Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/22dfbc20-b48d-4ad3-9ada-aaa1a88570dc/b34b4720-1cd8-3efd-b8ef-cbe859c2c468.roa
File:                     b34b4720-1cd8-3efd-b8ef-cbe859c2c468.roa (raw, json)
Hash identifier:          bZoKnG+g0idU2WOcuOjGDeB6H681g/aB8Xx0APMmrng=
Subject key identifier:   78:E9:AB:44:94:93:6E:C0:7C:3D:D9:4E:77:02:58:9E:2F:7A:85:40
Certificate issuer:       /CN=22dfbc20-b48d-4ad3-9ada-aaa1a88570dc
Certificate serial:       010D0C9F4328584DB1DAC8C639EE174FE5686A80
Authority key identifier: D4:24:69:AB:E4:65:51:C8:5E:22:B8:EF:B2:A7:BA:52:F1:62:65:80
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/22dfbc20-b48d-4ad3-9ada-aaa1a88570dc.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/22dfbc20-b48d-4ad3-9ada-aaa1a88570dc/b34b4720-1cd8-3efd-b8ef-cbe859c2c468.roa
Signing time:             Sat 02 May 2026 01:00:24 +0000
ROA not before:           Sat 02 May 2026 01:00:24 +0000
ROA not after:            Fri 31 Jul 2026 01:00:24 +0000
asID:                     19551
IP address blocks:        198.37.57.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/22dfbc20-b48d-4ad3-9ada-aaa1a88570dc/22dfbc20-b48d-4ad3-9ada-aaa1a88570dc.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/22dfbc20-b48d-4ad3-9ada-aaa1a88570dc/22dfbc20-b48d-4ad3-9ada-aaa1a88570dc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/22dfbc20-b48d-4ad3-9ada-aaa1a88570dc.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 15 May 2026 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:b1:da:c8:c6:39:ee:17:4f:e5:68:6a:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=22dfbc20-b48d-4ad3-9ada-aaa1a88570dc
        Validity
            Not Before: May  2 01:00:24 2026 GMT
            Not After : Jul 31 01:00:24 2026 GMT
        Subject: CN=c5e70347-0eb2-4efd-a4ca-70cf476a28f5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:31:08:1b:c2:0c:4f:63:17:58:38:6f:39:d4:
                    d3:8e:67:43:bd:3b:47:09:d7:e2:24:53:f7:6d:3e:
                    3a:a6:f7:95:9e:98:e0:75:fe:bd:8f:d5:fe:e1:e7:
                    1b:78:99:de:08:a2:de:8b:35:5a:49:a2:e0:9d:f4:
                    fe:3b:5f:89:cd:68:be:43:f7:6d:5e:9a:89:37:33:
                    79:af:f4:6b:a8:c3:26:ff:00:6a:cc:92:18:29:6e:
                    e8:c6:f2:7c:0d:52:bf:bc:60:2c:02:81:d1:fb:a3:
                    83:e1:be:f7:37:b6:5a:46:f4:06:e2:b7:e8:ab:86:
                    b2:e6:66:49:62:31:78:03:ac:8e:d5:32:0e:bd:6d:
                    1b:3e:25:ed:12:f9:14:23:17:07:dc:b1:f6:35:3d:
                    c2:05:d3:fb:45:7a:a8:36:6b:03:47:cb:fa:6f:d0:
                    c7:64:cf:84:92:4f:a0:26:69:d0:65:3b:fd:4c:fd:
                    5b:00:e0:4b:ee:3b:8a:33:94:79:80:87:5d:7a:73:
                    23:20:6f:51:56:aa:ad:9c:b9:e9:cb:50:3e:b4:71:
                    92:82:6d:11:20:0e:cb:30:a7:6c:a7:73:aa:d1:fd:
                    d3:9a:c5:79:cf:2d:36:56:42:cd:77:e3:0c:77:41:
                    da:95:f0:39:7f:40:b3:04:29:c5:a1:3c:9b:4c:46:
                    c3:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                78:E9:AB:44:94:93:6E:C0:7C:3D:D9:4E:77:02:58:9E:2F:7A:85:40
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/22dfbc20-b48d-4ad3-9ada-aaa1a88570dc/b34b4720-1cd8-3efd-b8ef-cbe859c2c468.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/22dfbc20-b48d-4ad3-9ada-aaa1a88570dc/22dfbc20-b48d-4ad3-9ada-aaa1a88570dc.crl

            X509v3 Authority Key Identifier:
                keyid:D4:24:69:AB:E4:65:51:C8:5E:22:B8:EF:B2:A7:BA:52:F1:62:65:80

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/22dfbc20-b48d-4ad3-9ada-aaa1a88570dc.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  198.37.57.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         75:4a:a4:79:13:40:77:7e:33:08:55:79:da:ca:f2:9f:66:b5:
         95:34:69:40:f6:52:cd:99:19:d3:a7:86:ba:7d:c1:24:65:59:
         bb:c7:df:08:11:47:ba:e2:14:8e:21:0c:b6:d8:76:87:e8:e7:
         f7:ec:17:b1:af:d4:c7:5a:f7:f5:c0:04:64:bf:78:89:24:8d:
         8e:a2:7e:76:82:c4:0c:8a:d8:9a:ee:6f:41:ba:1e:3e:79:a8:
         ca:ed:c1:6a:6c:9a:af:64:cf:0c:19:9a:55:2d:4e:4d:b7:70:
         89:fc:65:10:00:a6:b6:35:f8:07:2a:c3:8a:6c:d3:01:4f:ab:
         7b:4a:7e:04:b4:5e:b9:4e:65:23:4e:39:91:49:da:78:ce:14:
         85:fc:62:e0:a1:ad:cd:9c:bb:04:4b:b9:6a:13:f9:20:47:4f:
         e6:24:52:a7:31:ad:64:83:41:ad:30:a9:b4:56:53:8c:dc:c4:
         ce:0f:71:9c:da:85:74:67:52:77:c6:54:61:12:01:3b:b1:f1:
         81:70:b9:4e:de:03:53:02:68:2b:6a:93:d8:e7:90:e5:dd:d1:
         d7:7d:48:ad:3c:bb:9e:78:7d:85:3b:24:ae:cf:b5:fa:6b:d3:
         05:1f:4d:6a:39:96:e3:9b:90:4f:87:f7:bc:e1:9a:8e:41:51:
         b1:29:d2:ee
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 07:51:21 2026 by rpki-client