f96a6f085f9.roa
Signing time:             Sat 11 Jul 2026 09:00:12 +0000
ROA not before:           Sat 11 Jul 2026 09:00:12 +0000
ROA not after:            Fri 09 Oct 2026 09:00:12 +0000
asID:                     398437
IP address blocks:        170.39.36.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/5599678a-c6a8-4921-aa0a-62a64b2f1631/5599678a-c6a8-4921-aa0a-62a64b2f1631.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/5599678a-c6a8-4921-aa0a-62a64b2f1631/5599678a-c6a8-4921-aa0a-62a64b2f1631.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/5599678a-c6a8-4921-aa0a-62a64b2f1631.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 25 Jul 2026 23:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:76:34:d9:b8:29:09:38:a8:89:2b:c5:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5599678a-c6a8-4921-aa0a-62a64b2f1631
        Validity
            Not Before: Jul 11 09:00:12 2026 GMT
            Not After : Oct  9 09:00:12 2026 GMT
        Subject: CN=d2092228-1d8a-4083-a882-f9ac00a94143
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:0d:38:72:53:9d:90:0e:b7:5d:15:ca:c4:a1:
                    ed:1a:e9:85:56:71:e7:59:74:1e:af:7c:88:c7:d5:
                    15:b4:95:d4:ad:2c:93:ab:59:82:aa:11:b0:ca:af:
                    2c:95:2e:2e:d3:37:5b:a2:50:75:75:a8:4c:68:49:
                    22:fe:b9:0d:1b:41:0c:78:36:1e:ed:96:6a:05:6a:
                    45:cd:8e:bf:c1:48:08:3e:a1:ab:1c:6f:9f:90:fa:
                    d2:00:c2:fd:a2:21:84:3f:34:d3:b7:8f:ac:0f:e2:
                    06:13:36:55:bd:34:f9:fd:1d:cd:14:ad:b8:ad:4d:
                    22:53:c8:41:6b:aa:1c:c2:39:9d:5c:7c:e9:01:75:
                    24:64:88:71:78:0d:cd:9a:0d:48:6d:62:e4:6a:03:
                    cf:da:8c:99:a9:3e:2c:23:04:ff:78:a4:68:7c:14:
                    81:50:6d:9b:91:6b:bf:de:39:6e:cb:d5:28:e5:5a:
                    73:b4:21:e1:5d:57:ad:a1:be:64:20:73:87:82:7e:
                    26:a2:07:52:e8:de:f3:66:a1:9f:7d:0d:2c:cb:87:
                    8f:59:9c:24:2b:57:80:63:d6:d7:3d:94:b8:43:70:
                    71:68:35:e0:18:1c:56:96:78:c1:d5:98:1c:ae:f5:
                    a1:a6:37:cd:1c:11:e0:c6:54:2b:84:87:05:1b:4e:
                    0f:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B5:2D:7E:41:C3:8F:41:53:B6:EC:CF:9D:7A:BB:EE:82:D1:9F:96:F1
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/5599678a-c6a8-4921-aa0a-62a64b2f1631/0184950f-9c02-3248-a632-9f96a6f085f9.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/5599678a-c6a8-4921-aa0a-62a64b2f1631/5599678a-c6a8-4921-aa0a-62a64b2f1631.crl

            X509v3 Authority Key Identifier:
                keyid:A7:57:A4:B1:32:85:CF:43:2E:0E:54:6F:2F:1A:B3:97:5E:12:40:5C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/5599678a-c6a8-4921-aa0a-62a64b2f1631.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.39.36.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         06:bb:1d:ab:6f:cc:89:85:2b:9c:91:16:60:db:05:57:b7:d1:
         f4:9f:bc:6b:2f:51:a6:c4:f6:e2:f7:b1:87:64:2d:54:1d:25:
         c0:79:55:a6:47:40:67:0c:ee:42:48:a5:61:81:d6:ea:5c:10:
         b4:23:b0:9b:cf:0b:a9:74:42:7b:c5:1f:d0:ee:fb:ab:78:91:
         46:e6:36:d2:1c:72:e7:ac:84:29:d8:d1:f9:be:cf:19:f5:a0:
         84:66:9e:72:6c:53:71:2e:fb:bb:eb:cf:dc:ba:4e:db:27:5f:
         02:1a:8a:61:f2:18:07:5b:0b:2e:9c:e9:e5:c2:ad:e5:9d:1e:
         6d:b0:50:8e:1e:c1:68:7e:23:e8:2d:69:34:5b:3f:3a:9d:db:
         51:b0:93:1d:c2:64:b6:75:42:6b:33:d2:8e:1e:bb:1a:c5:66:
         48:a2:85:09:45:99:a7:d5:d0:ce:0c:bf:94:1e:b8:12:89:a9:
         d1:fd:05:59:83:ce:ba:4e:a7:8a:52:47:b5:4a:f4:8b:ab:ee:
         40:90:16:03:d4:4d:e1:a4:f6:06:d0:5e:72:e2:c6:c5:39:d1:
         58:6f:28:77:b7:41:2f:b0:19:ef:28:40:0e:55:90:ba:51:72:
         89:ee:25:72:21:e2:0d:f0:f8:81:dd:89:1e:3b:09:fb:bf:16:
         c0:10:1e:b4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 19:10:56 2026 by rpki-client