Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/22dfbc20-b48d-4ad3-9ada-aaa1a88570dc/1e788b41-99de-379a-9958-302dd777c7bd.roa
File:                     1e788b41-99de-379a-9958-302dd777c7bd.roa (raw, json)
Hash identifier:          cu1YK94QsIvMqj2tRh+6Som6pfIeiTdw4XHd0u5R+8Y=
Subject key identifier:   EF:2D:75:E8:8C:9C:7D:43:35:73:BD:7B:A4:CA:79:05:67:BF:76:10
Certificate issuer:       /CN=22dfbc20-b48d-4ad3-9ada-aaa1a88570dc
Certificate serial:       010D0C9F4328584E5FDF53C8DC377DB3037DF940
Authority key identifier: D4:24:69:AB:E4:65:51:C8:5E:22:B8:EF:B2:A7:BA:52:F1:62:65:80
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/22dfbc20-b48d-4ad3-9ada-aaa1a88570dc.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/22dfbc20-b48d-4ad3-9ada-aaa1a88570dc/1e788b41-99de-379a-9958-302dd777c7bd.roa
Signing time:             Fri 03 Jul 2026 09:00:12 +0000
ROA not before:           Fri 03 Jul 2026 09:00:12 +0000
ROA not after:            Thu 01 Oct 2026 09:00:12 +0000
asID:                     19551
IP address blocks:        198.37.48.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/22dfbc20-b48d-4ad3-9ada-aaa1a88570dc/22dfbc20-b48d-4ad3-9ada-aaa1a88570dc.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/22dfbc20-b48d-4ad3-9ada-aaa1a88570dc/22dfbc20-b48d-4ad3-9ada-aaa1a88570dc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/22dfbc20-b48d-4ad3-9ada-aaa1a88570dc.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 26 Jul 2026 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:5f:df:53:c8:dc:37:7d:b3:03:7d:f9:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=22dfbc20-b48d-4ad3-9ada-aaa1a88570dc
        Validity
            Not Before: Jul  3 09:00:12 2026 GMT
            Not After : Oct  1 09:00:12 2026 GMT
        Subject: CN=24cc82db-8bb8-4cf7-9afc-e8fefb2a330b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:89:c9:50:ea:10:d8:b1:29:08:ca:fe:2e:b1:36:
                    09:d9:60:69:1a:d3:49:46:be:87:ac:0d:cc:68:28:
                    a5:e0:b9:0a:10:18:d4:d6:bd:08:06:98:07:6c:1d:
                    2f:11:5e:f6:49:6c:66:f9:73:47:f2:ed:b4:b9:d6:
                    cb:3a:f8:93:34:ad:7e:1a:80:1e:f2:5f:b1:41:3d:
                    b8:4e:55:ab:f0:5a:f9:70:d8:8a:6d:6b:ce:e1:63:
                    f0:d6:52:c2:60:16:75:48:e4:e4:43:3f:f6:42:87:
                    0c:7b:2d:6d:24:29:da:2b:31:86:f8:5f:ed:dc:20:
                    b1:7a:c5:58:f3:8f:10:7a:73:3b:c2:c0:a9:b5:3d:
                    ea:81:08:1c:9a:13:ef:f6:7e:24:d4:d1:1f:06:a2:
                    c2:96:10:0a:c6:d4:dc:25:f6:5f:ad:20:87:e5:22:
                    8c:84:9e:c7:fb:de:1f:87:ae:e8:d8:dc:40:4f:65:
                    73:c5:6c:3d:a6:41:8a:b7:5f:6d:4d:4e:a7:a0:57:
                    fa:46:c5:5e:89:68:f7:4d:18:b8:58:ce:48:4a:61:
                    d7:73:c7:9e:fe:21:86:26:c0:7e:12:f7:1c:13:a9:
                    97:0a:14:ff:de:6d:50:3d:c0:d0:4d:22:a5:1c:10:
                    94:c5:bf:06:9c:14:cf:46:94:d2:c9:72:d0:12:92:
                    78:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EF:2D:75:E8:8C:9C:7D:43:35:73:BD:7B:A4:CA:79:05:67:BF:76:10
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/22dfbc20-b48d-4ad3-9ada-aaa1a88570dc/1e788b41-99de-379a-9958-302dd777c7bd.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/22dfbc20-b48d-4ad3-9ada-aaa1a88570dc/22dfbc20-b48d-4ad3-9ada-aaa1a88570dc.crl

            X509v3 Authority Key Identifier:
                keyid:D4:24:69:AB:E4:65:51:C8:5E:22:B8:EF:B2:A7:BA:52:F1:62:65:80

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/22dfbc20-b48d-4ad3-9ada-aaa1a88570dc.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  198.37.48.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7d:f8:8f:ee:ac:52:e5:71:d5:cf:43:cc:37:c7:85:1a:a2:75:
         d5:52:26:e9:85:5f:a0:53:03:8e:e7:fb:50:3d:c6:87:c4:74:
         8f:b0:21:79:19:65:29:40:23:44:57:63:3e:74:ed:cc:80:dd:
         e0:71:e5:60:10:96:a4:a2:04:a5:f2:8f:46:89:21:2b:c5:22:
         04:ec:7a:b9:ad:2e:96:12:3b:c0:b2:c2:f2:45:9c:94:dc:38:
         29:c8:b7:90:76:12:82:5e:32:83:5a:6d:66:fb:56:42:c6:21:
         10:31:05:7f:d9:7b:1c:c8:d6:94:cc:aa:6d:e6:47:13:6c:bf:
         b1:37:02:44:a9:bf:0b:3a:13:94:78:9b:e6:3b:c6:da:1c:40:
         f9:7b:dc:7a:76:03:88:b4:97:1e:a8:53:d2:bf:c5:f7:d2:ca:
         15:2d:f4:73:b4:44:bb:7f:f8:5f:ef:b2:7d:4f:05:54:d0:55:
         02:26:0b:26:55:86:b4:44:7f:89:78:8a:b4:38:6c:81:ae:ea:
         70:02:fd:08:f6:18:1b:df:0b:e9:eb:39:73:01:2f:5b:94:8c:
         d6:52:95:bd:8c:a9:e2:88:bc:16:d4:fe:ea:a1:c6:a5:be:2c:
         b4:86:d3:99:12:32:21:f0:e9:6f:fc:e8:76:7c:ad:0e:5c:81:
         7e:aa:40:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 19:52:58 2026 by rpki-client